Zope畸形XML-RPC请求导致远程信息泄露漏洞

BUGTRAQ ID: 5806 Zope是一款基于Python的开放源代码内容管理系统服务程序。 Zope没有正确处理XML-RPC请求，远程攻击者可以利用这个漏洞获得系统敏感信息。 攻击者构建畸形的XML-RPC请求给Zope服务器，由于Zope处理错误可导致Zope返回包含详细系统信息的错误页面，攻击者可以利用这些信息进一步对系统进行攻击 0 Zope Zope 2.5.1 Zope Zope 2.5.0 Zope Zope 2.4.4 b1 Zope Zope 2.4.3 Zope Zope 2.4.2 Zope Zope 2.4.1 Zope Zope 2.4.0 Zope...

Etomite vulnerable to cross-site scripting

Overview Etomite contains a cross-site scripting vulnerability. Etomite is a content management system CMS. Etomite contains an issue with the processing of contents in the search field, which may result in cross-site scripting. Daiki Fukumori of Cyber Defense Institute, Inc. reported this...

JVN#04329324: Etomite vulnerable to cross-site scripting

Etomite is a content management system CMS. Etomite contains an issue with the processing of contents in the search field, which may result in cross-site scripting. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version...

Manx 1.0.1 Directory Traversal

Manx cms.xml 1.0.1 simplexmlloadfile Directory Traversal Vulnerability Vendor: Paul Jova Product web page: http://manx.jovascript.com Affected version: 1.0.1 Summary: Manx is a Content Management System that uses xml text files to store the page contents, instead of a mysql database. Desc: Input...

CVE-2010-5024

SQL injection vulnerability in manage/adduser.php in CuteSITE CMS 1.2.3 and 1.5.0 allows remote authenticated users, with Read privileges, to execute arbitrary SQL commands via the userid parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-4989

SQL injection vulnerability in main.asp in Ziggurat Farsi CMS allows remote attackers to execute arbitrary SQL commands via the grp parameter...

Concrete5 5.4.2.1 Cross Site Scripting / SQL Injection

Exploit Title: Concrete5 = 5.4.2.1 SQL Injection and XSS Vulnerabilities Date: 2011-10-04 Author: Ryan Dewhurst ryandewhurst at gmail @ethicalhack3r www.ethicalhack3r.co.uk Software Link: http://sourceforge.net/projects/concretecms/files/concrete5/5.4.2.1/ Version: 5.4.2.1 tested 1.Vulnerability...

Concrete5 CMS < 5.4.2.1 - Multiple Vulnerabilities

Exploit Title: Concrete5 = 5.4.2.1 SQL Injection and XSS Vulnerabilities Date: 2011-10-04 Author: Ryan Dewhurst ryandewhurst at gmail @ethicalhack3r www.ethicalhack3r.co.uk Software Link: http://sourceforge.net/projects/concretecms/files/concrete5/5.4.2.1/ Version: 5.4.2.1 tested 1.Vulnerability...

Concrete5 CMS 5.4.2.1 - Multiple Vulnerabilities

Concrete5 CMS 5.4.2.1 - Multiple Vulnerabilities Exploit Title: Concrete5 = 5.4.2.1 SQL Injection and XSS Vulnerabilities Date: 2011-10-04 Author: Ryan Dewhurst ryandewhurst at gmail @ethicalhack3r www.ethicalhack3r.co.uk Software Link:...

Concrete5 <= 5.4.2.1 Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Concrete5 = 5.4.2.1 SQL Injection and XSS Vulnerabilities Date: 2011-10-04 Author: Ryan Dewhurst ryandewhurst at gmail @ethicalhack3r www.ethicalhack3r.co.uk Software Link:...

Vivvo CMS - Local File Inclusion

Vivvo CMS - Local File Inclusion !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! Exploit Title: Vivvo CMS - Local File include ! D0rk: Find YourSelf = ! Date: Sun, 02 Oct 2011 11:55:00 = ! Author: JaBrOtxHaCkEr ! Email My ^ [email protected] ^ ! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!...

Vivvo CMS - Local File Inclusion

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! Exploit Title: Vivvo CMS - Local File include ! D0rk: Find YourSelf = ! Date: Sun, 02 Oct 2011 11:55:00 = ! Author: JaBrOtxHaCkEr ! Email My ^ [email protected] ^ ! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! Vulnerable SOftware: Vivvo CMS is...

Vivvo CMS - Local File include

Exploit for php platform in category web applications !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! Exploit Title: Vivvo CMS - Local File include ! D0rk: Find YourSelf = ! Date: Sun, 02 Oct 2011 11:55:00 = ! Author: JaBrOtxHaCkEr ! Email My ^ email protected ^ !...

JVN#09789751: BaserCMS vulnerable to cross-site scripting

BaserCMS is an open-source Contents Management System CMS. BaserCMS contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version according to the information provided by the developer...

Joomla! 1.7.0 | Multiple Cross Site Scripting (XSS) Vulnerabilities

No description provided by source. 1. OVERVIEW Joomla! 1.7.0 stable version is vulnerable to multiple Cross Site Scripting issues. 2. BACKGROUND Joomla is a free and open source content management system CMS for publishing content on the World Wide Web and intranets. It comprises a...

Toko Lite CMS 1.5.2 - edit.php HTTP Response Splitting

Toko Lite CMS 1.5.2 - edit.php HTTP Response Splitting Toko Lite CMS 1.5.2 edit.php HTTP Response Splitting Vulnerability Vendor: Toko Product web page: http://toko-contenteditor.pageil.net Affected version: 1.5.2 Summary: Toko Web Content Editor cms is a compact, multi language, open source web...

Toko Lite CMS 1.5.2 (edit.php) HTTP Response Splitting Vulnerability

Exploit for php platform in category web applications Toko Lite CMS 1.5.2 edit.php HTTP Response Splitting Vulnerability Vendor: Toko Product web page: http://toko-contenteditor.pageil.net Affected version: 1.5.2 Summary: Toko Web Content Editor cms is a compact, multi language, open source web...

Drupal CMS v7.5.x - Multiple Web Vulnerabilities

Document Title: =============== Drupal CMS v7.5.x - Multiple Web Vulnerabilities References Source: ==================== Released on the german ePost Security Cup http://www.deutschepost.de/dpag?lang=deEN&xmlFile=link10227921022790 Release Date: ============= 2011-09-17 Vulnerability Laboratory I...

Wit content management system vulnerability-vulnerability warning-the black bar safety net

0 2. Title: witcms wit content management system vulnerability 0 3. 0 4. Time: 2011-09-09 0 5. 0 6. Team:MakeBug 0 7. 0 8. Author: fate 0 9. 1 0. 1 1. 1 2. Front Desk injection: injection article 1 3. 1 4. Background: to get the shell 1 5. 1 6. MakeBug [email protected] 1 7. 1 8.//...

Elxis 2009.3 Aphrodite Rev 2681 Session Hijacking / XSS

Exploit Title: Elxis 2009.3 Aphrodite rev2681 - Session hijacking Vulnerability Google Dork: -- Date: 25/8/2011 Author: mr.pr0n @pr0n Homepage: http://ghostinthelab.wordpress.com/ - http://s3cure.gr Software Link: http://www.elxis-downloads.com/downloads/download.html?id=325 Version: Elxis 2009.3...