Azucar CMS 1.3 - adminindex_sitios.php File Inclusion

Azucar CMS 1.3 - adminindexsitios.php File Inclusion +------------------------------------------------------------------------------------------- + Azucar CMS +------------------------------------------------------------------------------------------- + Details: + Azucar CMS admin/indexsitios.php...

Azucar CMS 1.3 - '/admin/index_sitios.php' File Inclusion

+------------------------------------------------------------------------------------------- + Azucar CMS +------------------------------------------------------------------------------------------- + Details: + Azucar CMS admin/indexsitios.php uses the include function insecurely on the $GETVIEW...

Seditio Detection

The remote host is running Seditio, a moduler website engine powered by PHP and MySQL. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid23785; scriptversion"1.14"; scriptsetattributeattribute:"pluginmodificationdate...

QuestCMS (main.php) Remote File Include Vulnerability

No description provided by source. !!!!!!!!!WWW.SERSAVASCAR.COM!!!!!!!!! -------------------------------------------------------------------------------- Title : Questcms Remote File Include Vulnerability -------------------------------------------------------------------------------- Author:...

CVE-2006-6110

Multiple SQL injection vulnerabilities in an unspecified BPG-InfoTech Content Management System product allow remote attackers to execute arbitrary SQL commands via the 1 vjob parameter in publicationslist.asp or 2 InfoID parameter in publicationview.asp...

CVE-2006-6110

Multiple SQL injection vulnerabilities in an unspecified BPG-InfoTech Content Management System product allow remote attackers to execute arbitrary SQL commands via the 1 vjob parameter in publicationslist.asp or 2 InfoID parameter in publicationview.asp...

Etomite CMS 0.6.1.2 Vulnerabilities + ContenNow 1.39 Vulnerabilities + Exploits

Etomite CMS 0.6.1.2 Multiple Vulnerabilities Severity : Medium risk Vendor : www.etomite.org Author : Alfredo Pesoli 'revenge' Secunia Advisory : SA22885 Security Focus BID : 21135 -------------------------------------------------- Description Etomite is a PHP Content Management System, more info...

[MajorSecurity Advisory #36]dev4u CMS - Multiple SQL Injection and Cross Site Scripting Issues

MajorSecurity Advisory 36dev4u CMS - Multiple SQL Injection and Cross Site Scripting Issues Details ======= Product: dev4u CMS Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.dev4u.de/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: David...

bpg.txt

Aria-Security Team Advisory Original Advisory : http://aria-security.net/advisory/bpg.txt ----------------------------------------------------------- Software: BPG Content Management System Method: SQL Injection PoC: http://target/path/publicationview.asp?InfoID=SQL CODE...

BPG Content Management System SQL Injection

Aria-Security Team Advisory www.Aria-security.Com For English www.Aria-Security.net For Persian Original Advisory : http://aria-security.net/advisory/bpg.txt ----------------------------------------------------------- Software: BPG Content Management System Method: SQL Injection PoC:...

Update Protection against phpFullAnnu 'repmod' parameter File Inclusion Vulnerability

phpFullAnnu, a content management system portal application, is prone to a remote file inclusion vulnerability. An attacker can exploit this vulnerability to execute arbitrary PHP code on an affected system via a maliciously crafted URL in the 'repmod' parameter...

iWare Pro <= 5.0.4 (chat_panel.php) Remote Code Execution Vulnerability

No description provided by source. +------------------------------------------------------------------------------------------- + iWare Pro = 5.0.4 chatpanel.php Remote Code Execution Vulnerability +------------------------------------------------------------------------------------------- +...

iWare Pro 5.0.4 - chat_panel.php Remote Code Execution

iWare Pro 5.0.4 - chatpanel.php Remote Code Execution +------------------------------------------------------------------------------------------- + iWare Pro +------------------------------------------------------------------------------------------- + Details: + iWare...

iWare Pro 5.0.4 - 'chat_panel.php' Remote Code Execution

+------------------------------------------------------------------------------------------- + iWare Pro +------------------------------------------------------------------------------------------- + Details: + iWare admin/mods/simplechat1.0.0/chatpanel.php does not sanatize the $message variable...

iWare Pro <= 5.0.4 (chat_panel.php) Remote Code Execution Vulnerability

Exploit for unknown platform in category web applications ======================================================================= iWare Pro +------------------------------------------------------------------------------------------- + Details: + iWare admin/mods/simplechat1.0.0/chatpanel.php does...

CVE-2006-5625

PHP remote file inclusion vulnerability in wwwdev/nxheader.inc.php in N/X 2002 Professional Edition Web Content Management System WCMS 4.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cpath parameter...

CVE-2006-5548

PHP remote file inclusion vulnerability in OTSCMS/OTSCMS.php in Open Tibia Server Content Management System OTSCMS 2.0.0 through 2.1.3 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSconfigdirectoriesclasses parameter...

CVE-2006-5547

The CVE-2006-5547 entry concerns OTSCMS (Open Tibia Server Content Management System) versions 1.0.0 through 1.0.3. A PHP remote file inclusion flaw exists in OTSCMS.php via a crafted URL assigned to GLOBALS[config][otscms][directories][includes], enabling an attacker to execute arbitrary PHP cod...

Mambo/Joomla plugin.class.php脚本远程文件包含漏洞

Mambo（也被称为Joomla）是一款开放源代码的WEB内容管理系统。 Mambo在处理用户请求时存在输入验证漏洞，远程攻击者可能利用此漏洞在服务器上以Web进程权限执行任意命令。 在Mambo的comcomprofiler文件夹的plugin.class.php脚本中： -----------------------plugin.class.php---------------------- ?php / Plugin handler @package Joomla @author various, JoomlaJoe and Beat / requireonce...

TextPattern 1.19 - 'publish.php' Remote File Inclusion

---------------------------------------------------------------------------- TextPattern =g1.19 txpcfgtxpath Remote File Inclusion Vulnerability ---------------------------------------------------------------------------- Author : Zeni Susanto A.K.A Bithedz Date Found : October, 25th 2006 Locatio...