Chamilo LCMS Connect 4.1 Cross Site Scripting

Affected Vendor: http://lcms.chamilo.org/ Date: 27/03/2015 Discovered by: Joel Vadodil Varghese Type of vulnerability: Stored XSS Tested on: Windows 7 Product: LCMS Connect Version: 4.1 Description: Chamilo is an open-source under GNU/GPL licensing e-learning and content management system, aimed ...

Joomla Releases Security Update for CMS

Joomla has released version 3.4.7 of its content management system CMS software to address two vulnerabilities. Exploitation of one of these vulnerabilities may allow a remote attacker to take control of an affected website. Users and administrators are encouraged to review the Joomla Release New...

Siteserver 内容管理系统 /livefiles/pages/inner/userlist.aspx SQL 注入

No description provided by source...

Joomla Releases Security Update for CMS

Joomla has released version 3.4.6 of its content management system CMS software to address multiple vulnerabilities. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected website. US-CERT encourages users and administrators to review the Joomla...

dotCMS 3.2.4 CSRF / XSS / Open Redirect

dotCMS 3.2.4 Multiple Vulnerabilities Vendor: dotCMS Software, LLC Product web page: http://www.dotcms.com Affected version: 3.2.4 Enterprise Summary: DotCMS is the next generation of Content Management System CMS. Quick to deploy, open source, Java-based, open APIs, extensible and massively...

CIS Manager SQL Injection Vulnerability

CIS Manager is a content management system. CIS Content Management System 2015-Q4 default.php fails to properly handle the TroncoID parameter, allowing remote attackers to exploit the vulnerability by submitting specially crafted SQL queries to manipulate or obtain database data...

CIS Manager CMS 2015Q4 SQL Injection Vulnerability

CIS Manager Content Management System 2015Q4 suffers from a remote SQL injection vulnerability. Document Title: =============== CIS Manager Content Management System 2015Q4 - SQL Injection Vulnerability Product & Service Introduction: =============================== The Constructive Internet...

CIS Manager CMS 2015Q4 SQL Injection

Document Title: =============== CIS Manager Content Management System 2015Q4 - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1652 Release Date: ============= 2015-11-25 Vulnerability Laboratory ID VL-ID:...

[SECURITY] Fedora 21 Update: drupal7-7.41-1.fc21

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

[SECURITY] Fedora 23 Update: drupal7-7.41-1.fc23

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

CVE-2 0 1 5-7 8 5 7 Joomla injection exploit tools-vulnerability warning-the black bar safety net

Mentioned some of the techniques, tools may with a certain offensive, only for safety learning and teaching purposes, the prohibition of illegal use! Joomla is a won multiple awards CMS（Content Management System, CMS, which uses PHP＋MySQL database development, can run on Linux, Windows, MacOSX,...

Dogma India dogmaindia CMS - Auth Bypass Vulnerability

Document Title: =============== Dogma India dogmaindia CMS - Auth Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1583 Release Date: ============= 2015-08-25 Vulnerability Laboratory ID VL-ID: ==================================== 158...

Joomla Update Patches Critical SQL Injection

Joomla on Thursday released a new version of its content management system, 3,4,5, that addresses a critical SQL injection vulnerability that could have let attackers gain access to data in the backend of any site running on the platform. The bug existed in versions 3.2 to 3.4.4 of the CMS, and...

WebComIndia CMS 2015Q4 Authentication Bypass

Document Title: =============== WebComIndia CMS 2015Q4 - Auth Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1614 Release Date: ============= 2015-10-07 Vulnerability Laboratory ID VL-ID: ==================================== 1614...

PHP-Fusion 7.02.07 Blind SQL Injection Vulnerability

PHP-Fusion versions 7.02.07 and below suffer from a remote blind SQL injection vulnerability in the admin panel. ============================================= MGC ALERT 2015-002 - Original release date: September 18, 2015 - Last revised: October 05, 2015 - Discovered by: Manuel García Cárdenas -...

Kirby CMS 2.1.0 CSRF / Shell Upload

============================================= - Release date: 14.09.2015 - Discovered by: Dawid Golunski - Severity: High ============================================= I. VULNERABILITY ------------------------- Kirby CMS = 2.1.0 CSRF Content Upload and PHP Script Execution II. BACKGROUND...

Multiple SQL Injection Vulnerabilities in Beijing Oriental Netscape PIW Content Management System

PIW Content Management System is a content management system of Beijing Oriental Netscape Information Technology Co. PIW Content Management System has multiple SQL injection vulnerabilities. The vulnerabilities allow attackers to exploit the vulnerabilities to gain access to sensitive information...

[SECURITY] Fedora 23 Update: drupal6-6.37-1.fc23

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

[SECURITY] Fedora 21 Update: drupal7-7.39-1.fc21

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

[SECURITY] Fedora 21 Update: drupal6-6.37-1.fc21

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...