Facebook #26 - Bypass & Exception Redirect Vulnerability

Document Title: =============== Facebook 26 - Bypass & Exception Redirect Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1483 http://www.vulnerability-lab.com/getcontent.php?id=1484 Video View: https://www.youtube.com/watch?v=I65zFWF-pMg...

Zeeways CMS Cross Site Scripting / Traversal

ZeewaysCMS Multiple Vulnerabilities Software - ZeewaysCMS Vendor Product Description - ZeewaysCMS is a Content Management System and a complete Web & Mobile Solution developed by Zeeways for Corporates, Individuals or any kind of Business needs. - Site: http://www.zeewayscms.com/ Advisory Timelin...

Facebook #26 - Bypass & Exception Redirect Vulnerability

Document Title: =============== Facebook 26 - Bypass & Exception Redirect Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1483 http://www.vulnerability-lab.com/getcontent.php?id=1484 Video View: https://www.youtube.com/watch?v=I65zFWF-pMg...

TORNADO Computer Trading - SQL Injection Vulnerability

Document Title: =============== TORNADO Computer Trading - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1489 Release Date: ============= 2015-05-04 Vulnerability Laboratory ID VL-ID: ==================================== 148...

Wolf CMS 0.8.2 - Arbitrary File Upload

?php / ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------| ,-------, | / XXXXXX /| / / XXXXXX / \ / / XXXXXX /\ / XXXXXX / / XXXXXX / ------' Exploit Title : Wolf CMS Arbitrary File Upload Exploit Date : 2...

Wolf CMS 0.8.2 Shell Upload

,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------| ,-------, | / XXXXXX /| / / XXXXXX / \ / / XXXXXX /\ / XXXXXX / / XXXXXX / ------' Exploit Title : Wolf CMS Arbitrary File Upload Exploit Date : 16 April...

Fiyo CMS Access Control Bypass Vulnerability

Fiyo CMS is small business phone service and mobile collaboration tool. Fiyo CMS suffers from access control bypass vulnerabilities. An attacker could exploit these vulnerabilities to perform unauthorized operations...

[SECURITY] Fedora 22 Update: drupal6-6.35-1.fc22

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

[SECURITY] Fedora 20 Update: drupal7-7.35-1.fc20

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

[SECURITY] Fedora 21 Update: drupal6-6.35-1.fc21

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

[SECURITY] Fedora 21 Update: drupal7-7.35-1.fc21

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

[SECURITY] Fedora 20 Update: drupal6-6.35-1.fc20

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

Chamilo LCMS Connect 4.1 Cross Site Request Forgery

Hi Team, Affected Vendor: http://lcms.chamilo.org/ Date: 27/03/2015 Discovered by: Joel Vadodil Varghese Type of vulnerability: XSRF Tested on: Windows 7 Product: LCMS Connect Version: 4.1 Description: Chamilo is an open-source under GNU/GPL licensing e-learning and content management system, aim...

Berta CMS - Arbitrary File Upload

Berta CMS - Arbitrary File Upload Berta CMS is a web based content management system using PHP and local file storage. http://www.berta.me/ Due to use of a 3rd party Berta CMS website to redirect links within a phishing email brought to our attention we checked the file upload functionality of th...

[SECURITY] Fedora 22 Update: drupal7-7.35-1.fc22

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

724CMS has multiple information leakage vulnerabilities

724CMS is a content management system. 724CMS has multiple information disclosure vulnerabilities. An attacker can exploit the vulnerabilities to obtain sensitive information...

Mambo Login SQL Injection Vulnerability

Mambo is an open source web content management system CMS based on PHP and MySql. The system supports search engine optimization, template/theme downloads and traffic statistics. A SQL injection vulnerability exists in Mambo, which stems from the program failing to adequately filter user-submitte...

Multiple Cross-Site Scripting Vulnerabilities in MetalGenix GeniXCMS

MetalGenix GeniXCMS is a content management system. MetalGenix GeniXCMS suffers from multiple cross-site scripting vulnerabilities. The vulnerabilities allow remote attackers to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user sessions when...

Multiple Cross-Site Scripting Vulnerabilities in ocPortal

ocPortal is a content management system. Multiple cross-site scripting vulnerabilities exist in ocPortal. The vulnerabilities can be exploited to allow remote attackers to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user sessions when maliciou...

724CMS Has Multiple SQL Injection Vulnerabilities

724CMS is a content management system. 724CMS suffers from multiple SQL injection vulnerabilities due to the program failing to properly filter user-submitted input. The vulnerabilities allow remote attackers to submit specially crafted SQL queries to manipulate or obtain database data...