585 matches found
CVE-2007-5679
The CVE-2007-5679 entry describes a SQL injection in DeeEmm.com DM CMS, affecting version 0.7.0.Beta (via index.php’s media page build_media_content.php using the id parameter) and later reported to affect 0.7.4 as well. This allows remote attackers to execute arbitrary SQL commands. The connecte...
pakupaku-rfulfi.txt
!/usr/bin/perl Pakupaku CMS = 0.4 Remote File Upload Vulnerability 1- PathScript/index.php?page=Uploads 2- Upload GoLd-M.php = Php Shell 3- PathScript/uploads/GoLd-M.php = Php Shell D.Script : http://heanet.dl.sourceforge.net/sourceforge/pakupaku/pakupaku-0.4.tar.gz D0RK...
CVE-2007-0765
SQL injection vulnerability in news.php in dB Masters Curium CMS 1.03 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter...
EUVD-2006-5715
PHP remote file inclusion vulnerability in manager/media/browser/mcpuk/connectors/php/Commands/Thumbnail.php in Modx CMS 0.9.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the basepath parameter. NOTE: it is possible that this is a vulnerability in FCKeditor...
hotplugCMSconfig.txt
Hello HotPlug CMS Config File Include Vulnerability Discovered by : HACKERS PAL Copyrights : HACKERS PAL Website : WwW.SoQoR.NeT Email : [email protected] After Script Url Add includes/class/config.inc And you will download the config file ,, so that you will be able to connect by remote connect...
free QBoard 1.1 - contact.php?qb_path Remote File Inclusion
free QBoard 1.1 - contact.php?qbpath Remote File Inclusion source: https://www.securityfocus.com/bid/18780/info Plume CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows the attacker to...
webcms10.txt
============================================= Discovered By: CrAzY CrAcKeR Site:www.alshmokh.com I want to thank my friend:- nono225-mHOn-rageh-Lover Hacker-Sw33t h4ck3r Breeeeh-BoNym-Rootshill-LiNuXrOOt-SauDiVirUs ============================================= Example:- /cms/print.php?id=SQL...
Php Blue Dragon CMS <= 2.9 Remote File Include Vulnerability
Exploit for unknown platform in category web applications ============================================================ Php Blue Dragon CMS SessionData"SesUserLanguage"."/modprivmsg.".$phpExt; /code Fix: code // Szukanie u.ytkownika $vsDragonRootPath = "./";...
MODx CMS 0.9.1 - 'index.php' Directory Traversal
source: https://www.securityfocus.com/bid/17533/info MODxCMS is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable syst...
CVE-2006-0199
SQL injection vulnerability in news.asp in Mini-Nuke CMS System 1.8.2 and earlier allows remote attackers to execute arbitrary SQL commands via the hid parameter...
CVE-2005-2053
Just another flat file JAF CMS before 3.0 Final allows remote attackers to obtain sensitive information via 1 an asterisk in the id parameter, 2 a blank id parameter, or 3 an asterisk in the disp parameter to index.php, which reveals the path in an error message. NOTE: a followup suggests that th...
Dream4 Koobi CMS 4.2.3 - index.php Cross-Site Scripting
Dream4 Koobi CMS 4.2.3 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/12895/info Koobi CMS is reportedly affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may levera...
Virginity Security Advisory 2005-001 : Hola CMS - File destruction and System access
-------------------------------------------------------------------- Virginity Security Advisory 2005-001 - - - -------------------------------------------------------------------- DATE : 2005-03-12 15:45 GMT TYPE : remote VERSIONS AFFECTED : == hola-cms-1.4.9 http://holacms.drunkencat.net/...
[SECURITYREASON.COM] PostNuke SQL Injection 0.760-RC2=>x cXIb8O3.3
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PostNuke SQL Injection 0.760-RC2=x cXIb8O3.3 Author: cXIb8O3Maksymilian Arciemowicz Date: 20.2.2005 from securityreason.com TEAM - --- 0.Description --- PostNuke: The Phoenix Release 0.750 and 0.760-RC2 PostNuke is an open source, open developement...
WebArtFactory CMS Vulnerability
Quick Summary: Product : WebArtFactory CMS. Version : Several in-production old system versions. Vendor : WebArtFactory - http://www.webartfactory.com Class : Remote Criticality : High Operating Systems : N/A. Synopsis From the WebArtFactory webpage: "Somos una empresa de desarrollo de pginas web...
BES-CMS 0.40.5 - message.php File Inclusion
BES-CMS 0.40.5 - message.php File Inclusion source: https://www.securityfocus.com/bid/9268/info It has been reported that BES-CMS is vulnerable to a remote file include vulnerability that may allow an attacker to include malicious files containing arbitrary code to be executed on a vulnerable...
BES-CMS 0.40.5 - membersindex.inc.php File Inclusion
BES-CMS 0.40.5 - membersindex.inc.php File Inclusion source: https://www.securityfocus.com/bid/9268/info It has been reported that BES-CMS is vulnerable to a remote file include vulnerability that may allow an attacker to include malicious files containing arbitrary code to be executed on a...
BES-CMS 0.40.5 - index.inc.php File Inclusion
BES-CMS 0.40.5 - index.inc.php File Inclusion source: https://www.securityfocus.com/bid/9268/info It has been reported that BES-CMS is vulnerable to a remote file include vulnerability that may allow an attacker to include malicious files containing arbitrary code to be executed on a vulnerable...
BES-CMS 0.40.5 - hacking.php File Inclusion
BES-CMS 0.40.5 - hacking.php File Inclusion source: https://www.securityfocus.com/bid/9268/info It has been reported that BES-CMS is vulnerable to a remote file include vulnerability that may allow an attacker to include malicious files containing arbitrary code to be executed on a vulnerable...
BES-CMS 0.4/0.5 - 'hacking.php' File Inclusion
source: https://www.securityfocus.com/bid/9268/info It has been reported that BES-CMS is vulnerable to a remote file include vulnerability that may allow an attacker to include malicious files containing arbitrary code to be executed on a vulnerable system. The problem exists in the...