Lucene search
+L

4395 matches found

securityvulns
securityvulns
added 2013/10/03 12:00 a.m.72 views

SilverStripe Framework CMS 3.0.5 - Multiple Web Vulnerabilities

Title: ====== SilverStripe Framework CMS 3.0.5 - Multiple Vulnerabilities Date: ===== 2013-09-23 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1084 VL-ID: ===== 1084 Common Vulnerability Scoring System: ==================================== 3.9 Introduction:...

SaveExploits0
Packet Storm
Packet Storm
added 2013/08/22 12:00 a.m.196 views

Ovidentia 7.9.4 Cross Site Scripting / SQL Injection

Ovidentia 7.9.4 Multiple Remote Vulnerabilities Vendor: Cantico Product web page: http://www.ovidentia.org Affected version: 7.9.4 Summary: Ovidentia is both a content management system CMS and a collaborative environment Groupware. Desc: Input passed via several parameters is not properly...

1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2013/08/22 12:00 a.m.539 views

Ovidentia 7.9.4 - Multiple Vulnerabilities

Ovidentia 7.9.4 Multiple Remote Vulnerabilities Vendor: Cantico Product web page: http://www.ovidentia.org Affected version: 7.9.4 Summary: Ovidentia is both a content management system CMS and a collaborative environment Groupware. Desc: Input passed via several parameters is not properly...

7.5CVSS5.2AI score0.01094EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
added 2013/08/15 12:00 a.m.131 views

BigTree CMS Detection

The remote web server hosts BigTree CMS, an open source content management system using PHP and MySQL. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid69368; scriptversion"1.5"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01";...

5.5AI score
SaveExploits0References1
exploitpack
exploitpack
added 2013/08/12 12:00 a.m.21 views

Gnew 2013.1 - Multiple Vulnerabilities (1)

Gnew 2013.1 - Multiple Vulnerabilities 1 Gnew v2013.1 Multiple XSS And SQL Injection Vulnerabilities Vendor: Raoul Proença Product web page: http://www.gnew.fr Affected version: 2013.1 Summary: Gnew is a simple Content Management System written with PHP language and using a database server MySQL,...

0.2AI score
SaveExploits0
zdt
zdt
added 2013/08/11 12:00 a.m.26 views

Gnew 2013.1 Cross Site Scripting / SQL Injection Vulnerabilities

Gnew 2013.1 suffers from cross site scripting and remote SQL injection vulnerabilities. Gnew v2013.1 Multiple XSS And SQL Injection Vulnerabilities Vendor: Raoul Proença Product web page: http://www.gnew.fr Affected version: 2013.1 Summary: Gnew is a simple Content Management System written with...

7.9AI score
SaveExploits0
seebug.org
seebug.org
added 2013/06/27 12:00 a.m.41 views

TYPO3 Maag Form Captcha开放重定向漏洞

BUGTRAQ ID: 60298 CVECAN ID: CVE-2013-4680 Typo3是开源内容管理系统(CMS)和内容管理框架(CMF)。 TYPO3的Maag Form Captcha 2.0.0及更早版本存在开放重定向漏洞,攻击者利用此漏洞可将用户重定向到任意网站并执行钓鱼攻击。 0 TYPO3 Maag Form Captcha = 2.0.0 厂商补丁: TYPO3 ----- 目前厂商还没有提供补丁或者升级程序,我们建议使用此软件的用户随时关注厂商的主页以获取最新版本: http://typo3.org/extensions/repository/...

6.4CVSS6.5AI score0.01332EPSS
SaveExploits1
The Hacker News
The Hacker News
added 2013/05/31 4:46 a.m.17 views

Drupal resets 1 Million Passwords after Data Breach

A Drupal data breach was announced by the official Drupal Association, that Passwords for almost one million accounts on the Drupal.org website are being reset after hackers gained unauthorized access to sensitive user data. The security of the open source content management system has been...

6.7AI score
SaveExploits0
securityvulns
securityvulns
added 2013/05/06 12:00 a.m.90 views

TC-SA-2013-01: Reflected Cross-Site-Scripting (XSS) vulnerability in e107 CMS v1.0.2

TC-SA-2013-01: Reflected Cross-Site-Scripting XSS vulnerability in e107 CMS v1.0.2 Published: 2013/04/03 Version 1.0 Affected Products: e107 version 1.0.2 others not tested http://www.e107.org References: TC-SA-2013-01 www.tele-consulting.com/advisories/TC-SA-2013-01.txt used for updates...

4.3CVSS6.5AI score0.03219EPSS
SaveExploits3
securityvulns
securityvulns
added 2013/05/06 12:00 a.m.88 views

[SECURITY] [DSA 2646-1] typo3-src security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2646-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez March 15, 2013 http://www.debian.org/security/faq -...

7.5CVSS1.5AI score0.03121EPSS
SaveExploits0
CISA
CISA
added 2013/04/15 12:00 a.m.52 views

WordPress Sites Targeted by Mass Brute-force Botnet Attack

US-CERT is aware of an ongoing campaign targeting the content management software WordPress, a free and open source blogging tool and web publishing platform based on PHP and MySQL. All hosting providers offering WordPress for web content management are potentially targets. Hackers reportedly are...

7.5CVSS6.2AI score0.01256EPSS
SaveExploits3References4
Exploit DB
Exploit DB
added 2013/04/09 12:00 a.m.38 views

ZAPms 1.41 - SQL Injection

============================================================================================================= o ZAPms = SQL Injection Vulnerability Software : ZAPms Version : 1.41 Vendor : http://www.zapms.de Author : NoGe Contact : nogedotcodeatgmaildotcom Desc : ZAPms is free open source web...

7.5CVSS5.2AI score0.01311EPSS
SaveExploits2
zdt
zdt
added 2013/04/09 12:00 a.m.28 views

ZAPms 1.41- SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================================================================================= o ZAPms = SQL Injection Vulnerability Software : ZAPms Version : 1.41 Vendor : http://www.zapms.de Author : NoGe Contact :...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2013/04/09 12:00 a.m.23 views

ZAPms 1.41 - SQL Injection

ZAPms 1.41 - SQL Injection ============================================================================================================= o ZAPms = SQL Injection Vulnerability Software : ZAPms Version : 1.41 Vendor : http://www.zapms.de Author : NoGe Contact : nogedotcodeatgmaildotcom Desc : ZAPms...

0.2AI score
SaveExploits0
Packet Storm
Packet Storm
added 2013/04/03 12:00 a.m.51 views

e107 CMS 1.0.2 Cross Site Scripting

TC-SA-2013-01: Reflected Cross-Site-Scripting XSS vulnerability in e107 CMS v1.0.2 Published: 2013/04/03 Version 1.0 Affected Products: e107 version 1.0.2 others not tested http://www.e107.org References: TC-SA-2013-01 www.tele-consulting.com/advisories/TC-SA-2013-01.txt used for updates...

4.3CVSS6.6AI score0.03219EPSS
SaveExploits3
OSV
OSV
added 2013/03/15 12:00 a.m.31 views

DSA-2646-1 typo3-src - several

Bulletin has no description...

7.5CVSS6.1AI score0.03121EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2013/03/08 12:00 a.m.8 views

Fedora Update for drupal7 FEDORA-2013-2862

Check for the Version of drupal7 OpenVAS Vulnerability Test Fedora Update for drupal7 FEDORA-2013-2862 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

7.4AI score
SaveExploits0References2
OpenVAS
OpenVAS
added 2013/03/08 12:00 a.m.36 views

Fedora Update for drupal7 FEDORA-2013-2872

Check for the Version of drupal7 OpenVAS Vulnerability Test Fedora Update for drupal7 FEDORA-2013-2872 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

5CVSS7.6AI score0.03008EPSS
SaveExploits1References2
Exploit DB
Exploit DB
added 2013/03/07 12:00 a.m.38 views

Qool CMS 2.0 RC2 - Multiple Vulnerabilities

Qool CMS v2.0 RC2 XSRF Add Root Exploit in...

5.3AI score
SaveExploits0
exploitpack
exploitpack
added 2013/03/07 12:00 a.m.28 views

Qool CMS 2.0 RC2 - Multiple Vulnerabilities

Qool CMS 2.0 RC2 - Multiple Vulnerabilities Qool CMS v2.0 RC2 XSRF Add Root Exploit input type="hi...

0.2AI score
SaveExploits0
Rows per page
Query Builder