EUVD-2008-5829

Malware in sbrugna...

EUVD-2008-5830

Malware in sbrugna...

EUVD-2008-5817

Malware in sbrugna...

constructr cms <= 3.02.5 stable Multiple Vulnerabilities

No description provided by source. Constructr CMS http://constructr-cms.org/ - = 3.02.5 Stable - magicquotesgpc = Off registerglobals = On - Directory Traversal - Source Disclosure - Arbitrary File Creation - Etc Etc Etc - http://site/constructr/backend/template.php?editfile= Db info:...

Constructr CMS 3.03 Arbitrary File Upload

No description provided by source. !/usr/bin/env perl Constructr CMS 3.03 Arbitrary File Upload Author: plucky Email: [email protected] Vulnerable Page: /constructr/backend/media.php line App Download: http://sourceforge.net/projects/constructr/ Date: 23/03/2011 THX TO: yawn, shrod, h473 and...

Constructr CMS 3.03 - Arbitrary File Upload

Constructr CMS 3.03 - Arbitrary File Upload !/usr/bin/env perl Constructr CMS 3.03 Arbitrary File Upload Author: plucky Email: [email protected] Vulnerable Page: /constructr/backend/media.php line App Download: http://sourceforge.net/projects/constructr/ Date: 23/03/2011 THX TO: yawn, shrod, h4...

Constructr CMS 3.03 - Arbitrary File Upload

!/usr/bin/env perl Constructr CMS 3.03 Arbitrary File Upload Author: plucky Email: [email protected] Vulnerable Page: /constructr/backend/media.php line App Download: http://sourceforge.net/projects/constructr/ Date: 23/03/2011 THX TO: yawn, shrod, h473 and DoMinO use strict; use warnings; use...

Constructr CMS 3.03 Shell Upload

!/usr/bin/env perl Constructr CMS 3.03 Arbitrary File Upload Author: plucky Email: [email protected] Vulnerable Page: /constructr/backend/media.php line App Download: http://sourceforge.net/projects/constructr/ Date: 23/03/2011 THX TO: yawn, shrod, h473 and DoMinO use strict; use warnings; use...

Constructr CMS XSS/SQL injection vulnerability-vulnerability warning-the black bar safety net

Constructr is a content management system, Constructr in the presence ofSQL injectionandXSSvulnerabilities that could lead to sensitive information disclosure. +info: Constructr CMS 3.03 Miltiple Remote Vulnerabilities XSS/SQLi Vendor: phaziz interface design Product web page:...

Constructr CMS 3.03 Miltiple Remote Vulnerabilities

Exploit for php platform in category web applications Constructr CMS 3.03 Miltiple Remote Vulnerabilities XSS/SQLi Vendor: phaziz interface design Product web page: http://www.constructr-cms.org Affected version: 3.03.0 Summary: ConstructrCMS is a new and fresh Content Management System build wit...

Constructr CMS 3.03.0 Cross Site Scripting / SQL Injection

Constructr CMS 3.03 Miltiple Remote Vulnerabilities XSS/SQLi Vendor: phaziz interface design Product web page: http://www.constructr-cms.org Affected version: 3.03.0 Summary: ConstructrCMS is a new and fresh Content Management System build with the Power of PHP and MySQL. The Backend is mostly...

Constructr CMS 3.03 - Multiple Remote Vulnerabilities

Constructr CMS 3.03 Miltiple Remote Vulnerabilities XSS/SQLi Vendor: phaziz interface design Product web page: http://www.constructr-cms.org Affected version: 3.03.0 Summary: ConstructrCMS is a new and fresh Content Management System build with the Power of PHP and MySQL. The Backend is mostly...

Constructr CMS 3.03 Multiple Remote Vulnerabilities (XSS/SQLi)

Summary ConstructrCMS is a new and fresh Content Management System build with the Power of PHP and MySQL. The Backend is mostly controlled by Ajax for a unique User Experience. Description The CMS suffers from several vulnerabilities SQL and XSS. The sql issue can be triggered when the app tries ...

Constructr CMS 3.03 - Multiple Remote Vulnerabilities

Constructr CMS 3.03 - Multiple Remote Vulnerabilities Constructr CMS 3.03 Miltiple Remote Vulnerabilities XSS/SQLi Vendor: phaziz interface design Product web page: http://www.constructr-cms.org Affected version: 3.03.0 Summary: ConstructrCMS is a new and fresh Content Management System build wit...

CVE-2008-5859

SQL injection vulnerability in index.php in Constructr CMS 3.02.5 and earlier, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the showpage parameter...

CVE-2008-5860

Directory traversal vulnerability in backend/template.php in Constructr CMS 3.02.5 and earlier, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to create or read arbitrary files via directory traversal sequences in the editfile parameter...

Sql injection

SQL injection vulnerability in index.php in Constructr CMS 3.02.5 and earlier, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the showpage parameter...

Directory traversal

Directory traversal vulnerability in backend/template.php in Constructr CMS 3.02.5 and earlier, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to create or read arbitrary files via directory traversal sequences in the editfile parameter...

CVE-2008-5859

SQL injection vulnerability in index.php in Constructr CMS 3.02.5 and earlier, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the showpage parameter...

CVE-2008-5860

CVE-2008-5860 affects Constructr CMS up to version 3.02.5, where a directory traversal flaw in backend/template.php can be exploited when register_globals is enabled and magic_quotes_gpc is disabled. The vulnerability allows a remote attacker to create or read arbitrary files via directory traver...