[SECURITY] Fedora 22 Update: drupal7-7.43-1.fc22

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

Teaching content management system ATutor 2.2.1 injection vulnerability-vulnerability warning-the black bar safety net

Atutor is an open source“content management system”Learning Content Management System, referred to as LCMS。 Using PHP, MySQL, HTTP Web server is recommended to use Apache. Teaching content management system ATutor 2.2.1 injection vulnerability Atutor in addition to teaching content management...

[SECURITY] Fedora 22 Update: drupal6-6.38-1.fc22

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

[SECURITY] Fedora 23 Update: drupal6-6.38-1.fc23

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

Yeager Cross-Site Scripting Vulnerability

Yeager is an open source content management system . Yeager suffers from a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user sessions when malicious...

Mambo 4.5.3h - Multiple Vulnerabilities

Mambo 4.5.3h - Multiple Vulnerabilities Mambo Multiple Vulnerabilities Vendor: Miro International Pty Ltd Product: Mambo Version: = 4.5.3h Website: http://www.mamboserver.com BID: 16775 CVE: CVE-2006-0871 CVE-2006-1794 OSVDB: 23402 23503 23505 SECUNIA: 18935 PACKETSTORM: 44191 Description: Mambo ...

Geeklog 1.4.0 - Multiple Vulnerabilities

Geeklog 1.4.0 - Multiple Vulnerabilities Geeklog Multiple Vulnerabilities Vendor: Geeklog Product: Geeklog Version: = 1.4.0 Website: http://www.geeklog.net/ BID: 16755 CVE: CVE-2006-0823 OSVDB: 23348 23349 SECUNIA: 18920 PACKETSTORM: 44070 Description: Geeklog is one of the most popular content...

Umbraco SSRF / Cross Site Request Forgery / Cross Site Scripting

image: Vulnerable Umbraco Recently I got an assignment where I had to work on the Umbraco application - a free Open Source Content Management System built on the ASP.NET platform and is used by more than 2,25,000 websites. While performing the security testing of this application, I discovered...

Alsovalue CMS 2016Q1 SQL Injection

Document Title: =============== Alsovalue CMS 2016Q1 - SQL Injection Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1714 Release Date: ============= 2016-02-08 Vulnerability Laboratory ID VL-ID: ==================================== 171...

WordPress Update Fixes SSRF, Open Redirect Vulnerability

Developers at WordPress are encouraging users to upgrade to the latest version, 4.4.2, in order to resolve a handful of bugs and vulnerabilities in the content management system. The update pushed out on Tuesday addresses two main issues. Until yesterday an attacker could have potentially carried...

Netlife Photosuite Pro - CS Cross Site Scripting Vulnerability

Document Title: =============== Netlife Photosuite Pro - CS Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1692 Release Date: ============= 2016-01-29 Vulnerability Laboratory ID VL-ID:...

Netlife Photosuite Pro - CS Cross Site Scripting Vulnerability

Document Title: =============== Netlife Photosuite Pro - CS Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1692 Release Date: ============= 2016-01-29 Vulnerability Laboratory ID VL-ID:...

Netlife Photosuite Pro Cross Site Scripting

Document Title: =============== Netlife Photosuite Pro - Client Side Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1692 Release Date: ============= 2016-01-29 Vulnerability Laboratory ID VL-ID:...

los818 CMS 2016 Q1 SQL Injection

Document Title: =============== los818 CMS 2016 Q1 - SQL Injection Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1680 Release Date: ============= 2016-01-27 Vulnerability Laboratory ID VL-ID: ==================================== 1680...

New Era Company CMS - (id) SQL Injection Vulnerability

Document Title: =============== New Era Company CMS - id SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1678 Release Date: ============= 2016-01-28 Vulnerability Laboratory ID VL-ID: ==================================== 1678...

New Era Company CMS SQL Injection

Document Title: =============== New Era Company CMS - id SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1678 Release Date: ============= 2016-01-28 Vulnerability Laboratory ID VL-ID: ==================================== 1678...

New Era Company CMS - (id) SQL Injection Vulnerability

Document Title: =============== New Era Company CMS - id SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1678 Release Date: ============= 2016-01-28 Vulnerability Laboratory ID VL-ID: ==================================== 1678...

los818 CMS 2016 Q1 - SQL Injection Web Vulnerability

Document Title: =============== los818 CMS 2016 Q1 - SQL Injection Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1680 Release Date: ============= 2016-01-27 Vulnerability Laboratory ID VL-ID: ==================================== 1680...

Dtcms default template file has cross-site scripting vulnerability

dtcms is a content management system developed based on c. A cross-site scripting vulnerability exists in the default template file of dtcms version V4.0, due to the absence of strict filtering of image thumbnails and title fields in the default template file. An attacker is allowed to exploit th...

SQL Injection Vulnerability in 'channel' Parameter of Founder Xiangyu Web Content Management System

Founder Xiangyu website content management system is a full-process management platform for website information publishing. A SQL injection vulnerability exists in the Founder Xiangyu Web Content Management System. The lack of filtering of the 'channel' parameter allows an attacker to exploit the...