CVE-2014-3749: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Construtiva CIS Manager allows remote attackers to execute arbitrary SQL commands via the email parameter to autenticar/lembrarlogin.asp...

PT-2014-5478

Name of the Vulnerable Software and Affected Versions Construtiva CIS Manager affected versions not specified Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the email parameter to "autenticar/lembrarlogin.asp" API endpoint. Recommendations At the...

Construtiva CIS Manager SQL Injection

Construtiva CIS Manager CMS POST SQLi TL;DR; ====== . PRODUCT : Construtiva CIS Manager . TYPE : SQLi http://site/autenticar/lembrarlogin.asp POST email . CVE : CVE-2014-3749 Software Description ==================== . The CIS Manager platform is a complete and powerful tool to manage sites and...

CIS Manager - email SQL Injection

CIS Manager - email SQL Injection source: https://www.securityfocus.com/bid/67442/info CIS Manager is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit will allow an attacker to compromise the...

CIS Manager - 'email' SQL Injection

source: https://www.securityfocus.com/bid/67442/info CIS Manager is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit will allow an attacker to compromise the application, access or modify dat...

CIS Manager CMS /default.asp SQL注入漏洞

No description provided by source...

CIS Manager 'TroncoID' Parameter SQL Injection Vulnerability

CIS Manager is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-2847

SQL injection vulnerability in default.asp in CIS Manager CMS allows remote attackers to execute arbitrary SQL commands via the TroncoID parameter...

CVE-2014-2847

CVE-2014-2847 affects CIS Manager CMS, where the vulnerability is an SQL injection in the default.asp handling the TroncoID parameter. The root cause is improper input handling allowing an attacker to craft input that leads to arbitrary SQL execution on the backend database. Impact is described a...

CVE-2014-2847

SQL injection vulnerability in default.asp in CIS Manager CMS allows remote attackers to execute arbitrary SQL commands via the TroncoID parameter...

CVE-2014-2847: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in default.asp in CIS Manager CMS allows remote attackers to execute arbitrary SQL commands via the TroncoID parameter...

PT-2014-4915

Name of the Vulnerable Software and Affected Versions CIS Manager CMS affected versions not specified Description A SQL injection issue exists in the default.asp file of CIS Manager CMS, allowing remote attackers to execute arbitrary SQL commands by manipulating the TroncoID parameter in the...

CIS Manager 'TroncoID'参数SQL注入漏洞

Bugtraq ID:66590 CIS Manager CMS是一款内容管理系统。 CIS Manager CMS不正确过滤'TroncoID'参数，允许远程攻击者利用漏洞提交特制的SQL查询，操作或获取数据库数据。 0 CIS Manager CMS 目前没有详细解决方案： http://www.construtiva.com.br/...

CIS Manager CMS - SQL Injection

CIS Manager CMS - SQL Injection + Sql Injection on CIS Manager CMS + Date: 01/04/2014 + Risk: High + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.construtiva.com.br/ + Contact: [email protected] + Tested on: Windows 7 and Linux + Vulnerable File: default.asp + Dork :...

CIS Manager CMS - SQL Injection

Sql Injection on CIS Manager CMS + Date: 01/04/2014 + Risk: High + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.construtiva.com.br/ + Contact: [email protected] + Tested on: Windows 7 and Linux + Vulnerable File: default.asp + Dork : intext:"Powered by CIS Manager" +...

CIS Manager CMS - SQL Injection Vulnerability

Exploit for php platform in category web applications + Sql Injection on CIS Manager CMS + Date: 01/04/2014 + Risk: High + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.construtiva.com.br/ + Contact: email protected + Tested on: Windows 7 and Linux + Vulnerable File: default.asp +...

[SecureCheq v1.0] The Security Configuration Management made easy!

SecureCheq is a fast, simple utility for Windows servers and desktops that answers these questions while it tests for common configuration risks. This free utility: Tests for a subset of typical and often dangerous Windows configuration errors Provides detailed remediation and repair advice Tests...

CIS Manager SQL Injection

Exploit Title : CIS Manager SQL Injection Vulnerabilites Exploit Author : Ashiyane Digital Security Team Software Link : http://www.construtiva.com.br Tested on: Windows 7 , Linux Google Dork : intext:"Powered by CIS Manager" Date: 2013/09/10...

Team GhostShell leak One Million Records

TeamGhostShell a team linked with the Activist group Anonymous, is claiming that they have hacked some major U.S. institutions including major banking institutions, accounts of politicians and has posted those details online. The dumps comprising of millions of accounts has been let loose on the...

mysql-audit NSE Script

Audits MySQL database server security configuration against parts of the CIS MySQL v1.0.2 benchmark the engine can be used for other MySQL audits by creating appropriate audit files. Script Arguments mysql-audit.password the password with which to connect to the database mysql-audit.username the...