PHP-Nuke 8.x Cross Site Scripting

PHP-Nuke 8.x = Cross Site Scripting Vulnerability 1. OVERVIEW The PHP-Nuke version 8.x and lower are vulnerable to Cross Site Scrtipting. 2. BACKGROUND PHP-Nuke is a Web Portal System or content management system. The goal of PHP-Nuke is to have an automated web site to distribute news and articl...

PHP-Nuke 8.x Cross Site Request Forgery

PHP-Nuke 8.x = Cross Site Request Forgery CSRF / Anti-CSRF Bypass Vulnerability 1. OVERVIEW The PHP-Nuke version 8.x and lower versions are vulnerable to Cross Site Request Forgery CSRF because its Anti-CSRF mechanism Referer Check is found to be broken. 2. BACKGROUND PHP-Nuke is a Web Portal...

PHP-Nuke 8.x <= Cross Site Scripting Vulnerability

PHP-Nuke 8.x = Cross Site Scripting Vulnerability 1. OVERVIEW The PHP-Nuke version 8.x and lower are vulnerable to Cross Site Scrtipting. 2. BACKGROUND PHP-Nuke is a Web Portal System or content management system. The goal of PHP-Nuke is to have an automated web site to distribute news and articl...

iCMS 1.1 the SQL injection and the background blasting vulnerability-vulnerability warning-the black bar safety net

Icms is an efficient content management system for small and medium web site provides a perfect solution. iCMS 1.1 existSQL injectionvulnerabilities that could lead to sensitive information disclosure. +info: iCMS v1. 1 Admin SQLi/Bruteforce Exploit +poc: view source print? | 0 0 1 | !/...

DodeCMS to create a website content management system upload vulnerability 0day-vulnerability warning-the black bar safety net

Program description: DodeCMS to create a website content management system by the Liaoning to create a network Technology Co., Ltd. based on Microsoft ASP, GM ACCESS database development is completed; Access modes using the dynamic mode, basically realized the system custom function, The code...

CMS Balitbang 3.3 - Arbitrary File Upload

=================================================================== CMS Balitbang v.3.3 Arbitary file upload vulnerability =================================================================== Software: CMS Balitbang Vendor: www.kajianwebsite.org Vuln Type: Arbitary file upload Download link:...

Pointter PHP Content Management System 1.2 Multiple Vulnerabilities

Exploit for php platform in category web applications Vendor: PangramSoft GmbH Product web page: http://www.pointter.com Affected version: 1.2 Summary: Pointter PHP Content Management System is an advanced, fast and user friendly CMS script that can be used to build simple websites or professiona...

Joomla 1.6.0 SQL Injection

================================= Joomla! 1.6.0 | SQL Injection Vulnerability ================================= 1. OVERVIEW Joomla! 1.6.0 was vulnerable to SQL Injection. 2. BACKGROUND Joomla is a free and open source content management system CMS for publishing content on the World Wide Web and...

JVN#01635457: e107 vulnerable to cross-site scripting

e107 provided by e107.org is a Content Management System CMS software. e107 contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version according to the information provided by the...

Constructr CMS XSS/SQL injection vulnerability-vulnerability warning-the black bar safety net

Constructr is a content management system, Constructr in the presence ofSQL injectionandXSSvulnerabilities that could lead to sensitive information disclosure. +info: Constructr CMS 3.03 Miltiple Remote Vulnerabilities XSS/SQLi Vendor: phaziz interface design Product web page:...

Esselbach Storyteller CMS System 1.8 SQL Injection

Exploit Title: Esselbach Storyteller CMS System Version 1.8 page.php Remote SQL Injection Vulnerability Date: March, 9th 2011 GMT +7 Author: Shamus Software Link: http://www.esselbach.com/ Version : Esselbach Storyteller CMS System Version 1.8 Tested on: windows CVE : -...

Esselbach Storyteller CMS System 1.8 - SQL Injection

Exploit Title: Esselbach Storyteller CMS System Version 1.8 page.php Remote SQL Injection Vulnerability Date: March, 9th 2011 GMT +7 Author: Shamus Software Link: http://www.esselbach.com/ Version : Esselbach Storyteller CMS System Version 1.8 Tested on: windows CVE : -...

Alcassoft's SOPHIA CMS SQL injection vulnerability-vulnerability warning-the black bar safety net

Alcassoft's SOPHIA is an international, powerful content management system. Alcassoft's SOPHIA in dsppage. cfm file existssql injectionvulnerabilities that could lead to sensitive information disclosure. Title : Alcassoft's SOPHIA CMS is Vulnerable to SQL Injection Found by: p0pc0rn 24/02/2011 We...

Alcassoft's SOPHIA CMS SQL injection vulnerability and fix-vulnerability warning-the black bar safety net

| Alcassoft's SOPHIA is an international, powerful content management system. Alcassoft's SOPHIA in dsppage. cfm file existssql injectionvulnerabilities that could lead to sensitive information disclosure. +info: Title : Alcassoft's SOPHIA CMS is Vulnerable to SQL Injection Found by: p0pc0rn...

PivotX password reset vulnerability

Overview The PivotX web content management system 2.2.3 and earlier is affected by a password reset vulnerability. Description PivotX contains a vulnerability that allows an attacker to change the password of any account just by guessing the username. Version 2.2.4 has been reported to not be...

T-Content Management System SQL Injection

Exploit Title: T-Content Managment Multiple Vulnerability Date: 06/02/2011 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software: http://www.telematica.com.ar/tcms.asp http://www.telematica.com.ar/portfolio.asp Tested on: Linux...

T-Content Managment System - Multiple Vulnerabilities

Exploit Title: T-Content Managment Multiple Vulnerability Date: 06/02/2011 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software: http://www.telematica.com.ar/tcms.asp http://www.telematica.com.ar/portfolio.asp Tested on: Linux...

Simple Web Content Management System 1.21 SQL Injection

------------------------------------------------------------------------ Software................Simple Web Content Management System 1.21 Vulnerability...........Authentication Bypass/SQL Injection Download................http://www.allscoop.com/ Release Date............1/31/2011 Tested...

MultiCMS local file inclusion vulnerability-vulnerability warning-the black bar safety net

MultiCMS is a flexible content management system that can help you build a professional website. MultiCMS of the index. php file exists local file inclusion vulnerability that may lead to sensitive information disclosure. +info: Date: 29/01/2011 Author: R3VANBASTARD Exploit Title: MultiCMS File...

JVN#54092716: MODx Evolution vulnerable to SQL injection

MODx provided by the MODx CMS Project is a Content Management System CMS software. MODx Evolution contains SQL injection vulnerability. Impact A remote attacker may execute arbitrary PHP code as a result of SQL injection. Solution Update the software Update to the latest version according to the...