EUVD-2018-10342

Malware in sbrugna...

EUVD-2008-2868

Malware in sbrugna...

EUVD-2009-2917

Malware in sbrugna...

CVE-2018-11227

Monstra CMS 3.0.4 and earlier has XSS via index.php...

PT-2013-5476

Name of the Vulnerable Software and Affected Versions RiteCMS version 1.0.0 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators for requests that change the administrator password. This is done via an edit user action to...

PT-2013-5477

Name of the Vulnerable Software and Affected Versions RiteCMS version 1.0.0 Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via the mode parameter to "cms/index.php". Recommendations For RiteCMS version 1.0.0, avoid using the...

CVE-2013-5317: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in RiteCMS 1.0.0 allows remote authenticated users to inject arbitrary web script or HTML via the mode parameter to cms/index.php...

CVE-2013-5316: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in RiteCMS 1.0.0 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via an edit user action to cms/index.php...

CVE-2009-2929: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in TGS Content Management 0.x allow remote attackers to execute arbitrary SQL commands via the 1 tgslanguageid, 2 tpldir, 3 referer, 4 user-agent, 5 site, 6 option, 7 dboptimization, 8 owner, 9 adminemail, 10 defaultlanguage, and 11 dbhost parameters to...

CVE-2008-5195: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in SebracCMS sbcms 0.4 allow remote attackers to execute arbitrary SQL commands via 1 the recid parameter to cms/form/read.php, 2 the uname parameter to cms/index.php, and other unspecified vectors...

CVE-2007-6344: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in modules/cms/index.php in Mcms Easy Web Make 1.3, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the template parameter...

CVE-2006-3586: Undefined Security Weakness

SQL injection vulnerability in Jetbox CMS 2.1 SR1 allows remote attackers to execute arbitrary SQL commands via the 1 frontsession COOKIE parameter and 2 view parameter in index.php, and the 3 login parameter in admin/cms/index.php...

CVE-2006-3585: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Jetbox CMS 2.1 SR1 allow remote attackers to inject arbitrary web script or HTML via the 1 login parameter in admin/cms/index.php, 2 unspecified parameters in the "Supply news" page in formmail.php, 3 the URL in the "Site statistics" page, and...

CVE-2006-0673: Undefined Security Weakness

Multiple SQL injection vulnerabilities in cms/index.php in Magic Calendar Lite 1.02, with magicquotesgpc disabled, allow remote attackers to execute arbitrary SQL commands via the 1 $totallogin and 2 $totalpassword parameter...