Directory traversal

Acidcat CMS 3.5.x does not prevent access to install.asp after installation finishes, which might allow remote attackers to restart the installation process and have unspecified other impact via requests to install.asp and other install.asp scripts. NOTE: the final installation screen states...

Subdreamer 3.0.1 - CMS upload

======================================================================================== | Title : Subdreamer.v3.0.1 cms upload Vulnerability | Author : indoushka | email : [email protected] | Home : www.h4kz.com | Web Site : | Dork : Website powered by Subdreamer CMS & Sequel Theme Designed ...

jCore CMS Cross Site Scripting Vulnerability

Exploit for unknown platform in category web applications ============================================ jCore CMS Cross Site Scripting Vulnerability ============================================ Found: loneferret Vendor: jCore Site: http://www.jcore.net/home Software link:...

MULTIPLE ARBITRARY INFORMATION DISCLOSURE AND EDITION --ILIAS LMS <= 3.10.7/3.9.9-->

-------------------------------------------------------------------------------------- MULTIPLE ARBITRARY INFORMATION DISCLOSURE AND EDITION --ILIAS LMS = 3.10.7/3.9.9-- -------------------------------------------------------------------------------------- CMS INFORMATION: --WEB:...

ILIAS LMS <= 3.9.9/3.10.7 Arbitrary Edition/Info Disclosure Vulns

Exploit for unknown platform in category web applications ================================================================= ILIAS LMS WEB: http://www.ilias.de/ | |--DOWNLOAD: http://www.ilias.de/docu/goto.php?target=st22935&clientid=docu | |--DEMO: http://www.demo.ilias-support.com/ | |--CATEGORY...

d.net CMS Arbitrary Reinstall/Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================================= d.net CMS Arbitrary Reinstall/Blind SQL Injection Exploit ========================================================= + Arbitrary Re-Installation Vulnerability There's no check about...

CVE-2009-2332

CMS Chainuk 1.2 and earlier allows remote attackers to obtain sensitive information via 1 a crafted id parameter to index.php or 2 a nonexistent folder name in the id parameter to admin/admindelete.php, which reveals the installation path in an error message...

FretsWeb 1.2 (name) Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ====================================================== FretsWeb 1.2 name Remote Blind SQL Injection Exploit ====================================================== !/usr/bin/python...

Kjtechforce mailman b1 (dest) Remote Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...

Dog Pedigree Online Database 1.0.1b - Multiple SQL Injections

|| || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ---------------------------------------------------------------------------------------------- | MULTIPLE SQL...

Shutter 0.1.1 - Multiple SQL Injections

Shutter 0.1.1 - Multiple SQL Injections || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...

USER OPTIONS CHANGER EXPLOIT --MiniTwitter v0.2-Beta+-&gt;

!-- ----------------------------------------------------------------- USER OPTIONS CHANGER EXPLOIT --MiniTwitter v0.2-Beta+- ----------------------------------------------------------------- CMS INFORMATION: +-WEB: http://mt.bioscriptsdb.com/ +-DOWNLOAD: http://sourceforge.net/projects/minitt/...

MiniTwitter 0.2b Remote User Options Changer Exploit

No description provided by source. !-- || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ---------...

ProjectCMS 1.0b - &#039;index.php?sn&#039; SQL Injection

|| || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ---------------------------------------------------------------------------------------------- | SQL INJECTIO...

Orooj CMS - &#039;news.php&#039; SQL Injection

source: https://www.securityfocus.com/bid/33908/info Orooj CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify dat...

lcms: insufficient input validation in ReadEmbeddedTextTag

Buffer overflow in the ReadEmbeddedTextTag function in src/cmsio1.c in Little cms color engine aka lcms before 1.16 allows attackers to have an unknown impact via vectors related to a length parameter inconsistency involving the contents of "the input file," a different vulnerability than...

siteadmincms-sql.txt

SiteAdmin CMS Remote Sql Injection Vuln. Download : http://www.as-admin.com Cr@zyKing / sqL Lov3r'Z Crew Co. http://localhost/line2.php?lng=ru&art=16+limit+0+union+select+1,2,concatws0x3a3a,userlogin,userpassw,4,5,6,7+from+authusers+limit+3,10/&cat=2 Admin Panel :...

BareNuked CMS 1.1.0 Arbitrary Add Admin Exploit

No description provided by source. !/usr/bin/perl ============================================ BareNuked CMS Arbitrary Add Admin Exploit ============================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

Softpedia SiteXS CMS 0.1.1 Arbitrary File Upload Vulnerability

No description provided by source. SiteXS CMS Remote File Upload Vulnerability Discovered by : Ciph3r E-Mail : [email protected] CMS: sitexs-0.1.1 CMS All Version Vulnerable Download CMS : http://dfn.dl.sourceforge.net/sourceforge/sitexs/sitexs-0.1.1.tar.gz Sp TANX4 : google.com ;...

Fastpublish CMS 1.9999 config[fsBase] RFI Vulnerability

Exploit for unknown platform in category web applications ======================================================= Fastpublish CMS 1.9999 configfsBase RFI Vulnerability ======================================================= Name : Fastpublish CMS 1.9999 configfsBase Remote File Include Found By :...