724CMS SQL 'ID' Parameter SQL Injection Vulnerability

724CMS is a content management system. A SQL injection vulnerability exists in the 724CMS SQL 'ID' parameter due to the program failing to properly filter user-submitted input. The vulnerability allows remote attackers to submit specially crafted SQL queries to manipulate or obtain database data...

724 CMS Directory Traversal Vulnerability

724CMS is a content management system. A directory traversal vulnerability exists in 724CMS due to the program section.php failing to properly filter user-submitted input. The vulnerability allows attackers to conduct directory traversal attacks to obtain sensitive information...

724CMS 5.01 / 4.59 / 4.01 / 3.01 SQL Injection

724CMS 5.01 Multiple SQL Injection Security Vulnerabilities Exploit Title: 724CMS Multiple SQL Injection Security Vulnerabilities Vendor: 724CMS Product: 724CMS Vulnerable Versions: 3.01 4.01 4.59 5.01 Tested Version: 5.01 Advisory Publication: March 14, 2015 Latest Update: March 14, 2015...

724CMS 5.01 / 4.59 / 4.01 / 3.01 Cross Site Scripting

724CMS 5.01 Multiple XSS Cross-site Scripting Security Vulnerabilities Exploit Title: 724CMS Multiple XSS Cross-site Scripting Security Vulnerabilities Vendor: 724CMS Product: 724CMS Vulnerable Versions: 3.01 4.01 4.59 5.01 Tested Version: 5.01 Advisory Publication: March 15, 2015 Latest Update:...

724CMS 5.01 / 4.59 / 4.01 / 3.01 Information Leakage

724CMS 5.01 Multiple Information Leakage Security Vulnerabilities Exploit Title: 724CMS Multiple Information Leakage Security Vulnerabilities Vendor: 724CMS Product: 724CMS Vulnerable Versions: 3.01 4.01 4.59 5.01 Tested Version: 5.01 Advisory Publication: March 14, 2015 Latest Update: March 14,...

GeniXCMS 0.0.1 Cross Site Request Forgery

GeniXCMS v0.0.1 CSRF Add Admin Exploit Vendor: MetalGenix Product web page: http://www.genixcms.org Affected version: 0.0.1 Summary: GenixCMS is a PHP Based Content Management System and Framework CMSF. It's a simple and lightweight of CMSF. Very suitable for Intermediate PHP developer to...

Comsenz SupeSite CMS Arbitrary Code Execution Vulnerability

Comsenz SupeSite CMS is a content management system CMS of China Comsenz Comsenz. An arbitrary code execution vulnerability exists in Comsenz SupeSite CMS, which arises from the program failing to adequately filter user-submitted input. An attacker could exploit this vulnerability to execute...

GeniXCMS 0.0.1 SQL Injection

GeniXCMS v0.0.1 Remote Unauthenticated SQL Injection Exploit Vendor: MetalGenix Product web page: http://www.genixcms.org Affected version: 0.0.1 Summary: GenixCMS is a PHP Based Content Management System and Framework CMSF. It's a simple and lightweight of CMSF. Very suitable for Intermediate...

GeniXCMS 0.0.1 - Multiple Vulnerabilities

Exploit for php platform in category web applications GeniXCMS v0.0.1 Remote Unauthenticated SQL Injection Exploit Vendor: MetalGenix Product web page: http://www.genixcms.org Affected version: 0.0.1 Summary: GenixCMS is a PHP Based Content Management System and Framework CMSF. It's a simple and...

BEdita CMS 3.5.0 XSS & CSRF Vulnerabilities

BEdita CMS version 3.5.0 suffers from cross site request forgery and cross site scripting vulnerabilities. BEdita CMS - XSS & CSRF Vulnerability in Version 3.5.0 ---------------------------------------------------------------- Product Information: Software: BEdita CMS Tested Version: 3.5.0,...

NetCat CMS 3.12 Remote File Inclusion

NetCat CMS Multiple Remote File Inclusion RFI Security Vulnerabilities Exploit Title: NetCat CMS Multiple Remote File Inclusion RFI Security Vulnerabilities Product: NetCat CMS Content Management System Vendor: NetCat Vulnerable Versions: 3.12 3.0 2.4 2.3 2.2 2.1 2.0 1.1 Tested Version: 3.12...

NetCat CMS 5.01 Open Redirect

NetCat CMS Multiple URL Redirection Open Redirect Security Vulnerabilities Exploit Title: NetCat CMS Multiple URL Redirection Security Vulnerabilities Product: NetCat CMS Content Management System Vendor: NetCat Vulnerable Versions: 5.01 3.12 3.0 2.4 2.3 2.2 2.1 2.0 1.1 Tested Version: 3.12...

NetCat CMS 5.01 / 3.12 Full Path Disclosure

NetCat CMS Full Path Disclosure Information Disclosure Security Vulnerabilities Exploit Title: NetCat CMS Full Path Disclosure Security Vulnerabilities Product: NetCat CMS Content Management System Vendor: NetCat Vulnerable Versions: 5.01 3.12 3.0 2.4 2.3 2.2 2.1 2.0 1.1 Tested Version: 5.01 3.12...

TYPO3 Anchor-only Links Remote Spoofing Vulnerability

The TYPO3 content management system running on the remote host is affected by a URL spoofing vulnerability involving anchor-only links on the homepage. A remote attacker, using a specially crafted request, can modify links so they point to arbitrary domains. Furthermore, an attacker can utilize...

Debian DSA-3164-1 : typo3-src - security update

Pierrick Caillon discovered that the authentication could be bypassed in the Typo 3 content management system. Please refer to the upstream advisory for additional information : %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Debian Security Advisory DSA 3164-1 (typo3-src - security update)

Pierrick Caillon discovered that the authentication could be bypassed in the Typo 3 content management system. Please refer to the upstream advisory for additional information: https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-001/ OpenVAS Vulnerability Test $Id:...

Debian: Security Advisory (DSA-3164-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

u5CMS SQL Injection Vulnerability

u5CMS is a content management system CMS based on PHP, MySQL and Apache for medium-sized websites, conferences, audit processes, PayPal payments and online surveys. The system supports WYSIWYG editor, creating survey forms and data storage. An SQL injection vulnerability exists in u5CMS. The...

u5CMS 3.9.3 - Multiple SQL Injections

u5CMS 3.9.3 Multiple SQL Injection Vulnerabilities Vendor: Stefan P. Minder Product web page: http://www.yuba.ch Affected version: 3.9.3 and 3.9.2 Summary: u5CMS is a little, handy Content Management System for medium-sized websites, conference / congress / submission administration, review...

u5CMS 3.9.3 (thumb.php) Local File Inclusion Vulnerability

Summary u5CMS is a little, handy Content Management System for medium-sized websites, conference / congress / submission administration, review processes, personalized serial mails, PayPal payments and online surveys based on PHP and MySQL and Apache. Description u5CMS suffers from an authenticat...