BEdita CMS 3.5.0 XSS & CSRF Vulnerabilities

BEdita CMS version 3.5.0 suffers from cross site request forgery and cross site scripting vulnerabilities. BEdita CMS - XSS & CSRF Vulnerability in Version 3.5.0 ---------------------------------------------------------------- Product Information: Software: BEdita CMS Tested Version: 3.5.0,...

NetCat CMS 3.12 Remote File Inclusion

NetCat CMS Multiple Remote File Inclusion RFI Security Vulnerabilities Exploit Title: NetCat CMS Multiple Remote File Inclusion RFI Security Vulnerabilities Product: NetCat CMS Content Management System Vendor: NetCat Vulnerable Versions: 3.12 3.0 2.4 2.3 2.2 2.1 2.0 1.1 Tested Version: 3.12...

NetCat CMS 5.01 / 3.12 Full Path Disclosure

NetCat CMS Full Path Disclosure Information Disclosure Security Vulnerabilities Exploit Title: NetCat CMS Full Path Disclosure Security Vulnerabilities Product: NetCat CMS Content Management System Vendor: NetCat Vulnerable Versions: 5.01 3.12 3.0 2.4 2.3 2.2 2.1 2.0 1.1 Tested Version: 5.01 3.12...

NetCat CMS 5.01 Open Redirect

NetCat CMS Multiple URL Redirection Open Redirect Security Vulnerabilities Exploit Title: NetCat CMS Multiple URL Redirection Security Vulnerabilities Product: NetCat CMS Content Management System Vendor: NetCat Vulnerable Versions: 5.01 3.12 3.0 2.4 2.3 2.2 2.1 2.0 1.1 Tested Version: 3.12...

TYPO3 Anchor-only Links Remote Spoofing Vulnerability

The TYPO3 content management system running on the remote host is affected by a URL spoofing vulnerability involving anchor-only links on the homepage. A remote attacker, using a specially crafted request, can modify links so they point to arbitrary domains. Furthermore, an attacker can utilize...

Debian DSA-3164-1 : typo3-src - security update

Pierrick Caillon discovered that the authentication could be bypassed in the Typo 3 content management system. Please refer to the upstream advisory for additional information : %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Debian Security Advisory DSA 3164-1 (typo3-src - security update)

Pierrick Caillon discovered that the authentication could be bypassed in the Typo 3 content management system. Please refer to the upstream advisory for additional information: https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-001/ OpenVAS Vulnerability Test $Id:...

Debian: Security Advisory (DSA-3164-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

u5CMS SQL Injection Vulnerability

u5CMS is a content management system CMS based on PHP, MySQL and Apache for medium-sized websites, conferences, audit processes, PayPal payments and online surveys. The system supports WYSIWYG editor, creating survey forms and data storage. An SQL injection vulnerability exists in u5CMS. The...

u5CMS 3.9.3 - Multiple SQL Injections

u5CMS 3.9.3 Multiple SQL Injection Vulnerabilities Vendor: Stefan P. Minder Product web page: http://www.yuba.ch Affected version: 3.9.3 and 3.9.2 Summary: u5CMS is a little, handy Content Management System for medium-sized websites, conference / congress / submission administration, review...

u5CMS 3.9.3 (thumb.php) Local File Inclusion Vulnerability

Summary u5CMS is a little, handy Content Management System for medium-sized websites, conference / congress / submission administration, review processes, personalized serial mails, PayPal payments and online surveys based on PHP and MySQL and Apache. Description u5CMS suffers from an authenticat...

Ektron CMS XML External Entity Injection Vulnerability

Ektron CMS is a content management system. An injection vulnerability exists in the Ektron CMS XML external entity due to the application failing to properly filter user-supplied input before dynamically generating content. An attacker could exploit this vulnerability to execute arbitrary code...

Pragyan CMS SQL Injection Vulnerability

Pragyan CMS is a content management system. Pragyan CMS suffers from a SQL injection vulnerability that allows attackers to launch SQL injection attacks...

Facebook BBP #23 - Session ID & CSRF Vulnerability

Document Title: =============== Facebook BBP 23 - Session ID & CSRF Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1432 Facebook Security ID: 10202805822321483 Video: https://www.youtube.com/watch?v=SAr2AGLrBkQ Vulnerability Magazine:...

Multiple SQL Injection Vulnerabilities in ZeroCMS

ZeroCMS is a simple content management system, built with PHP and MySQL. ZeroCMS suffers from multiple SQL injection vulnerabilities due to the program failing to properly filter user-supplied input. An attacker is allowed to exploit this vulnerability to access or modify data, or to exploit a...

OptimalSite CMS 1 / 2.4 Cross Site Scripting

CVE-2014-9562 OptimalSite Content Management System CMS XSS Cross-Site Scripting Security Vulnerabilities Exploit Title: OptimalSite CMS /displaydialog.php image Parameter XSS Security Vulnerability Vendor: OptimalSite Product: OptimalSite Content Management System CMS Vulnerable Versions: V.1 V2...

Mangallam CMS - SQL Injection Web Vulnerability

Exploit for php platform in category web applications Document Title: =============== Mangallam CMS - SQL Injection Web Vulnerability Technical Details & Description: ================================ A remote sql injection web vulnerability has been discovered in the official Mangallam Content...

Mangallam CMS - SQL Injection Web Vulnerability

Document Title: =============== Mangallam CMS - SQL Injection Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1421 Release Date: ============= 2015-01-26 Vulnerability Laboratory ID VL-ID: ==================================== 1421 Commo...

CatBot v0.4.2 (PHP) - SQL Injection Vulnerability

Document Title: =============== CatBot v0.4.2 PHP - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1408 Release Date: ============= 2015-01-15 Vulnerability Laboratory ID VL-ID: ==================================== 1408 Commo...

CatBot 0.4.2 SQL Injection Vulnerability

CatBot version 0.4.2 suffers from a remote SQL injection vulnerability. Document Title: =============== CatBot v0.4.2 PHP - SQL Injection Vulnerability Product & Service Introduction: =============================== CatBot is a simple, HTML/PHP/MySQL based chatterbot thats easy to set up and use...