phpwcms Detection

The remote web server hosts phpwcms, a web-based content management system written in PHP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid48202; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01"; scriptnameenglish:"phpwcms...

PHPKIT WCMS 1.6.5 Reflected Cross Site Scripting

MajorSecurity SA-078PHPKIT WCMS - Reflected Cross Site Scripting Issue Details ============= Product: PHPKIT WCMS Security-Risk: low Remote-Exploit: yes Vendor-URL: http://www.phpkit.com/ Advisory-Status: published Credits ============= Discovered by: David Vieira-Kurz of MajorSecurity Original...

PHPKIT WCMS 1.6.5 Cross Site Scripting

MajorSecurity SA-079PHPKIT WCMS - Multiple stored Cross Site Scripting Issues Details ============= Product: PHPKIT WCMS Security-Risk: low Remote-Exploit: yes Vendor-URL: http://www.phpkit.com/ Advisory-Status: published Credits ============= Discovered by: David Vieira-Kurz of MajorSecurity...

[oCERT-2010-002] Joomla input sanitization errors (XSS)

2010-002 Joomla input sanitization errors XSS Description: Joomla, an open source content management system, suffers from a cross-site scripting XSS vulnerability. Insufficient input sanitization on the parameters passed to pages related to administration settings leads to arbitrary javascript...

Pligg Detection

The remote host is running Pligg, a web-based content management system written in PHP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid47765; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01"; scriptnameenglish:"Pligg...

Campsite CMS Cross Site Scripting

Name : Campsite CMS XSS Vulnerability Date : july 13, 2010 Vendor Url : http://www.sourcefabric.org/en/home/web/6/?tpl=18 Author : D4rk357 COntact:D4rk357atyahoodotin special thanks to : b0nd, Fbih2s,rockey killer,The empty, punter,eberly,prashant greetz to :http://www.garage4hackers.com/forum.ph...

CustomCMS Persistent XSS Vulnerability

Exploit for php platform in category web applications ====================================== CustomCMS Persistent XSS Vulnerability ====================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/...

CustomCMS - Persistent Cross-Site Scripting

CustomCMS - Persistent Cross-Site Scripting 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 vendor URL :http://customcms.net/ Price:55$ Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd...

PHPFaber CMS 2.0.5 Cross Site Scripting

Author: prodigy Date found: 4/07/2010 Software: PHPFaber Content Management System Vendor: www.phpfaber.com version: 2.0.5 Vulnerability founded: Multiple XSS Vulnerabilities Risk: Medium Impact: Malicious attackers can run javascript code into the page to perform phising attacks and cookie...

HBCMS(Hongbo)1.8.3 list_resource. php blind injection vulnerability-vulnerability warning-the black bar safety net

Affected versions: HBCMSmacro-Bo=1.8.3 Vulnerability description: HBCMS is the domestic more well-known PHP content management system, not yet open source, the source code using the zend encryption. Meet the following three conditions, you can through the MySQL blind injection to get any sensitiv...

UK One Media CMS - 'id' Error-Based SQL Injection

O / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ | | | | | UK One Media CMS id Error Based SQL Injection Vulnerability | | | | | | | | Summary: Content Management System PHP+MySQL | | ...

Subdreamer CMS SQL injection vulnerability

Exploit for php platform in category web applications ========================================== Subdreamer CMS SQL injection vulnerability ========================================== Details ============= Product: Subdreamer CMS Security-Risk: high Remote-Exploit: yes Vendor-URL:...

Sql injection

SQL injection vulnerability in Content Management System WEBjump! allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 portfoliogenre.php and 2 newsid.php...

CVE-2009-4892

SQL injection vulnerability in Content Management System WEBjump! allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 portfoliogenre.php and 2 newsid.php...

CVE-2009-4892

CVE-2009-4892: WEBjump! contains SQL injection in a CMS. Remote attackers can exploit via the id parameter to portfolio_genre.php and news_id.php to execute arbitrary SQL. CVSS v2 base score 7.5 (HIGH). Root cause: insufficient sanitization of user input. Exploitation details are provided in mult...

HauntmAx CMS SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================== HauntmAx CMS SQL Injection Vulnerability ======================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ ...

HauntmAx CMS Haunted House Directory Listing SQL Injection

No description provided by source. Name : HauntmAx CMS SQLi Vulnerability Date : june, 9 2010 Vendor url :http://www.hauntmax.com/ Platform: Linux,Windows Price: $200 Author : Sid3^effects aKa HaRi shellc99atyahoo.com special thanks to : r0073r inj3ct0r.com,L0rd CruSad3r,MaYur,gunslinger greetz t...

HauntmAx CMS Haunted House - Directory Listing SQL Injection

HauntmAx CMS Haunted House - Directory Listing SQL Injection ================================== HauntmAx CMS SQLi Vulnerability ================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1...

HauntmAx CMS Haunted House - Directory Listing / SQL Injection

================================== HauntmAx CMS SQLi Vulnerability ================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0...

PHPCMS 2007网站管理系统common.inc.php页面变量覆盖漏洞

PHPCMS是一款基于 PHP+Mysql 架构的网站内容管理系统，也是一个开源的 PHP 开发平台。Phpcms 采用模块化方式开发，功能易用便于扩展，可面向大中型站点提供重量级网站建设解决方案。 在文件incude/common.inc.php中： if!defined'INADMIN' //不是管理员则进入判断 if$CONFIG'dbiscache' $dbfile .= 'cache'; if$CONFIG'phpcache' == '2' $cachefileid = md5$PHPSELF.'?'.$PHPQUERYSTRING; $cachefiledir =...