CIS WebServer 3.5.13 Remote Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12662/info A vulnerability has been identified in the handling of certain types of requests by CIS WebServer. Because of this, it is possible for an attacker to gain access to potentially sensitive system files. The probl...

CIS Manager CMS - SQL Injection

No description provided by source. + Sql Injection on CIS Manager CMS + Date: 01/04/2014 + Risk: High + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.construtiva.com.br/ + Contact: [email protected] + Tested on: Windows 7 and Linux + Vulnerable File: default.asp + Dork :...

Construtiva CIS Manager CMS POST SQLi

TL;DR; ====== . PRODUCT : Construtiva CIS Manager . TYPE : SQLi http://site/autenticar/lembrarlogin.asp POST email . CVE : CVE-2014-3749 Software Description ==================== . The CIS Manager platform is a complete and powerful tool to manage sites and corporative portals on the Internet. Th...

CIS Manager 'email' Parameter SQL Injection Vulnerability

CIS Manager is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-3749

SQL injection vulnerability in Construtiva CIS Manager allows remote attackers to execute arbitrary SQL commands via the email parameter to autenticar/lembrarlogin.asp...

Sql injection

SQL injection vulnerability in Construtiva CIS Manager allows remote attackers to execute arbitrary SQL commands via the email parameter to autenticar/lembrarlogin.asp...

CVE-2014-3749

SQL injection vulnerability in Construtiva CIS Manager allows remote attackers to execute arbitrary SQL commands via the email parameter to autenticar/lembrarlogin.asp...

CVE-2014-3749

CVE-2014-3749 affects Construtiva CIS Manager. The vulnerability is an SQL injection in the POST parameter email to autenticar/lembrarlogin.asp, allowing remote attackers to infer/modify data by sending crafted input. Documented as error-based SQL injection with the email field, consistent with t...

Construtiva CIS Manager SQL Injection

Construtiva CIS Manager CMS POST SQLi TL;DR; ====== . PRODUCT : Construtiva CIS Manager . TYPE : SQLi http://site/autenticar/lembrarlogin.asp POST email . CVE : CVE-2014-3749 Software Description ==================== . The CIS Manager platform is a complete and powerful tool to manage sites and...

CIS Manager - 'email' SQL Injection

source: https://www.securityfocus.com/bid/67442/info CIS Manager is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit will allow an attacker to compromise the application, access or modify dat...

CIS Manager - email SQL Injection

CIS Manager - email SQL Injection source: https://www.securityfocus.com/bid/67442/info CIS Manager is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit will allow an attacker to compromise the...

CIS Manager CMS /default.asp SQL注入漏洞

No description provided by source...

CIS Manager 'TroncoID' Parameter SQL Injection Vulnerability

CIS Manager is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-2847

SQL injection vulnerability in default.asp in CIS Manager CMS allows remote attackers to execute arbitrary SQL commands via the TroncoID parameter...

CVE-2014-2847

SQL injection vulnerability in default.asp in CIS Manager CMS allows remote attackers to execute arbitrary SQL commands via the TroncoID parameter...

CVE-2014-2847

CVE-2014-2847 affects CIS Manager CMS, where the vulnerability is an SQL injection in the default.asp handling the TroncoID parameter. The root cause is improper input handling allowing an attacker to craft input that leads to arbitrary SQL execution on the backend database. Impact is described a...

CIS Manager 'TroncoID'参数SQL注入漏洞

Bugtraq ID:66590 CIS Manager CMS是一款内容管理系统。 CIS Manager CMS不正确过滤'TroncoID'参数，允许远程攻击者利用漏洞提交特制的SQL查询，操作或获取数据库数据。 0 CIS Manager CMS 目前没有详细解决方案： http://www.construtiva.com.br/...

CIS Manager CMS - SQL Injection

CIS Manager CMS - SQL Injection + Sql Injection on CIS Manager CMS + Date: 01/04/2014 + Risk: High + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.construtiva.com.br/ + Contact: [email protected] + Tested on: Windows 7 and Linux + Vulnerable File: default.asp + Dork :...

CIS Manager CMS - SQL Injection Vulnerability

Exploit for php platform in category web applications + Sql Injection on CIS Manager CMS + Date: 01/04/2014 + Risk: High + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.construtiva.com.br/ + Contact: email protected + Tested on: Windows 7 and Linux + Vulnerable File: default.asp +...

CIS Manager CMS - SQL Injection

Sql Injection on CIS Manager CMS + Date: 01/04/2014 + Risk: High + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.construtiva.com.br/ + Contact: [email protected] + Tested on: Windows 7 and Linux + Vulnerable File: default.asp + Dork : intext:"Powered by CIS Manager" +...