4395 matches found
Multiple vulnerabilities in Blur6ex
k k kkkk k kkkk k k kkkkkk kkkkkk kkkk k k k k k k k k k k k k k k kk k k k k kk k k k k kk kkkkk k kkkkk kk kk kkkkkk k k k k k k kk k k k k k k k kk k k k k k k k k k k k k kkkk k kkkk k k kk k k kkkk k kk k k k -+| Multiple Vulnerabilities in blur6ex Author : Rusydi Hasan M a.k.a : cR45H3R Dat...
SAXoPRESS - directory traversal
SAXoPRESS is a content management system, mainly used for news publishing. A vulnerability exists in SAXoPRESS, which allows malicious users to read the contents of files on the server, and possibly execute arbitrary commands. Example exploit:...
Clansys 1.1 (showid) - SQL Injection
Clansys 1.1 showid - SQL Injection Internet Security | |---==============================================================---| title: clansys 1.1 remote sql injection release: 2006-04-10 author: snatcher snatcher at gmx.ch country: switzerland |+| application: clansys 1.1 description: a php / mysq...
Clansys v.1.1 (showid) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications =================================================== Clansys v.1.1 showid Remote SQL Injection Exploit =================================================== Internet Security |...
[ECHO_ADV_27$2006] AngelineCMS 0.8.1 Installpath Remote File Inclusion
/ / | | / // / | | Y / | / / /| / / / / / / .OR.ID ECHOADV27$2006 --------------------------------------------------------------------------- ECHOADV27$2006 AngelineCMS 0.8.1 Installpath Remote File Inclusion --------------------------------------------------------------------------- Author :...
Multiple Vulnerabilities in LucidCMS
Multiple Vulnerabilities in LucidCMS Author : Rusydi Hasan M a.k.a : cR45H3R Date : April,1st 2006 Location : Indonesia, Cilacap --- Software description lucidCMS is a simple and flexible content management system for the individual or organization that wishes to manage a collection of web pages...
WebGUI < 6.7.6 arbitrary command execution
The remote web server contains a CGI script that is prone to arbitrary code execution. Description : The remote host is running WebGUI, a content management system from Plain Black Software. The installed version of WebGUI on the remote host fails to sanitize user-supplied input via the OpenVAS...
Joomla! Detection
Joomla!, an open source content management system written in PHP, is running on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid21142; scriptversion"1.27"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/05/24"; scriptxrefname:"IAVT"...
Path Disclosure and Arbitrary File Read Vulnerability in SLAB5000
Description SLAB500 is a complete, dynamic, modular web-system designed to your specifications, allowing you to quickly and conveniently update all your content, add new pages, upload images, sounds and video from any browser, via our front-end interface from any location that you have web access...
loudCMS.txt
"Loudblog is a sleek and easy-to-use Content Management System CMS for publishing media content on the web." SQL Injection in podcast.php magicquotes=off: http://target/loudblog/podcast.php?id=1' and '1'='0' union select...
JOOMLA CMS 1.0.7 DoS & path disclosing
RST/GHC -- JOOMLA CMS -- ADVISORY 37 Product: Joomla Affected version: 1.0.7 Last version: 1.0.7 Vendor: Joomla! URL: http://www.joomla.org/ online demo: http://demo.joomla.org/ VULNERABILITY CLASS: DoS, path disclosing Product Description Joomla! is a Content Management System CMS created by the...
Limbo CMS index.php Itemid Parameter Arbitrary Command Execution
The remote host is running Limbo CMS, a content-management system written in PHP. The installed version of Limbo fails to sanitize input to the 'Itemid' parameter before using it as part of a search string in an 'eval' statement in the 'classes/adodbt/readtable.php' script. Regardless of PHP's...
geeklog-1.3.11.txt
GulfTech Security Research February 19, 2006 Vendor : Geeklog URL : http://www.geeklog.net/ Version : All Versions Risk : Multiple Vulnerabilities Description: Geeklog is one of the most popular content management systems available today. Geeklog unfortunately is vulnerable to a number of differe...
Geeklog Remote Code Execution
GulfTech Security Research February 19, 2006 Vendor : Geeklog URL : http://www.geeklog.net/ Version : All Versions Risk : Multiple Vulnerabilities Description: Geeklog is one of the most popular content management systems available today. Geeklog unfortunately is vulnerable to a number of differe...
Dragonfly CMS install.php newlang Parameter Local File Inclusion
The remote host appears to be running Dragonfly / CPG-Nuke CMS, a content management system written in PHP. The installed version of Dragonfly / CPG-Nuke CMS fails to validate user input to the 'getlang' parameter as well as the 'installlang' cookie before using them in the 'install.php' script i...
DEBIAN-CVE-2006-0519
SPIP 1.8.2-e and earlier and 1.9 Alpha 2 5539 and earlier allows remote attackers to obtain sensitive information via a direct request to inc-messforum.php3, which reveals the path in an error message...
Website Baker Admin Login SQL Injection
The remote host is running Website Baker, a PHP-based content management system. The installed version of Website Baker fails to validate user input to the username parameter of the 'admin/login/index.php' script before using it to generate database queries. An unauthenticated attacker can levera...
CVE-2006-0466
CVE-2006-0466 is an XSS vulnerability in Goldstag Content Management System, exploitable via the text parameter in search.asp. Connected sources confirm the affected component and the input vector, but the available documents do not specify a fix or remediation details. The descriptions repeatedl...
Design/Logic Flaw
Etomite Content Management System 0.6, and possibly earlier versions, when downloaded from the web site in January 2006 after January 10, contains a back door in manager/includes/todo.inc.php, which allows remote attackers to execute arbitrary commands via the "cij" parameter...
PT-2005-5443 · Fidra · Fidra Lighthouse Cms
Name of the Vulnerable Software and Affected Versions: Fidra Lighthouse CMS versions 1.1.0 and earlier Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the search parameter in a query string to the home page. The vendor disputes this...