4392 matches found
[SECURITY] Fedora 10 Update: drupal-6.14-1.fc10
Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...
HBcms宏博内容管理系统SQL injection and XSS
updatearticlehits.php中的articleid参数没有严格过滤导致可利用双字节编码漏洞注入 =1.7版本 官方已经修复 请下载1.8版本 poc: 查询账号： http://127.0.0.1/cms/hbcms/php/updatearticlehits.php?showhits=yes&articleid=-1%e5" union select loginname from hbcmsusers where id=1%23 查询密码:...
Chief CMS SQL Injection
Chief Content Management System - news.php?id= Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : September 14, 2009 //////\ ///////\ //////\ //////\ //////\ -=- KILL-9 CREW -=- INDONESIANCODER -=- Software Information + Vendor :...
Joomla Hotel Booking System XSS/SQL Injection Multiple Vulnerabilities
No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV111$2009 ----------------------------------------------------------------------------------------- ECHOADV111$2009 Joomla Hotel Booking System Component XSS/SQL Injection...
SPIP 2.0.9 - Arbitrary Copy All Passwords to .XML File
SPIP 2.0.9 - Arbitrary Copy All Passwords to .XML File !/usr/bin/env python SPIP - Content Management System " exit filename = sys.argv2 baseurl = sys.argv1 cookiejar = cookielib.CookieJar urlOpener = urllib2.buildopenerurllib2.HTTPCookieProcessorcookiejar formulaire = sendrequesturlOpener,...
SPIP < 2.0.9 - Arbitrary Copy All Passwords to '.XML' File
!/usr/bin/env python SPIP - Content Management System " exit filename = sys.argv2 baseurl = sys.argv1 cookiejar = cookielib.CookieJar urlOpener = urllib2.buildopenerurllib2.HTTPCookieProcessorcookiejar formulaire = sendrequesturlOpener,...
SPIP < 2.0.9 Arbitrary Copy All Passwords to XML File Remote Exploit
No description provided by source. !/usr/bin/env python SPIP - Content Management System 2.0.9 exploit http://www.securityfocus.com/bid/36008 Author : KernelPanik import urllib, urllib2 import cookielib import sys def sendrequesturlOpener, url, postdata=None: request = urllib2.Requesturl url =...
SPIP < 2.0.9 Arbitrary Copy All Passwords to XML File Remote Exploit
Exploit for unknown platform in category web applications ==================================================================== SPIP " exit filename = sys.argv2 baseurl = sys.argv1 cookiejar = cookielib.CookieJar urlOpener = urllib2.buildopenerurllib2.HTTPCookieProcessorcookiejar formulaire =...
SPIP Copy All Passwords
!/usr/bin/env python SPIP - Content Management System " exit filename = sys.argv2 baseurl = sys.argv1 cookiejar = cookielib.CookieJar urlOpener = urllib2.buildopenerurllib2.HTTPCookieProcessorcookiejar formulaire = sendrequesturlOpener,...
Plume CMS 1.2.3 Multiple SQL Injection Vulnerabilities
No description provided by source. Plume CMS Multiple SQL Injection Vulnerabilities - Security Advisory - SOS-09-006 Release Date. 12-Aug-2009 Last Update. - Vendor Notification Date. 16-Jun-2009 Product. Plume CMS Platform. Independent Affected versions. 1.2.3 verified, possibly others Severity...
Papoo CMS Code Execution
Advisory: Papoo CMS: Authenticated Arbitrary Code Execution The Papoo CMS allows authenticated users to upload GIF, JPG and PNG images if they have the "upload images" privilege, which is true for all default groups that can access the administrative interface. The CMS checks the uploaded images...
Papoo CMS 3.7.3 - (Authenticated) Arbitrary Code Execution
Advisory: Papoo CMS: Authenticated Arbitrary Code Execution The Papoo CMS allows authenticated users to upload GIF, JPG and PNG images if they have the "upload images" privilege, which is true for all default groups that can access the administrative interface. The CMS checks the uploaded images...
MAXcms 3.11.20b - Multiple Remote File Inclusions
MAXcms 3.11.20b - Multiple Remote File Inclusions =============================================================================================== o MAXcms - Databay Content Management System 3.11.20b Remote File Inclusion Vulnerability Software : MAXcms - Databay Content Management System version...
MAXcms 3.11.20b Multiple Remote File Inclusion Vulnerabilities
Exploit for unknown platform in category web applications ============================================================== MAXcms 3.11.20b Multiple Remote File Inclusion Vulnerabilities ==============================================================...
MAXcms 3.11.20b - Multiple Remote File Inclusions
=============================================================================================== o MAXcms - Databay Content Management System 3.11.20b Remote File Inclusion Vulnerability Software : MAXcms - Databay Content Management System version 3.11.20b Vendor : http://www.databay.de Download ...
MAXcms 3.11.20b Multiple Remote File Inclusion Vulnerabilities
No description provided by source. =============================================================================================== o MAXcms - Databay Content Management System 3.11.20b Remote File Inclusion Vulnerability Software : MAXcms - Databay Content Management System version 3.11.20b Vendo...
Joomla! HTTP header cross-site scripting vulnerability-vulnerability warning-the black bar safety net
From the green Alliance:no commercial use indicate in advance Joomla! Is an open source content management system CMS to. Joomla! Not properly filter the user in the HTTP request the the submission of the HTTPREFERER variable, a remote attacker can submit a malicious request to inject JavaScript ...
[Full-disclosure] Drupal 6 Date/Calendar XSS Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Vulnerability Report Date of Original Vendor Contact: May 19, 2009 11:45 GMT -0400 Report Number: 8890 Author: Justin C. Klein Keane [email protected] Details of this vulnerability are also posted at the public URL...
[SECURITY] Fedora 10 Update: drupal-6.13-1.fc10
Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...
[SECURITY] Fedora 9 Update: drupal-6.13-1.fc9
Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...