IDM-OS 1.0 - Filename File Disclosure

IDM-OS 1.0 - Filename File Disclosure --==+================================================================================+==-- --==+ idmos1.0 Remote File Discolousure Vulnerability +==-- --==+================================================================================+==-- Author: MhZ91...

IDM-OS 1.0 - 'Filename' File Disclosure

--==+================================================================================+==-- --==+ idmos1.0 Remote File Discolousure Vulnerability +==-- --==+================================================================================+==-- Author: MhZ91 Title: Remote File Discolusure...

bloofox 0.3 - SQL Injection File Disclosure

bloofox 0.3 - SQL Injection File Disclosure WwW.BugReport.ir AmnPardaz Security Research Team Title:Bloofox CMS Vulnerabilities Vendor: http://www.bloofox.com Bugs: SQL Injection Authentication bypass , Source code disclosure Vulnerable Version: 0.3 prior versions also may be affected Exploitatio...

Debian Security Advisory DSA 1032-1 (zope-cmfplone)

The remote host is missing an update to zope-cmfplone announced via advisory DSA 1032-1. It was discovered that the Plone content management system lacks security declarations for three internal classes. This allows manipulation of user portraits by unprivileged users. The old stable distribution...

Debian: Security Advisory (DSA-1032-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1405-2)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 8 Update: drupal-5.6-1.fc8

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

[SECURITY] Fedora 7 Update: drupal-5.6-1.fc7

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

mas-rfi.txt

---------------------------------------------------------------------- Member Area System MAS Remote File Include Vulnerability viewfunc.php ---------------------------------------------------------------------- Author: ShipNX Impact: Remote file include Status: Patch not available...

Joomla 1.0.13 CSRF

Author: Jose Carlos Nieto. Date: Jan 08, 2008 Severity: Mild There exists a Cross Site Scripting security hole in Joomla 1.0.13. Background ========== Joomla! is a free http://en.wikipedia.org/wiki/Freesoftware, open source http://en.wikipedia.org/wiki/Opensourcesoftware content management system...

Directory traversal

Multiple directory traversal vulnerabilities in MODx Content Management System 0.9.6.1 allow remote attackers to 1 include and execute arbitrary local files via a .. dot dot in the aslanguage parameter to assets/snippets/AjaxSearch/AjaxSearch.php, reached through index-ajax.php; and 2 read...

CVE-2008-0094

Multiple directory traversal vulnerabilities in MODx Content Management System 0.9.6.1 allow remote attackers to 1 include and execute arbitrary local files via a .. dot dot in the aslanguage parameter to assets/snippets/AjaxSearch/AjaxSearch.php, reached through index-ajax.php; and 2 read...

CVE-2008-0094

Multiple directory traversal vulnerabilities in MODx Content Management System 0.9.6.1 allow remote attackers to 1 include and execute arbitrary local files via a .. dot dot in the aslanguage parameter to assets/snippets/AjaxSearch/AjaxSearch.php, reached through index-ajax.php; and 2 read...

CVE-2008-0094

MODx Content Management System 0.9.6.1 is affected by CVE-2008-0094 due to directory traversal flaws. Two vulnerable paths are described: Arbitrary local file inclusion/execution via .. in the as_language parameter to assets/snippets/AjaxSearch/AjaxSearch.php (reached via index-ajax.php). Arbitra...

joomla1013-csrf.txt

Author: Jose Carlos Nieto. Date: Jan 08, 2008 Severity: Mild There exists a Cross Site Request Forgery security hole in Joomla 1.0.13. Background ========== Joomla! is a free , open source content management system for publishing content on the world wide web and intranets . Joomla! is licensed...

RunCMS Detection

The remote host is running RunCMS, a content-management system written in PHP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid29867; scriptversion"1.11"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01"; scriptnameenglish:"RunCMS Detection";...

Bitweaver wiki/edit.php suck_url Parameter Traversal Source Code Disclosure

The remote host is running Bitweaver, an open source content management system written in PHP. The version of this software installed on the remote host fails to sanitize input to the 'suckurl' parameter of the 'wiki/edit.php' script of directory traversal sequences. An unauthenticated attacker c...

PortalApp 4.0 (SQL/XSS/Auth Bypasses) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ===================================================================== PortalApp 4.0 SQL/XSS/Auth Bypasses Multiple Remote Vulnerabilities ===================================================================== Title: PortalApp 4.0 Multiple...

PortalApp 4.0 - SQL Injection Cross-Site Scripting Authentication Bypass

PortalApp 4.0 - SQL Injection Cross-Site Scripting Authentication Bypass Title: PortalApp 4.0 Multiple vulnerabilities Discovered By: r3dm0v3 http://r3dm0v3.persianblog.ir r3dm0v3 4t yahoodotcom Tehran - Iran Vendor: http://www.portalapp.com Vulnerable Version: 4.0, prior versions maybe vulnerabl...

PortalApp 4.0 - SQL Injection / Cross-Site Scripting / Authentication Bypass

Title: PortalApp 4.0 Multiple vulnerabilities Discovered By: r3dm0v3 http://r3dm0v3.persianblog.ir r3dm0v3 4t yahoodotcom Tehran - Iran Vendor: http://www.portalapp.com Vulnerable Version: 4.0, prior versions maybe vulnerable Remote Exploit: Yes Dork: "Copyright @2007 Iatek LLC" Fix: Not Availabl...