DIY CMS v1.0 Poll - Multiple Web Vulnerabilities

Document Title: =============== DIY CMS v1.0 Poll - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=518 Release Date: ============= 2012-04-26 Vulnerability Laboratory ID VL-ID: ==================================== 518 Produc...

ExponentCMS 2.0.5 Multiple Vulnerabilities

Exploit for php platform in category web applications Information -------------------- Name : XSS and Blind SQL Injection Vulnerabilities in ExponentCMS Software : ExponentCMS 2.0.5 and possibly below. Vendor Homepage : http://www.exponentcms.org Vulnerability Type : Cross-Site Scripting and SQL...

Minerva Infotech CMS 1.0 Blind SQL Injection

Exploit Title: Minerva infotech CMS Blind SQL injection Vulnerability Date: 07/04/2012 Author: Andrea Bocchetti Url : http://www.minervait.com/cms-demo/ CMS : Minerva infotech CMS VERSION : 1.0 Category: webapps Info : Minerva infotech CMS 1.0 is used to create, edit, manage, and publish content ...

GENU CMS SQL Injection Vulnerability

Exploit for php platform in category web applications -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- GENU CMS SQL Injection Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- bug found by h0rd h0rdatnull.net homepage http://h0rd.net download...

Fedora Update for drupal7 FEDORA-2012-1268

Check for the Version of drupal7 OpenVAS Vulnerability Test Fedora Update for drupal7 FEDORA-2012-1268 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for drupal6 FEDORA-2012-1306

Check for the Version of drupal6 OpenVAS Vulnerability Test Fedora Update for drupal6 FEDORA-2012-1306 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Tim Hendriks Content Management System SQL Injection

Exploit Title: Content-Management-System Remote SQL Injection news.php Script Page : http://tim-hendriks.com Date: 24-3-2012 Version: Version 2.1 Author : Ali.Erroor Tested on: Firefox 8.0, Palemoon 8.0, Internet Explorer 9 Mail: [email protected] Web Site : www.anti-network.net Injection Point ...

Fedora Update for drupal7 FEDORA-2011-10020

Check for the Version of drupal7 OpenVAS Vulnerability Test Fedora Update for drupal7 FEDORA-2011-10020 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

FlexCMS 3.2.1 Cross Site Request Forgery

+---------------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : FlexCMS 3.2.1 Multiple CSRF Date : 16-03-2012 Author : Ivano Binetti http://www.ivanobinetti.com Software link :...

Dutch News site spread Malware on 100000 Computers

Dutch News site spread Malware on 100000 Computers Dutch popular news site NU.nl appears to be serving Java exploit drive-by malware to users of IE. Nu.nl has approximately one hour long served the Javascript code that attempted to provide visitors to the news site with a trojan to infect. The...

FlexCMS 3.2.1 - Multiple Cross-Site Request Forgery Vulnerabilities

FlexCMS 3.2.1 - Multiple Cross-Site Request Forgery Vulnerabilities +---------------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : FlexCMS 3.2.1 Multiple CSRF Date : 16-03-2012 Author : Ivano...

Fedora Update for drupal6 FEDORA-2012-1283

Check for the Version of drupal6 OpenVAS Vulnerability Test Fedora Update for drupal6 FEDORA-2012-1283 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for drupal7 FEDORA-2012-1250

Check for the Version of drupal7 OpenVAS Vulnerability Test Fedora Update for drupal7 FEDORA-2012-1250 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

http-config-backup NSE Script

Checks for backups and swap files of common content management system and web server configuration files. When web server files are edited in place, the text editor can leave backup or swap files in a place where the web server can serve them. The script checks for these files: wp-config.php:...

WebfolioCMS 1.1.4 - Cross-Site Request Forgery (Add AdminModify Pages)

WebfolioCMS 1.1.4 - Cross-Site Request Forgery Add AdminModify Pages +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : WebfolioCMS = 1.1.4 CSRF Add Admin/Modify Pages Date : 28-02-2012 Author : Ivano...

Wolf CMS 0.7.5 Cross Site Scripting / SQL Injection

Title: ====== Wolf CMS v0.7.5 - Multiple Web Vulnerabilities Date: ===== 2012-02-27 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=452 VL-ID: ===== 452 Introduction: ============= Wolf CMS is a content management system and is Free Software published under the GNU...

[SECURITY] Fedora 15 Update: drupal7-7.12-1.fc15

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

[SECURITY] Fedora 15 Update: drupal6-6.24-1.fc15

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

[SECURITY] Fedora 16 Update: drupal6-6.24-1.fc16

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

11in1 1.2.1 Stable 12-31-2011 Cross Site Request Forgery / Local File Inclusion

Advisory ID: HTB23071 Product: 11in1 Vendor: 11in1 Vulnerable Versions: 1.2.1 stable 12-31-2011 and probably prior Tested Version: 1.2.1 stable 12-31-2011 Vendor Notification: 25 January 2012 Public Disclosure: 15 February 2012 Vulnerability Type: Local File Inclusion, Сross-Site Request Forgery...