[SECURITY] Fedora 9 Update: drupal-6.4-1.fc9

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

[SECURITY] Fedora 8 Update: drupal-5.10-1.fc8

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

Docebo GLOBALS Variable Overwrite Vulnerability (Aug 2008)

Docebo is prone to vulnerable remote and local file inclusion vulnerabilities. SPDX-FileCopyrightText: 2008 Ferdy Riphagen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only Original...

[SECURITY] Fedora 8 Update: drupal-5.9-1.fc8

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

PHPX 3.5.16 Cookie Poisoning and Login Bypass Vulnerability

No description provided by source. ======================================================================= = gnix = gnixmail at gmail dot com http://gnix.netsons.org Application: phpx http://www.phpx.org/project.php stable version Versions: 3.5.16 Platforms: All Bug: Cookie poisoning / Login bypa...

PHPX 3.5.16 - Cookie Poisoning Authentication Bypass

PHPX 3.5.16 - Cookie Poisoning Authentication Bypass ======================================================================= = gnix = gnixmail at gmail dot com http://gnix.netsons.org Application: phpx http://www.phpx.org/project.php stable version Versions: 3.5.16 Platforms: All Bug: Cookie...

PHPX 3.5.16 - Cookie Poisoning / Authentication Bypass

======================================================================= = gnix = gnixmail at gmail dot com http://gnix.netsons.org Application: phpx http://www.phpx.org/project.php stable version Versions: 3.5.16 Platforms: All Bug: Cookie poisoning / Login bypass Date: 31 July 2008...

fuzzylime (cms) comssrss.php files[] Parameter Traversal Local File Inclusion

The remote host is running fuzzylime cms, a PHP-based content management system. The version of fuzzylime cms installed on the remote host fails to sanitize user-supplied input to the 'files' parameter of the 'commsrss.php' script before using it to include PHP code. Regardless of PHP's...

[SECURITY] Fedora 8 Update: drupal-5.8-1.fc8

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

[SECURITY] Fedora 9 Update: drupal-6.3-1.fc9

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

Pluck 4.5.1 (blogpost) Local File Inclusion Vulnerability (win only)

Exploit for unknown platform in category web applications ==================================================================== Pluck 4.5.1 blogpost Local File Inclusion Vulnerability win only ==================================================================== AmnPardaz Security Research Team...

Wind noise CMS4. 0sp5 commercial version of the fatal-vulnerability warning-the black bar safety net

Article author: oldjun&flyh4t script security team Information source: evil octal information security team www.eviloctal.com） Note: the article has been published in the hackers Handbook, by the author of friendship submitted to the evil octal information security team technology Forum, reproduc...

phPortal 1.2 Multiple Remote File Inclusions Exploit

Exploit for unknown platform in category web applications ==================================================== phPortal 1.2 Multiple Remote File Inclusions Exploit ==================================================== !/usr/bin/perl phportal1.2Beta gunaysoft.php Remote File Include Vulnerability...

PHPortal 1.2 - Multiple Remote File Inclusions

PHPortal 1.2 - Multiple Remote File Inclusions !/usr/bin/perl phportal1.2Beta gunaysoft.php Remote File Include Vulnerability Discovered by : Ciph3r Class: Remote File Include Vulnerability exemplary Exp: http://www.site.com/sablonlar/gunaysoft/gunaysoft.php?icerikyolu=shell...

eLineStudio Site Composer (ESC) <= 2.6 Multiple Vulnerabilities

No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: eLineStudio Site Composer ESC =2.6 Multiple Vulnerabilities Vendor: www.elinestudio.com Vulnerable Version: 2.6 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory:...

Academic Web Tools CMS <= 1.4.2.8 Multiple Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== Academic Web Tools CMS = 1.4.2.8 Multiple Vulnerabilities ========================================================== AmnPardaz Security Research Team Title: Academic Web Tools CMS...

QuickerSite Multiple Vulnerabilities

www.BugReport.ir AmnPardaz Security Research Team Title: QuickerSite Multiple Vulnerabilities Vendor: www.quickersite.com Vulnerable Version: 1.8.5 Exploit: Available Impact: High Fix: N/A Original Advisory: http://bugreport.ir/index.php?/39 1. Description: QuickerSite is a Content Management...

QuickerSite 1.8.5 Multiple Remote Vulnerabilities

No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: QuickerSite Multiple Vulnerabilities Vendor: www.quickersite.com Vulnerable Version: 1.8.5 Exploit: Available Impact: High Fix: N/A Original Advisory: http://bugreport.ir/index.php?/39 1. Description:...

dotCMS search-results.dot search_query Parameter XSS

The remote host is using dotCMS, an open source J2EE / Java web content management system. The version of dotCMS installed on the remote host fails to sanitize input to the 'searchquery' parameter of the 'search-results.dot' script before using it to generate dynamic HTML output. An attacker may ...

QuickerSite 1.8.5 - Multiple Vulnerabilities

www.BugReport.ir AmnPardaz Security Research Team Title: QuickerSite Multiple Vulnerabilities Vendor: www.quickersite.com Vulnerable Version: 1.8.5 Exploit: Available Impact: High Fix: N/A Original Advisory: http://bugreport.ir/index.php?/39 1. Description: QuickerSite is a Content Management...