Ektron CMS XML External Entity Injection Vulnerability

Ektron CMS is a content management system. An injection vulnerability exists in the Ektron CMS XML external entity due to the application failing to properly filter user-supplied input before dynamically generating content. An attacker could exploit this vulnerability to execute arbitrary code...

Pragyan CMS SQL Injection Vulnerability

Pragyan CMS is a content management system. Pragyan CMS suffers from a SQL injection vulnerability that allows attackers to launch SQL injection attacks...

Facebook BBP #23 - Session ID & CSRF Vulnerability

Document Title: =============== Facebook BBP 23 - Session ID & CSRF Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1432 Facebook Security ID: 10202805822321483 Video: https://www.youtube.com/watch?v=SAr2AGLrBkQ Vulnerability Magazine:...

Multiple SQL Injection Vulnerabilities in ZeroCMS

ZeroCMS is a simple content management system, built with PHP and MySQL. ZeroCMS suffers from multiple SQL injection vulnerabilities due to the program failing to properly filter user-supplied input. An attacker is allowed to exploit this vulnerability to access or modify data, or to exploit a...

OptimalSite CMS 1 / 2.4 Cross Site Scripting

CVE-2014-9562 OptimalSite Content Management System CMS XSS Cross-Site Scripting Security Vulnerabilities Exploit Title: OptimalSite CMS /displaydialog.php image Parameter XSS Security Vulnerability Vendor: OptimalSite Product: OptimalSite Content Management System CMS Vulnerable Versions: V.1 V2...

Mangallam CMS - SQL Injection Web Vulnerability

Exploit for php platform in category web applications Document Title: =============== Mangallam CMS - SQL Injection Web Vulnerability Technical Details & Description: ================================ A remote sql injection web vulnerability has been discovered in the official Mangallam Content...

Mangallam CMS - SQL Injection Web Vulnerability

Document Title: =============== Mangallam CMS - SQL Injection Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1421 Release Date: ============= 2015-01-26 Vulnerability Laboratory ID VL-ID: ==================================== 1421 Commo...

CatBot v0.4.2 (PHP) - SQL Injection Vulnerability

Document Title: =============== CatBot v0.4.2 PHP - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1408 Release Date: ============= 2015-01-15 Vulnerability Laboratory ID VL-ID: ==================================== 1408 Commo...

CatBot 0.4.2 SQL Injection Vulnerability

CatBot version 0.4.2 suffers from a remote SQL injection vulnerability. Document Title: =============== CatBot v0.4.2 PHP - SQL Injection Vulnerability Product & Service Introduction: =============================== CatBot is a simple, HTML/PHP/MySQL based chatterbot thats easy to set up and use...

Parking Services Confirm Payment Card Breaches

Two services that allow users to reserve over the Internet offsite parking spots at airports confirmed week that they recently suffered data breaches and customer data may be at risk. Park ‘N Fly, headquartered in Atlanta, and OneStopParking, which is based in Florence, Ky, allow travelers to...

Sefrengo Cross-Site Scripting Vulnerability

Sefrengo is an open source web content management system CMS based on PHP and MySql. Versions of Sefrengo prior to 1.6.1 suffer from a cross-site scripting vulnerability that allows remote attackers to inject arbitrary web script or HTML via the searchterm parameter...

CatBot v0.4.2 (PHP) - SQL Injection Vulnerability

Document Title: =============== CatBot v0.4.2 PHP - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1408 Release Date: ============= 2015-01-15 Vulnerability Laboratory ID VL-ID: ==================================== 1408 Commo...

Multiple SQL Injection Vulnerabilities in Sefrengo

Sefrengo is an open source web content management system CMS based on PHP and MySql. Multiple SQL injection vulnerabilities exist in versions of Sefrengo prior to 1.6.1, which can be exploited by remote administrators to execute arbitrary SQL commands...

AdaptCMS 3.0.3 - Multiple Vulnerabilities

AdaptCMS 3.0.3 - Multiple Vulnerabilities !/usr/bin/env python AdaptCMS 3.0.3 Remote Command Execution Exploit Vendor: Insane Visions Product web page: http://www.adaptcms.com Affected version: 3.0.3 Summary: AdaptCMS is a Content Management System trying to be both simple and easy to use, as wel...

AdaptCMS 3.0.3 Remote Command Execution

!/usr/bin/env python AdaptCMS 3.0.3 Remote Command Execution Exploit Vendor: Insane Visions Product web page: http://www.adaptcms.com Affected version: 3.0.3 Summary: AdaptCMS is a Content Management System trying to be both simple and easy to use, as well as very agile and extendable. Not only s...

AdaptCMS 3.0.3 Remote Command Execution Exploit

Summary AdaptCMS is a Content Management System trying to be both simple and easy to use, as well as very agile and extendable. Not only so we can easily create Plugins or additions, but so other developers can get involved. Using CakePHP we are able to achieve this with a built-in plugin system...

Morfy CMS v1.05 - Command Execution Vulnerability

Document Title: =============== Morfy CMS v1.05 - Command Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1367 https://github.com/Awilum/monstra-cms/issues/351 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-9185 CVE-ID:...

Fuzzylime 3.03b Cross Site Scripting

Document Title: =============== Fuzzylime v3.03b CMS - CS Cross Scripting Vulnerability References Source: ==================== http://vulnerability-lab.com/getcontent.php?id=1357 Release Date: ============= 2014-12-02 Vulnerability Laboratory ID VL-ID: ==================================== 1357...

Google Blacklists Sites Peddling SoakSoak Malware

UPDATE Google blacklisted more than 10,000 different websites over the weekend that it spotted doling out SoakSoak malware, but experts claim the number of impacted sites may ultimately be ten times that figure. Up to 100,000 sites hosted on WordPress may be vulnerable to a campaign known as...

Jease CMS v2.11 - Persistent UI Web Vulnerability

Document Title: =============== Jease CMS v2.11 - Persistent UI Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1373 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-8780 CVE-ID: ======= CVE-2014-8780 Release Date: =============...