4384 matches found
RunCMS <= 1.6 Local File Inclusion Vulnerability
No description provided by source. WwW.BugReport.ir AmnPardaz Security Research & Penetration Testing Group Title: RunCms Multiple Vulnerabilities Vendor: http://www.runcms.org/ Bugs: Local File Inclusion, Modules Authorization Weakness Vulnerable Version: RunCMS 1.6 Halloween, 1.5.x prior versio...
RunCMS <= 1.6 Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications ================================================ RunCMS Local File Inclusion Remote Code Execution Code Snippet: /include/common.php line131-143 // :: Register Globals Compatibility :: $globalstest = @ini...
ProfileCMS <= 1.0 (id) Remote SQL Injection Vulnerability
No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV84$2007 ----------------------------------------------------------------------------------------- ECHOADV84$2007 ProfileCMS = 1.0 Remote SQL Injection Vulnerability...
ProfileCMS 1.0 - id SQL Injection
ProfileCMS 1.0 - id SQL Injection \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV84$2007 ----------------------------------------------------------------------------------------- ECHOADV84$2007 ProfileCMS = 1.0 Remote SQL Injection Vulnerability...
PicoFlat CMS多个远程安全绕过漏洞
PicoFlat CMS是一款内容管理系统。 PicoFlat CMS不正确验证用户权限，远程攻击者可以利用漏洞绕过安全限制，访问应用程序执行管理员功能。 目前没有详细漏洞细节提供。 PicoFlat CMS PicoFlat CMS 0.4.14 PicoFlat CMS PicoFlat CMS 0.4.5 升级程序： PicoFlat CMS PicoFlat CMS 0.4.14 PicoFlat CMS PicoFlatCMS24102007.0.4.18.tar.gz...
[SECURITY] Fedora 7 Update: drupal-5.3-1.fc7
Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...
TikiWiki: Arbitrary command execution
Background TikiWiki is an open source content management system written in PHP. Description ShAnKaR reported that input passed to the "f" array parameter in tiki-graphformula.php is not properly verified before being used to execute PHP functions. Impact An attacker could execute arbitrary code...
Sql injection
Multiple SQL injection vulnerabilities in Stride 1.0 allow remote attackers to execute arbitrary SQL commands via 1 the p parameter to main.php in the Content Management System, 2 the id parameter in a sto cmd action to shop.php in the Merchant subsystem, or the 3 course or 4 provider parameter t...
CVE-2007-5430
Multiple SQL injection vulnerabilities in Stride 1.0 allow remote attackers to execute arbitrary SQL commands via 1 the p parameter to main.php in the Content Management System, 2 the id parameter in a sto cmd action to shop.php in the Merchant subsystem, or the 3 course or 4 provider parameter t...
Scott Manktelow Design Stride 1.0 - Content Management System main.php SQL Injection
Scott Manktelow Design Stride 1.0 - Content Management System main.php SQL Injection source: https://www.securityfocus.com/bid/26041/info Scott Manktelow Design Stride 1.0 Content Management System is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied...
Scott Manktelow Design Stride 1.0 - 'Content Management System main.php' SQL Injection
source: https://www.securityfocus.com/bid/26041/info Scott Manktelow Design Stride 1.0 Content Management System is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker t...
eGov Content Manager Cross Site Scripting Vulrnability
HSC eGov Content Manager Cross Site Scripting Vulrnability The eGov Manager was designed to simplify the efforts of government staffers who are responsible for posting public documents, news updates, events, managing staff directories and online services. This issue is due to a failure in the...
actsitebase-rfi.txt
'/ -.- ---------------------oOO------OOo-------------------- | actSite v1.991 Beta base.php Remote File Inclusion | | coded by DNX | -------------------------------------------------------- ! Discovered: DNX ! Vendor: http://www.actsite.de ! Detected: 02.09.2007 ! Reported: 02.09.2007 ! Remote:...
actSite 1.991 Beta (base.php) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ================================================================= actSite 1.991 Beta base.php Remote File Inclusion Vulnerability ================================================================= '/ -.-...
множественные уязвимости в Stride v1.0
Здравствуйте, 3APA3A. Software: Stride v1.0 Content Management System, Merchant, Courses Vendor: www.scottmanktelow.com Vulnerability: множественные уязвимости Risk: высокий Date: 16.09.2007 discovered by durito -duritoatmaildotru- HTTP: durito.narod.ru +:| Details |: SQL-инъекции +:| Экплойт |:...
Ripe Website Manager SQL Injection and Cross Site Scripting Vulnerabilities
Ripe Website Manager SQL Injection and Cross Site Scripting Vulnerabilities OS2A ID: OS2A1009 Status: 07/11/2007 Issue Discovered 07/12/2007 Reported to the Vendor 08/22/2007 Public Release Class: SQL Injection and Cross Site Scripting Severity: High Overview: --------- Ripe Website Manager is a...
eXV2.de Browser Cookie is not properly sanitised
Details ======= Product: eXV2.de CMS = 2.0.5. Severity: moderated Remote-Exploit: yes Vendor-URL: http://www.exv2.de/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: Vision aka n-tier http://www.i-s-o.org Original Advisory: ============...
Joomla 1.0.12 CMS - Session fixation Issue in backend Administration interface
==================================================================================== Team Intell Security Advisory TISA2007-03 ------------------------------------------------------------------------------------ Joomla 1.0.12 CMS - Session fixation Issue in backend Administration interface...
[SECURITY] Fedora 7 Update: drupal-5.2-1.fc7
Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...
[Full-disclosure] ActiveWeb Contentserver CMS SQL Injection Management Interface
Advisory: ActiveWeb Contentserver CMS SQL Injection Management Interface RedTeam Pentesting discovered an SQL Injection in the picturerealedit.asp script of the activeWeb contentserver CMS during a penetration test. An editor with the permission to edit pictures can exploit this by injecting...