Mandriva Linux Security Advisory : joomla (MDVSA-2008:060)

Several severe security issues were discovered in the Joomla! PHP-based content management system. These issues have been fixed in version 1.0.15 which is provided with this update. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Clan Tiger CMS 1.1.1 SQL Injection

----------------------------------------------------------- CLAN TIGER CMS AUTH BYPASS LOGIN FORM SQL INJECTION ----------------------------------------------------------- CMS INFORMATION: --WEB: http://www.clantiger.com --DOWNLOAD: http://www.clantiger.com/download-clan-cms --DEMO:...

ClanTiger 1.1.1 - slug Blind SQL Injection

ClanTiger 1.1.1 - slug Blind SQL Injection !/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...

Limbo CMS 1.0.4.2 CSRF Privilege Escalation PoC

Exploit for unknown platform in category web applications =============================================== Limbo CMS 1.0.4.2 CSRF Privilege Escalation PoC =============================================== Limbo cms v 1042Lt Cross-site request forgery Privilege Escalation Proof of Concept by Alfons...

ClanTiger 1.1.1 - Multiple Insecure Cookie Handling Vulnerabilities

ClanTiger 1.1.1 - Multiple Insecure Cookie Handling Vulnerabilities || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...

ClanTiger 1.1.1 - 'slug' Blind SQL Injection

!/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ----------------------------------------------------------------------------------------------...

Razor CMS 0.3RC2 XSS / Disclosure / Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Multiple Vulnerability Disclosure for razorCMS - ---------------------------------------------- A recent security audit has uncovered multiple security vulnerabilities in the latest version 0.3RC2 and all previous versions of razorCMS CORE by Morgan...

NanoCMS Detection

This host is running NanoCMS, a content management system. OpenVAS Vulnerability Test $Id: nanocmsdetect.nasl 5737 2017-03-27 14:18:12Z cfi $ NanoCMS Detection Authors: Michael Meyer Copyright: Copyright c 2009 Greenbone Networks GmbH This program is free software; you can redistribute it and/or...

NanoCMS Detection

This host is running NanoCMS, a content management system. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

e107 Detection

This host is running e107, a content management system written in PHP and using the popular open source MySQL database system for content storage. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Security Evaluation Of NanoCMS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Security Evaluation of NanoCMS April 14, 2009 Version tested: 0.4final by Justin C. Klein Keane The text of this report is also available at http://www.madirish.net/vulnerabilities/nanocms NanoCMS http://nanocms.in is a PHP based Content Management...

Geeklog Detection

The remote host is running Geeklog, an open source blog engine / content management system written in PHP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid36143; scriptversion"1.15"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/12";...

Redaxscript Detection

This host is running Redaxscript a free, PHP and MySQL driven Content Management System for small business and private websites. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

glFusion lib-session.php模块SQL注入漏洞

BUGTRAQ ID: 34361 CVECAN ID: CVE-2009-1282,CVE-2009-1283 glFusion是一个开源的内容管理系统。 glFusion的private/system/lib-session.php模块没有正确地过滤用户所提交的glfsession cookie参数，远程攻击者可以通过向服务器提交恶意请求执行SQL注入攻击。以下是/private/system/lib-session.php 的97-117行的有漏洞代码段： ... if isset $COOKIE$CONF'cookiesession' $sessid = COMapplyFilt...

Mandriva Update for joomla MDVSA-2008:060 (joomla)

Check for the Version of joomla OpenVAS Vulnerability Test Mandriva Update for joomla MDVSA-2008:060 joomla Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

saspcms 0.9 - Multiple Vulnerabilities

saspcms 0.9 - Multiple Vulnerabilities www.BugReport.ir AmnPardaz Security Research Team Title: SASPCMS Multiple Vulnerabilities Vendor: http://www.lgasoft.com Vulnerable Version: 0.9 prior versions also may be affected Exploitation: Remote with browser Fix: N/A - Description: SASPCMS is an ASP...

saspcms 0.9 - Multiple Vulnerabilities

www.BugReport.ir AmnPardaz Security Research Team Title: SASPCMS Multiple Vulnerabilities Vendor: http://www.lgasoft.com Vulnerable Version: 0.9 prior versions also may be affected Exploitation: Remote with browser Fix: N/A - Description: SASPCMS is an ASP Content Management System . SASPCMS witc...

X-BLC 0.2.0 SQL Injection

!/usr/bin/perl -w :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl xblc = 0.2.0 SQL Injection Vulnerability Script: "X-BLC is a dynamic web content management system written in...

X-BLC 0.2.0 - get_read.php?section SQL Injection

X-BLC 0.2.0 - getread.php?section SQL Injection !/usr/bin/perl -w :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl xblc = 0.2.0 SQL Injection Vulnerability Script: "X-BLC is a...

Pixie CMS - Cross-Site Scripting / SQL Injection

Pixie CMS Multiple Vulnerabilities Pixie is a "free, open source web application that will help you quickly create your own website. Many people refer to this type of software as a 'content management system cms'" http://www.getpixie.co.uk. Pixie is written in PHP with a MySQL database back end...