288 matches found
PYSEC-2021-85
Plone through 5.2.4 allows XSS via the inlinediff methods in Products.CMFDiffTool...
Plone 跨站脚本漏洞
Plone is the industry's leading open source CMS system for content management, document management and knowledge management. A cross-site scripting vulnerability exists in Plone 5.2.4 and earlier versions. The vulnerability can be exploited to conduct cross-site scripting attacks via the inlinedi...
appRain CMF Arbitrary PHP File Upload Vulnerability
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
appRain CMF <= 0.1.5 (uploadify.php) Unrestricted File Upload Exploit
No description provided by source. ?php / --------------------------------------------------------------------- appRain CMF = 0.1.5 uploadify.php Unrestricted File Upload Exploit --------------------------------------------------------------------- author............: Egidio Romano aka EgiX...
appRain CMF 0.1.5 - Multiple Web Vulnerabilities
No description provided by source. Title: ====== appRain CMF v0.1.5 - Multiple Web Vulnerabilities Date: ===== 2011-12-17 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=362 VL-ID: ===== 362 Introduction: ============= appRain is one of the first officially released...
CVE-2013-6058
SQL injection vulnerability in appRain CMF 3.0.2 and earlier allows remote attackers to execute arbitrary SQL commands via the PATHINFO to blog-by-cat/...
Sql injection
SQL injection vulnerability in appRain CMF 3.0.2 and earlier allows remote attackers to execute arbitrary SQL commands via the PATHINFO to blog-by-cat/...
CVE-2013-6058
CVE-2013-6058 affects appRain CMF 3.0.2 and earlier, exposing a SQL Injection via insufficient validation of user-supplied data appended to “/blog-by-cat/”. Remote attackers can execute arbitrary SQL commands (CWE-89); impact includes reading/modifying data. Exploitation details are described in ...
CVE-2013-6058
SQL injection vulnerability in appRain CMF 3.0.2 and earlier allows remote attackers to execute arbitrary SQL commands via the PATHINFO to blog-by-cat/...
appRain CMF 3.0.2 - CSRF Add/Delete Admin Account Vulnerability
Exploit for php platform in category web applications Exploit Title: Apprain CMF / CSRF ADD/DELETE administrator's account Date: 2013 29 August Exploit Author: Yashar shahinzadeh Special thanks to Mormoroth Credit goes for: http://y-shahinzadeh.ir & ha.cker.ir Vendor Homepage:...
appRain CMF - Multiple Cross-Site Request Forgery Vulnerabilities
appRain CMF - Multiple Cross-Site Request Forgery Vulnerabilities source: https://www.securityfocus.com/bid/62061/info appRain CMF is prone to multiple cross-site request-forgery vulnerabilities. Exploiting these issues may allow a remote attacker to perform certain unauthorized actions in the...
Apprain 3.0.2 Cross Site Request Forgery
Exploit Title: Apprain CMF / CSRF ADD/DELETE administrator's account Date: 2013 29 August Exploit Author: Yashar shahinzadeh Special thanks to Mormoroth Credit goes for: http://y-shahinzadeh.ir & ha.cker.ir Vendor Homepage: http://www.apprain.com/ Tested on: Linux & Windows, PHP 5.2.9 Affected...
appRain CMF - Multiple Cross-Site Request Forgery Vulnerabilities
source: https://www.securityfocus.com/bid/62061/info appRain CMF is prone to multiple cross-site request-forgery vulnerabilities. Exploiting these issues may allow a remote attacker to perform certain unauthorized actions in the context of the affected application. Other attacks are also possible...
CVE-2011-5229
SQL injection vulnerability in quickstart/profile/index.php in the Forum module in appRain CMF 0.1.5 allows remote attackers to execute arbitrary SQL commands via the PATHINFO...
CVE-2011-5228
Cross-site scripting XSS vulnerability in the Search module quickstart/search in appRain CMF 0.1.5 allows remote attackers to inject arbitrary web script or HTML via the ss parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in the Search module quickstart/search in appRain CMF 0.1.5 allows remote attackers to inject arbitrary web script or HTML via the ss parameter...
Sql injection
SQL injection vulnerability in quickstart/profile/index.php in the Forum module in appRain CMF 0.1.5 allows remote attackers to execute arbitrary SQL commands via the PATHINFO...
CVE-2011-5229
Summary of CVE-2011-5229 (appRain CMF): SQL injection in the Forum module’s quickstart/profile/index.php (PATH_INFO) of appRain CMF 0.1.5 can allow remote SQL commands execution. Affected product/version: appRain CMF