CVE-2008-7034

CVE-2008-7034 affects PHPEcho CMS 2.0 rc3 due to a PHP remote file inclusion in kernel/smarty/Smarty.class.php. The vulnerability allows an attacker to execute arbitrary PHP code by supplying a URL that influences the _smarty_compile_path in the fetch function. Exploitation details are not provid...

CVE-2009-2401

Cross-site scripting XSS vulnerability in PHPEcho CMS 2.0-rc3 allows remote attackers to inject arbitrary web script or HTML via a forum post...

My Dealer CMS 2.0 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. ----------------------------------------------------- ----------------------------------------------------- My Dealer Cms 2.0 auth Bypass Remote Sql Injecion ----------------------------------------------------- Founder: ThE g0bL!NDz Home: www.h4ckf0ru.com Vive...

Simbas CMS 2.0 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. ----------------------------------------------------- ----------------------------------------------------- Simbas Content Management System auth Bypass Remote Sql Injecion ----------------------------------------------------- Founder: ThE g0bL!NDz Home:...

My Dealer CMS 2.0 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== My Dealer CMS 2.0 Auth Bypass SQL Injection Vulnerability =========================================================== ----------------------------------------------------- My Deal...

My Dealer CMS 2.0 SQL Injection

----------------------------------------------------- ----------------------------------------------------- My Dealer Cms 2.0 auth Bypass Remote Sql Injecion ----------------------------------------------------- Founder: ThE g0bL!NDz Home: www.h4ckf0ru.com Vive Algerie demo :...

My Dealer CMS 2.0 - Authentication Bypass

My Dealer CMS 2.0 - Authentication Bypass ----------------------------------------------------- ----------------------------------------------------- My Dealer Cms 2.0 auth Bypass Remote Sql Injecion ----------------------------------------------------- Founder: ThE g0bL!NDz Home: www.h4ckf0ru.co...

Simbas CMS 2.0 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================== Simbas CMS 2.0 Auth Bypass SQL Injection Vulnerability ======================================================== ----------------------------------------------------- Simbas Content...

My Dealer CMS 2.0 - Authentication Bypass

----------------------------------------------------- ----------------------------------------------------- My Dealer Cms 2.0 auth Bypass Remote Sql Injecion ----------------------------------------------------- Founder: ThE g0bL!NDz Home: www.h4ckf0ru.com Vive Algerie demo :...

CVE-2009-0729

Summary (CVE-2009-0729) : Multiple directory traversal vulnerabilities affect Page Engine CMS 2.0 Basic and Pro. The flaw allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the fPrefix parameter to (1) modules/recent_poll_include.php, (2) mod...

IF-CMS 2.0 - 'id' Blind SQL Injection

--+++=======================================================+++-- --+++====== IF-CMS 4 return true; else return false; function usage echo "\nIF-CMS ". "\n+ Ex. : php xpl.php localhost /IF-CMS root". "\n\n"; exit ; if $argc != 4 usage ; $hostname = $argv 1; $path...

eVision CMS 2.0 SQL Injection

--+++============================================================+++-- --+++====== eVision CMS 78 79 80 81 82 '.settext$row$GET'field'.' 83 84 '; + It prints admin's password hashed: + /iframe.php?field=pass&module=users&id=1...

eVision CMS 2.0 - SQL Injection

eVision CMS 2.0 - SQL Injection --+++============================================================+++-- --+++====== eVision CMS 78 79 80 81 82 '.settext$row$GET'field'.' 83 84 '; + It prints admin's password hashed: + /iframe.php?field=pass&module=users&id=1 milw0rm.com 2009-01-30...

Sql injection

SQL injection vulnerability in search.php in iGaming CMS 2.0 Alpha 1 allows remote attackers to execute arbitrary SQL commands via the keywords parameter in a searchgames action...

iGaming CMS 2.0 Alpha 1 (search.php) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl ----------------------------------------------------- iGaming CMS 2.0 Alpha 1 Remote SQL Injection Exploit By StAkeR aka athos - StAkeRathotmaildotit On 16/10/2008 http://www.igamingcms.com/iGaming2Alpha.zip...

iGaming CMS 2.0 Alpha 1 - search.php SQL Injection

iGaming CMS 2.0 Alpha 1 - search.php SQL Injection !/usr/bin/perl ----------------------------------------------------- iGaming CMS 2.0 Alpha 1 Remote SQL Injection Exploit By StAkeR aka athos - StAkeRathotmaildotit On 16/10/2008 http://www.igamingcms.com/iGaming2Alpha.zip...

iGaming CMS 2.0 Alpha 1 - 'search.php' SQL Injection

!/usr/bin/perl ----------------------------------------------------- iGaming CMS 2.0 Alpha 1 Remote SQL Injection Exploit By StAkeR aka athos - StAkeRathotmaildotit On 16/10/2008 http://www.igamingcms.com/iGaming2Alpha.zip ----------------------------------------------------- use strict; use...

samartcms-sql.txt

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl samart-cms 2.0 Remote SQL Injection Vulnerability Script site: http://samart.6x.to/ Vuln:...

samart-cms 2.0 - 'contentsid' SQL Injection

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl samart-cms 2.0 Remote SQL Injection Vulnerability Script site: http://samart.6x.to/ Vuln:...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in PHPEcho CMS 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the 1 pluginfile parameter to smarty/internals/core.loadpulgins.php or the 2 rootpath parameter to index.php. NOTE: CVE disputes 1 because the inclusion occurs...