Insufficient Anti-automation и DoS уязвимости в CMS SiteLogic

Здравствуйте 3APA3A! В дополнение к предыдущим уязвимостям в CMS SiteLogic, сообщаю вам о найденных мною Insufficient Anti-automation и Denial of Service уязвимостях в CMS SiteLogic. Это украинская коммерческая CMS. Insufficient Anti-automation WASC-21: http://site/?mid=1 В контактной форме нет...

CMS SiteLogic Cross Site Scripting / Shell Upload

Hello Full-Disclosure! I want to warn you about new security vulnerabilities in CMS SiteLogic. It's Ukrainian commercial CMS. In addition to previously reported vulnerabilities, I will report about vulnerabilities in this CMS, which I disclosed in 2009 it's second advisory with vulnerabilities...

CMS SiteLogic SQL Injection

Hello Bugtraq! I want to warn you about security vulnerabilities in CMS SiteLogic. It's Ukrainian commercial CMS. ----------------------------- Advisory: Vulnerabilities in CMS SiteLogic ----------------------------- URL: http://websecurity.com.ua/3935/ ----------------------------- Affected...

New vulnerabilities in CMS SiteLogic

Здравствуйте 3APA3A! Сообщаю вам о найденных мною SQL Injection, Local File Inclusion, Directory Traversal и Full path disclosure уязвимостях в CMS SiteLogic. Это украинская коммерческая CMS. SQL Injection: http://site/?fun=-120or20version3E4 Local File Inclusion через SQL Injection:...

New vulnerabilities in CMS SiteLogic

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting и Command Execution уязвимостях в CMS SiteLogic. XSS: http://site/?mid=223E3Cscript3Ealertdocument.cookie3C/script3E Command Execution: Возможна загрузка произвольных файлов shell upload через модуль “Баннерная система” в...

Vulnerabilities in CMS SiteLogic

Здравствуйте 3APA3A! Сообщаю вам о найденных мною SQL Injection, Full path disclosure и Cross-Site Scripting уязвимостях в CMS SiteLogic. SQL Injection: http://site/index.php?mid=-120union20select201,1,version,1,1,1,1,1 Full path disclosure: http://site/index.php?mid=’ http://site/includes/stat.p...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. CMS SiteLogic: SQL injection, crossite scripting, information leak...