Simploo CMS 1.7.1 PHP Code Execution

Exploit for php platform in category web applications Simploo CMS Community Edition - Remote PHP Code Execution Issue Details ============= Product: Simploo CMS Community Edition Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.simploo.de/ Advisory-Status: published Credits...

Simploo CMS 1.7.1 - PHP Code Execution

Simploo CMS Community Edition - Remote PHP Code Execution Issue Details ============= Product: Simploo CMS Community Edition Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.simploo.de/ Advisory-Status: published Credits ============= Discovered by: David Vieira-Kurz of...

Joomla! 1.0.x ~ 1.0.15 | Cross Site Scripting (XSS) Vulnerability

============================================================================== Joomla! 1.0.x 1.0.15 | Cross Site Scripting XSS Vulnerability ============================================================================== 1. OVERVIEW The Joomla! 1.0.x series are currently vulnerable to Cross Site...

Joomla 1.0.15 Cross Site Scripting

============================================================================== Joomla! 1.0.x 1.0.15 | Cross Site Scripting XSS Vulnerability ============================================================================== 1. OVERVIEW The Joomla! 1.0.x series are currently vulnerable to Cross Site...

'Pointter PHP Micro-Blogging Social 'Pointter PHP Content Management System' Unauthorized Privilege Escalation (CVE-2010-4332)

'Pointter PHP Content Management System' Unauthorized Privilege Escalation CVE-2010-4332 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in the 'Pointter PHP Content Management System' authentication system which allows for...

Pointter PHP Content Management System 1.0 Privilege Escalation

'Pointter PHP Content Management System' Unauthorized Privilege Escalation CVE-2010-4332 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in the 'Pointter PHP Content Management System' authentication system which allows for...

Mura CMS 5.2.2085 Cross Site Scripting

ProCheckUp Research PR10-09 Multiple XSS and Cross Domain redirect within Mura CMS Advisory publicly released: Monday, 13 December 2010 Vulnerability found: Monday, 19 April 2010 Vendor informed: Tuesday, 20 April 2010 Severity level: Medium Credits Richard Brain of ProCheckUp Ltd...

Exponent CMS Detection

Detection of Exponent CMS. This script sends a connection request to the server and attempts to detect the presence of Exponent CMS and to extract its version SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Update for drupal FEDORA-2010-13031

Check for the Version of drupal OpenVAS Vulnerability Test Fedora Update for drupal FEDORA-2010-13031 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

JCMS 2 0 1 0 file download vulnerability-vulnerability warning-the black bar safety net

JCMS is developed using java content management system, JCMS 2 0 1 0 version there is a file download vulnerability that could lead to an attacker exploit the vulnerability to download arbitrary files. +info: Title: JCMS 2 0 1 0 File Download Vulnerability Date: 2010-11-22 Author: Beach Team:...

AWCM 2.2 SQL Injection

AWCM v2.2 Auth Bypass Vulnerabilities /\ \ /\ \ /\ /\ \ \ \ \L\ \ \ /'\ /\ \ \ ,\ \ \ \ \ /\ /\ \ /'\ \ , /\ \ /' \ /' \ \ \ /\ \ \ /'\ \ \ /\ \ \ /\ /\ \ \\ \ /\ /\ /\ \L\ \ \ \ \ \ \ \ /\ / \ \ \ /\ \\ \ \ \ \ \ \ \ \ \\ \ \ \ // // // ///////////L\ \ //...

openEngine 2.0 1 0 0 2 2 6 local file inclusion and cross-site scripting vulnerability-vulnerability warning-the black bar safety net

openEngine is a use PHP to develop Web Content Management System openEngine 2.0 1 0 0 2 2 6 There is a local include and cross-site scripting vulnerability that could lead to sensitive information disclosure. +info: openEngine 2.0 1 0 0 2 2 6 LFI and XSS Vulnerabilities Vendor :...

E-Php content management system SQL injection and fix-vulnerability warning-the black bar safety net

Vulnerability type: SQL injection Vulnerability description: E-Php Content Management System CMS, article. php page there is SQL injection. Vulnerability test: http://target/path/cms/article.php?esid=-1+union+select+1,version,3,4,5,6,7,8,9,1 0,1 1,1 2...

E-Php content management system SQL injection exploit-vulnerability warning-the black bar safety net

| E-Php Content Management System CMS, article. php page there is SQL injection. Vulnerability testing: Trojan http://www.chinasg.tk/article.php?esid=-1+union+select+1,version,3,4,5,6,7,8,9,1 0,1 1,1 2...

Pub-Me CMS - Blind SQL Injection

| | | | |.' | | | | | ||| |||| Pub-Me CMS Blind SQL Injection Vulnerability Name: Pub-Me CMS Vendor: http://www.pub-me.com/ Versions Affected: //unknown, all current affected - devel. homepage & 33 clients web pages Software Link: Not aviable, Demo can be requested by e-mail from vendor Found by:...

DBHcms 1.1.4 SQL injection vulnerability and fix-vulnerability warning-the black bar safety net

Vulnerability Description: The DBHcms is a for personal and small business website open source content management system, while developing in multiple languages good support for search engine optimization. Program vulnerability the main reason is not on the submitted parameters are strictly...

iGaming CMS 1.5.0 Local File Inclusion

iGaming CMS 1.5.0 Local File Inclusion Vulnerability Exploit Title: iGaming CMS 1.5.0 Local File Inclusion Vulnerability Date: 24-10-2010 Author: ZonTa Mail: zontahackersatgmaildotcom IM : zontahackersatlivedotcom Software Link: http://www.igamingcms.com/downloads.php Version: 1.5.0 Tested on:...

DBHcms 1.1.4 SQL Injection

DBHcms 1.1.4 SQL Injection Vulnerability Exploit Title: DBHcms 1.1.4 SQL Injection Vulnerability Date: 24-10-2010 Author: ZonTa Mail: zontahackersatgmaildotcom IM : zontahackersatlivedotcom Software Link: http://www.drbenhur.com/downloads-dbhcms-114-1-69-en.html Version: 1.1.4 Tested on:...

DBHcms 1.1.4 - 'dbhcms_pid' SQL Injection

DBHcms 1.1.4 SQL Injection Vulnerability Exploit Title: DBHcms 1.1.4 SQL Injection Vulnerability Date: 24-10-2010 Author: ZonTa Mail: zontahackersatgmaildotcom IM : zontahackersatlivedotcom Software Link: http://www.drbenhur.com/downloads-dbhcms-114-1-69-en.html Version: 1.1.4 Tested on:...

Phpcms 2 0 0 8 two SQL injection vulnerabilities-vulnerability warning-the black bar safety net

Phpcms is a leading web content management system, but also is an open-source PHP development framework. SQL injectiona In the file api/space. api. php: $arrcontent = $content-listinfo"userid='$userid'", $order, 1, 1 0; //line 7 Listinfo function in the file include/admin/ content. class. php:...