4598 matches found
OpenCms XSS vuln.
OpenCms XSS vuln. Vuln. discovered by : r0t Date: 21 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/opencms-xss-vuln.html vendor:http://www.opencms.org/ affected version:6.0.3 and prior Product Description: OpenCms is a professional level Open Source Website Content Management...
Redakto WCMS multiple XSS vuln.
Redakto WCMS multiple XSS vuln. Vuln. discovered by : r0t Date: 21 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/redakto-wcms-multiple-xss-vuln.html vendor:http://computeroil.com/ affected version:3.2 and prior Product Description: With our Content Management System Redakto, you...
Mercury CMS™ vuln.
Mercury CMS™ vuln. Vuln. discovered by : r0t Date: 18 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/mercury-cms-vuln.html vendor:http://www.mercury-cms.com affected version:4.0 and prior Product Description: Mercury CMS™ v4.0 is an extensible, modular, enterprise-level content...
Lighthouse CMS XSS vuln.
Lighthouse CMS XSS vuln. Vuln. discovered by : r0t Date: 18 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/lighthouse-cms-xss-vuln.html vendor:http://www.lighthouse-cms.de/en/ affected version:1.1.0 and prior Product Description: Lighthouse is a modern, user friendly, high...
Baseline CMS vuln.
Baseline CMS vuln. Vuln. discovered by : r0t Date: 17 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/baseline-cms-vuln.html vendor:http://www.nma.ca/ affected version: 1.95 and prior Product Description: Baseline CMS is a powerful, web-based content management system that gives yo...
contenite XSS vuln.
contenite XSS vuln. Vuln. discovered by : r0t Date: 17 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/contenite-xss-vuln.html vendor:http://contenite.de/ affected version: 0.11 and prior Product Description: A CMS that stays out of your way contenite is an embedded content...
flatnuke256_xpl.txt
?php ---flatnuke256xpl.php 4.32 10/12/2005 Flatnuke 2.5.6 privilege escalation / remote commands execution exploit works with magicquotesgpc off, try this with 2.5.5: http://www.milw0rm.com/id.php?id=1140 coded by rgod at http://rgod.altervista.org mail: retrogod at aliceposta it original advisor...
Flatnuke 2.5.6 privilege escalation / remote commands execution exploit
?php ---flatnuke256xpl.php 4.32 10/12/2005 Flatnuke 2.5.6 privilege escalation / remote commands execution exploit works with magicquotesgpc off, try this with 2.5.5: http://www.milw0rm.com/id.php?id=1140 coded by rgod at http://rgod.altervista.org mail: retrogod at aliceposta it original advisor...
Flatnuke 2.5.6 - Privilege Escalation Remote Command Execution
Flatnuke 2.5.6 - Privilege Escalation Remote Command Execution ?php ---flatnuke256xpl.php 4.32 10/12/2005 Flatnuke 2.5.6 privilege escalation / remote commands execution exploit works with magicquotesgpc off, try this with 2.5.5: http://www.milw0rm.com/id.php?id=1140...
Flatnuke 2.5.6 - Privilege Escalation / Remote Command Execution
?php ---flatnuke256xpl.php 4.32 10/12/2005 Flatnuke 2.5.6 privilege escalation / remote commands execution exploit works with magicquotesgpc off, try this with 2.5.5: http://www.milw0rm.com/id.php?id=1140 https://www.exploit-db.com/exploits/1140/ coded by rgod at http://rgod.altervista.org mail:...
Flatnuke 2.5.6 Privilege Escalation / Remote Commands Execution Exploit
No description provided by source. ?php ---flatnuke256xpl.php 4.32 10/12/2005 Flatnuke 2.5.6 privilege escalation / remote commands execution exploit works with magicquotesgpc off, try this with 2.5.5: http://www.milw0rm.com/id.php?id=1140 coded by rgod at http://rgod.altervista.org mail: retrogo...
[Full-disclosure] [scip_Advisory] e107 v0.6 rate.php manipulation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 e107 v0.6 rate.php voting manipulation and forwarding vulnerability scip AG Vulnerability Advisory 11/10/2005 http://www.scip.ch I. INTRODUCTION e107 is the name of an open-source content management system cms that relies on php and sql. More...
PHPX admin/index.php username Parameter SQL Injection
The remote host is running PHPX, a content management system written in PHP. The installed version of PHPX does not validate input to the 'username' parameter of the 'admin/index.php' script before using it in a database query. Provided PHP's 'magicquotesgpc' setting is off, an attacker can...
GuppY <= 4.5.9 Multiple Remote Vulnerabilities (Traversal, Code Exec)
The remote host is running GuppY, a content management system written in PHP. The version of GuppY installed on the remote host does not sanitize user input to the server variable 'REMOTEADDR' before using it in the 'error.php' script as part of an include script. An unauthenticated attacker can...
Nephp Publisher v4.5.x SQL inj. vuln.
Nephp Publisher v4.5.x SQL inj. vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/nephp-publisher-v45x-sql-inj-vuln.html Vendor:www.nelogic.com/cms/07-11-2005/19-nephp-publisher.html affected version:v4.5.2 and prior Product Description: a...
phpFusion600206.txt
PHP-Fusion Date: Nov. 16 2005 Vendor: http://sourceforge.net/projects/php-fusion/ Description: "...a light-weight open-source content management system CMS written in PHP. It utilises a mySQL database to store your site content and includes a simple, comprehensive adminstration system. PHP-Fusion...
phpComasy "id" SQL Injection Vulnerability
phpComasy "id" SQL Injection Vulnerability author:r0t hackers.by.lv Date:19 nov. 2005 software: phpComasy affected version: phpComasy 0.7.5 and prior Vendor:http://www.phpcomasy.org/ Software Description: phpComasy is a free, open source content management system for small websites. For this...
phpwcms 1.2.5 Multiple Vulnerabilities
The remote host is running phpwcms, an open source content management system written in PHP. The version of phpwcms installed on the remote host does not sanitize input to the 'formlang' parameter of the 'login.php' script before using it in PHP 'include' functions. An unauthenticated attacker ca...
XOOPS 2.2.3 Final arbitrary local inclusion / XOOPS WF-Downloads module v 2.05 SQL Injection
11.04 12/11/2005 1XOOPS 2.2.3 Final arbitrary local inclusion 2XOOPS WF-Downloads module v 2.05 SQL Injection / Administrative credentials disclousre / Remote commands execution software: site: http://www.xoops.org/ description: "XOOPS is an extensible, OO Object Oriented, easy to use dynamic web...
iCMS Remote File Include Vulnerability
iCMS Remote File Include Vulnerability Author: r0t hackers.by.lv Date: 14. nov 2005 software:iCMS vendor:http://www.cogilent.com/ software description: iCMS is an interactive Web Content Management System. The purpose of this product is to facilitate organizations that require power solutions to...