4384 matches found
Electronic bucket music get shell vulnerability-vulnerability warning-the black bar safety net
index.php line 1 0 $dataname=getdate; ... ... $from=$SERVER"HTTPREFERER"; ... ... iffileexists"$sysdatadir/stat/$dataname.php" $statdata=file"$sysdatadir/stat/$dataname.php"; for$a=0;$acount$statdata;$a++ $statinfo=explode"|",$statdata$a; if$statinfo0==$ip && $timestamp-$statinfo2$timepart//if th...
Wind news site content management system explosive path vulnerability-vulnerability warning-the black bar safety net
Wind news site content management system the latest burst path vulnerability in! Directly burst the absolute path Methods: Directly in the URL added on the Admin/User/getGroupDebate. asp to it!!!! Microsoft VBScript runtime error-Error '800a01f4' Variable is undefined: 'Conn'...
Remote File Disclosure in Vivvo CMS 4.1.5.1
No description provided by source. waraxe-2009-SA075 - Remote File Disclosure in Vivvo CMS 4.1.5.1 =============================================================================== Author: Janek Vind "waraxe" Date: 21. October 2009 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-75.html...
bloofoxCMS Detection
This host is running bloofoxCMS, a free open source content management system. OpenVAS Vulnerability Test $Id: bloofoxCMSdetect.nasl 5720 2017-03-24 14:15:57Z cfi $ bloofoxCMS Detection Authors: Michael Meyer Copyright: Copyright c 2009 Greenbone Networks GmbH This program is free software; you c...
EXcms Root directory disclosure vulnerability
---------------------------------------------------------------------- PT-2009-22 Positive Technologies Security Advisory EXcms Root directory disclosure vulnerability ---------------------------------------------------------------------- --- Affected Software EXcms Versions prior to 2.02 Product...
ABO.CMS Multiple Vulnerabilities
---------------------------------------------------------------------- PT-2009-17 Positive Technologies Security Advisory ABO.CMS Multiple Vulnerabilities ---------------------------------------------------------------------- --- Affected Software ABO.CMS Versions prior to 5.1 Product Link:...
A.CMS Multiple Vulnerabilities
---------------------------------------------------------------------- PT-2009-20 Positive Technologies Security Advisory A.CMS Multiple Vulnerabilities ---------------------------------------------------------------------- --- Affected Software A.CMS Versions prior to 1.23 Product Link:...
UMI.CMS Cross-Site Scripting vulnerability
---------------------------------------------------------------------- PT-2009-12 Positive Technologies Security Advisory UMI.CMS Cross-Site Scripting vulnerability ---------------------------------------------------------------------- --- Affected Software UMI.CMS Versions 2.x prior to 2.7.1 bui...
MindSculpt CMS SQL Injection
Exploit for unknown platform in category web applications ============================ MindSculpt CMS SQL Injection ============================ MindSculpt's new CMSâ„¢ Content Management System SQL injection vulnerability - cid0 Author : kaMtiEz Homepage : http://www.indonesiancoder.com Date :...
CVE-2009-3326
SQL injection vulnerability in index.php in CMScontrol Content Management System 7.x allows remote attackers to execute arbitrary SQL commands via the idmenu parameter...
Sql injection
SQL injection vulnerability in index.php in CMScontrol Content Management System 7.x allows remote attackers to execute arbitrary SQL commands via the idmenu parameter...
CVE-2009-3326
CMScontrol Content Management System 7.x is affected by an SQL injection in index.php via the id_menu parameter (remote attacker could execute arbitrary SQL). Root cause is an injection in the query path documented across CVE sources. No remediation or patch details are provided in the connected ...
[SECURITY] Fedora 10 Update: drupal-6.14-1.fc10
Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...
HBcms宏博内容管理系统SQL injection and XSS
updatearticlehits.php中的articleid参数没有严格过滤导致可利用双字节编码漏洞注入 =1.7版本 官方已经修复 请下载1.8版本 poc: 查询账号： http://127.0.0.1/cms/hbcms/php/updatearticlehits.php?showhits=yes&articleid=-1%e5" union select loginname from hbcmsusers where id=1%23 查询密码:...
Chief CMS SQL Injection
Chief Content Management System - news.php?id= Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : September 14, 2009 //////\ ///////\ //////\ //////\ //////\ -=- KILL-9 CREW -=- INDONESIANCODER -=- Software Information + Vendor :...
Joomla Hotel Booking System XSS/SQL Injection Multiple Vulnerabilities
No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV111$2009 ----------------------------------------------------------------------------------------- ECHOADV111$2009 Joomla Hotel Booking System Component XSS/SQL Injection...
SPIP 2.0.9 - Arbitrary Copy All Passwords to .XML File
SPIP 2.0.9 - Arbitrary Copy All Passwords to .XML File !/usr/bin/env python SPIP - Content Management System " exit filename = sys.argv2 baseurl = sys.argv1 cookiejar = cookielib.CookieJar urlOpener = urllib2.buildopenerurllib2.HTTPCookieProcessorcookiejar formulaire = sendrequesturlOpener,...
SPIP < 2.0.9 - Arbitrary Copy All Passwords to '.XML' File
!/usr/bin/env python SPIP - Content Management System " exit filename = sys.argv2 baseurl = sys.argv1 cookiejar = cookielib.CookieJar urlOpener = urllib2.buildopenerurllib2.HTTPCookieProcessorcookiejar formulaire = sendrequesturlOpener,...
SPIP < 2.0.9 Arbitrary Copy All Passwords to XML File Remote Exploit
No description provided by source. !/usr/bin/env python SPIP - Content Management System 2.0.9 exploit http://www.securityfocus.com/bid/36008 Author : KernelPanik import urllib, urllib2 import cookielib import sys def sendrequesturlOpener, url, postdata=None: request = urllib2.Requesturl url =...
SPIP < 2.0.9 Arbitrary Copy All Passwords to XML File Remote Exploit
Exploit for unknown platform in category web applications ==================================================================== SPIP " exit filename = sys.argv2 baseurl = sys.argv1 cookiejar = cookielib.CookieJar urlOpener = urllib2.buildopenerurllib2.HTTPCookieProcessorcookiejar formulaire =...