Azucar CMS 1.3 - '/admin/index_sitios.php' File Inclusion

+------------------------------------------------------------------------------------------- + Azucar CMS +------------------------------------------------------------------------------------------- + Details: + Azucar CMS admin/indexsitios.php uses the include function insecurely on the $GETVIEW...

Seditio Detection

The remote host is running Seditio, a moduler website engine powered by PHP and MySQL. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid23785; scriptversion"1.14"; scriptsetattributeattribute:"pluginmodificationdate...

QuestCMS (main.php) Remote File Include Vulnerability

No description provided by source. !!!!!!!!!WWW.SERSAVASCAR.COM!!!!!!!!! -------------------------------------------------------------------------------- Title : Questcms Remote File Include Vulnerability -------------------------------------------------------------------------------- Author:...

CVE-2006-6110

Multiple SQL injection vulnerabilities in an unspecified BPG-InfoTech Content Management System product allow remote attackers to execute arbitrary SQL commands via the 1 vjob parameter in publicationslist.asp or 2 InfoID parameter in publicationview.asp...

CVE-2006-6110

Multiple SQL injection vulnerabilities in an unspecified BPG-InfoTech Content Management System product allow remote attackers to execute arbitrary SQL commands via the 1 vjob parameter in publicationslist.asp or 2 InfoID parameter in publicationview.asp...

CVE-2006-6110: Undefined Security Weakness

Multiple SQL injection vulnerabilities in an unspecified BPG-InfoTech Content Management System product allow remote attackers to execute arbitrary SQL commands via the 1 vjob parameter in publicationslist.asp or 2 InfoID parameter in publicationview.asp...

Etomite CMS 0.6.1.2 Vulnerabilities + ContenNow 1.39 Vulnerabilities + Exploits

Etomite CMS 0.6.1.2 Multiple Vulnerabilities Severity : Medium risk Vendor : www.etomite.org Author : Alfredo Pesoli 'revenge' Secunia Advisory : SA22885 Security Focus BID : 21135 -------------------------------------------------- Description Etomite is a PHP Content Management System, more info...

[MajorSecurity Advisory #36]dev4u CMS - Multiple SQL Injection and Cross Site Scripting Issues

MajorSecurity Advisory 36dev4u CMS - Multiple SQL Injection and Cross Site Scripting Issues Details ======= Product: dev4u CMS Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.dev4u.de/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: David...

BPG Content Management System SQL Injection

Aria-Security Team Advisory www.Aria-security.Com For English www.Aria-Security.net For Persian Original Advisory : http://aria-security.net/advisory/bpg.txt ----------------------------------------------------------- Software: BPG Content Management System Method: SQL Injection PoC:...

bpg.txt

Aria-Security Team Advisory Original Advisory : http://aria-security.net/advisory/bpg.txt ----------------------------------------------------------- Software: BPG Content Management System Method: SQL Injection PoC: http://target/path/publicationview.asp?InfoID=SQL CODE...

Update Protection against phpFullAnnu 'repmod' parameter File Inclusion Vulnerability

phpFullAnnu, a content management system portal application, is prone to a remote file inclusion vulnerability. An attacker can exploit this vulnerability to execute arbitrary PHP code on an affected system via a maliciously crafted URL in the 'repmod' parameter...

iWare Pro <= 5.0.4 (chat_panel.php) Remote Code Execution Vulnerability

No description provided by source. +------------------------------------------------------------------------------------------- + iWare Pro = 5.0.4 chatpanel.php Remote Code Execution Vulnerability +------------------------------------------------------------------------------------------- +...

iWare Pro 5.0.4 - chat_panel.php Remote Code Execution

iWare Pro 5.0.4 - chatpanel.php Remote Code Execution +------------------------------------------------------------------------------------------- + iWare Pro +------------------------------------------------------------------------------------------- + Details: + iWare...

iWare Pro <= 5.0.4 (chat_panel.php) Remote Code Execution Vulnerability

Exploit for unknown platform in category web applications ======================================================================= iWare Pro +------------------------------------------------------------------------------------------- + Details: + iWare admin/mods/simplechat1.0.0/chatpanel.php does...

iWare Pro 5.0.4 - 'chat_panel.php' Remote Code Execution

+------------------------------------------------------------------------------------------- + iWare Pro +------------------------------------------------------------------------------------------- + Details: + iWare admin/mods/simplechat1.0.0/chatpanel.php does not sanatize the $message variable...

CVE-2006-5625

PHP remote file inclusion vulnerability in wwwdev/nxheader.inc.php in N/X 2002 Professional Edition Web Content Management System WCMS 4.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cpath parameter...

CVE-2006-5628: Undefined Security Weakness

SQL injection vulnerability in login.asp in UNISOR Content Management System CMS allows remote attackers to execute arbitrary SQL commands via the 1 user or 2 pass fields...

CVE-2006-5625: Undefined Security Weakness

PHP remote file inclusion vulnerability in wwwdev/nxheader.inc.php in N/X 2002 Professional Edition Web Content Management System WCMS 4.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cpath parameter...

CVE-2006-5626: Undefined Security Weakness

Cross-site scripting XSS vulnerability in cmsimages/js/htmlarea/htmlarea.php in phpFaber Content Management System CMS before 1.3.36 on 20061026 allows remote attackers to inject arbitrary web script or HTML, probably via arbitrary parameters in the query string, as demonstrated with a vigilon...

CVE-2006-5548

PHP remote file inclusion vulnerability in OTSCMS/OTSCMS.php in Open Tibia Server Content Management System OTSCMS 2.0.0 through 2.1.3 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSconfigdirectoriesclasses parameter...