Insufficient Anti-automation и DoS уязвимости в CMS SiteLogic

Здравствуйте 3APA3A! В дополнение к предыдущим уязвимостям в CMS SiteLogic, сообщаю вам о найденных мною Insufficient Anti-automation и Denial of Service уязвимостях в CMS SiteLogic. Это украинская коммерческая CMS. Insufficient Anti-automation WASC-21: http://site/?mid=1 В контактной форме нет...

CMS SiteLogic Cross Site Scripting / Shell Upload

Hello Full-Disclosure! I want to warn you about new security vulnerabilities in CMS SiteLogic. It's Ukrainian commercial CMS. In addition to previously reported vulnerabilities, I will report about vulnerabilities in this CMS, which I disclosed in 2009 it's second advisory with vulnerabilities...

CMS SiteLogic SQL Injection

Hello Bugtraq! I want to warn you about security vulnerabilities in CMS SiteLogic. It's Ukrainian commercial CMS. ----------------------------- Advisory: Vulnerabilities in CMS SiteLogic ----------------------------- URL: http://websecurity.com.ua/3935/ ----------------------------- Affected...

New vulnerabilities in CMS SiteLogic

Здравствуйте 3APA3A! Сообщаю вам о найденных мною SQL Injection, Local File Inclusion, Directory Traversal и Full path disclosure уязвимостях в CMS SiteLogic. Это украинская коммерческая CMS. SQL Injection: http://site/?fun=-120or20version3E4 Local File Inclusion через SQL Injection:...

New vulnerabilities in CMS SiteLogic

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting и Command Execution уязвимостях в CMS SiteLogic. XSS: http://site/?mid=223E3Cscript3Ealertdocument.cookie3C/script3E Command Execution: Возможна загрузка произвольных файлов shell upload через модуль “Баннерная система” в...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. CMS SiteLogic: SQL injection, crossite scripting, information leak...

Vulnerabilities in CMS SiteLogic

Здравствуйте 3APA3A! Сообщаю вам о найденных мною SQL Injection, Full path disclosure и Cross-Site Scripting уязвимостях в CMS SiteLogic. SQL Injection: http://site/index.php?mid=-120union20select201,1,version,1,1,1,1,1 Full path disclosure: http://site/index.php?mid=’ http://site/includes/stat.p...