Subdreamer CMS SQL injection vulnerability

Exploit for php platform in category web applications ========================================== Subdreamer CMS SQL injection vulnerability ========================================== Details ============= Product: Subdreamer CMS Security-Risk: high Remote-Exploit: yes Vendor-URL:...

Sql injection

SQL injection vulnerability in Content Management System WEBjump! allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 portfoliogenre.php and 2 newsid.php...

CVE-2009-4892

SQL injection vulnerability in Content Management System WEBjump! allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 portfoliogenre.php and 2 newsid.php...

CVE-2009-4892

CVE-2009-4892: WEBjump! contains SQL injection in a CMS. Remote attackers can exploit via the id parameter to portfolio_genre.php and news_id.php to execute arbitrary SQL. CVSS v2 base score 7.5 (HIGH). Root cause: insufficient sanitization of user input. Exploitation details are provided in mult...

HauntmAx CMS Haunted House - Directory Listing SQL Injection

HauntmAx CMS Haunted House - Directory Listing SQL Injection ================================== HauntmAx CMS SQLi Vulnerability ================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1...

HauntmAx CMS Haunted House Directory Listing SQL Injection

No description provided by source. Name : HauntmAx CMS SQLi Vulnerability Date : june, 9 2010 Vendor url :http://www.hauntmax.com/ Platform: Linux,Windows Price: $200 Author : Sid3^effects aKa HaRi shellc99atyahoo.com special thanks to : r0073r inj3ct0r.com,L0rd CruSad3r,MaYur,gunslinger greetz t...

HauntmAx CMS SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================== HauntmAx CMS SQL Injection Vulnerability ======================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ ...

HauntmAx CMS Haunted House - Directory Listing / SQL Injection

================================== HauntmAx CMS SQLi Vulnerability ================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0...

PHPCMS 2007网站管理系统common.inc.php页面变量覆盖漏洞

PHPCMS是一款基于 PHP+Mysql 架构的网站内容管理系统，也是一个开源的 PHP 开发平台。Phpcms 采用模块化方式开发，功能易用便于扩展，可面向大中型站点提供重量级网站建设解决方案。 在文件incude/common.inc.php中： if!defined'INADMIN' //不是管理员则进入判断 if$CONFIG'dbiscache' $dbfile .= 'cache'; if$CONFIG'phpcache' == '2' $cachefileid = md5$PHPSELF.'?'.$PHPQUERYSTRING; $cachefiledir =...

EMO Realty Manager - SQL Injection

Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:EMO Realty Manager SQLi Vulnerable Published: 2010-06-08 Vendor url:http://emophp.com Price:249$ Platform: Unix, Linux , Windows Greetz to:Sid3^effects, aaNumb, M4n0j and to all ICW members DESCRIPTION: EMO Realty Manager is a full...

TomatoCMS 2.0.6 任意文件上传和跨站脚本漏洞

BUGTRAQ ID: 40544 CVE ID: CVE-2010-1514,CVE-2010-1515 TomatoCMS是一款开源的内容管理系统。 在向TomatoCMS添加新文章时没有对所上传的文件执行重复的验证，拥有Add new article、Upload file to server和Browse uploaded files权限的用户可以向服务器上传并执行恶意文件。 TomatoCMS没有正确地过滤提交给index.php/admin/news/article/list页面的keyword和article-...

Symphony Detection

Symphony, an XSLT-powered, open source content management system, is hosted on the remote web server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid46818; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01";...

CVE-2010-2018

Directory traversal vulnerability in downlot.php in Lokomedia CMS 1.4.1 and 2.0 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2010-2019

SQL injection vulnerability in downlot.php in Lokomedia CMS 1.4.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the file parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Entry Level Content Management System (EL CMS) - SQL Injection

Entry Level Content Management System EL CMS - SQL Injection + Contact : vir0e5athackermaildotcom + Group : TECON The Eye COnference Indonesia + Site : http://tecon-crew.org Software Information +SOftware : Entry Level Content Management System EL CMS +vendor : http://www.entrylevelcms.com/...

CMSQLite <= 1.2 c参数SQL注入漏洞

CMSQLite是基于PHP和SQLite的内容管理系统。 CMSQlite的index.php页面存在SQL注入漏洞： ifisset$GET'c' $contentId=$GET'c'; else if $seourl $arrArticleInfo = $SYSTEM-resolveURL$SERVER'REQUESTURI', $langId; ifempty$arrArticleInfo $contentId=1; else $contentId = $arrArticleInfo0'articleId'; $module = $arrArticleInfo0'module';...

The iceberg - 'Content Management System' SQL Injection

========================================================== The iceberg 'Content Management System' SQL Injection Vulnerability ========================================================== The iceberg 'Content Management System' SQL Injection Vulnerability Homepage : http://www.imagetraders.com.au...

The iceberg - Content Management System SQL Injection

The iceberg - Content Management System SQL Injection ========================================================== The iceberg 'Content Management System' SQL Injection Vulnerability ========================================================== The iceberg 'Content Management System' SQL Injection...

The iceberg 'Content Management System' SQL Injection Vulnerability

Exploit for php platform in category web applications =================================================================== The iceberg 'Content Management System' SQL Injection Vulnerability =================================================================== The iceberg 'Content Management System'...

CompactCMS 1.4.0 - 'tiny_mce' Arbitrary File Upload

Title: CompactCMS 1.4.0 tinymce Remote File Upload Vendor: http://www.compactcms.nl/ AUTHOR: ITSecTeam Email: [email protected] Website: http://www.itsecteam.com Forum : http://forum.ITSecTeam.com Original Advisory: www.ITSecTeam.com/en/vulnerabilities/vulnerability52.htm Thanks: r3dm0v3, pejvak,...