4383 matches found
PHPX admin/index.php username Parameter SQL Injection
The remote host is running PHPX, a content management system written in PHP. The installed version of PHPX does not validate input to the 'username' parameter of the 'admin/index.php' script before using it in a database query. Provided PHP's 'magicquotesgpc' setting is off, an attacker can...
GuppY <= 4.5.9 Multiple Remote Vulnerabilities (Traversal, Code Exec)
The remote host is running GuppY, a content management system written in PHP. The version of GuppY installed on the remote host does not sanitize user input to the server variable 'REMOTEADDR' before using it in the 'error.php' script as part of an include script. An unauthenticated attacker can...
Nephp Publisher v4.5.x SQL inj. vuln.
Nephp Publisher v4.5.x SQL inj. vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/nephp-publisher-v45x-sql-inj-vuln.html Vendor:www.nelogic.com/cms/07-11-2005/19-nephp-publisher.html affected version:v4.5.2 and prior Product Description: a...
phpComasy "id" SQL Injection Vulnerability
phpComasy "id" SQL Injection Vulnerability author:r0t hackers.by.lv Date:19 nov. 2005 software: phpComasy affected version: phpComasy 0.7.5 and prior Vendor:http://www.phpcomasy.org/ Software Description: phpComasy is a free, open source content management system for small websites. For this...
phpFusion600206.txt
PHP-Fusion Date: Nov. 16 2005 Vendor: http://sourceforge.net/projects/php-fusion/ Description: "...a light-weight open-source content management system CMS written in PHP. It utilises a mySQL database to store your site content and includes a simple, comprehensive adminstration system. PHP-Fusion...
phpwcms 1.2.5 Multiple Vulnerabilities
The remote host is running phpwcms, an open source content management system written in PHP. The version of phpwcms installed on the remote host does not sanitize input to the 'formlang' parameter of the 'login.php' script before using it in PHP 'include' functions. An unauthenticated attacker ca...
XOOPS 2.2.3 Final arbitrary local inclusion / XOOPS WF-Downloads module v 2.05 SQL Injection
11.04 12/11/2005 1XOOPS 2.2.3 Final arbitrary local inclusion 2XOOPS WF-Downloads module v 2.05 SQL Injection / Administrative credentials disclousre / Remote commands execution software: site: http://www.xoops.org/ description: "XOOPS is an extensible, OO Object Oriented, easy to use dynamic web...
iCMS Remote File Include Vulnerability
iCMS Remote File Include Vulnerability Author: r0t hackers.by.lv Date: 14. nov 2005 software:iCMS vendor:http://www.cogilent.com/ software description: iCMS is an interactive Web Content Management System. The purpose of this product is to facilitate organizations that require power solutions to...
atutor151pl2.txt
ATutor 1.5.1pl2 SQL Injection / Remote commands execution software: site: http://www.atutor.ca/ description : "ATutor is an Open Source Web-based Learning Content Management System LCMS designed with accessibility and adaptability in mind." if magicquotesgpc off - SQL INJECTION vulnerable code in...
PsNews XSS
The remote server is running a version of PsNews a content management system which is older than 1.2. This version is affected by multiple cross-site scripting flaws. An attacker may exploit these to steal the cookies from legitimate users of this website. SPDX-FileCopyrightText: 2004 David...
PowerPortal Path Dislcosure
The remote host is using PowerPortal, a content management system, written in PHP. A vulnerability exists in the remote version of this product which may allow a remote attacker to cause the product to disclose the path it is installed under. An attacker may use this flaw to gain more knowledge...
phpCMS XSS
The remote host runs phpCMS, a content management system written in PHP. This version is vulnerable to cross-site scripting due to a lack of sanitization of user-supplied data in parser.php script. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a...
e107 Detection
The remote host is running e107, a content management system written in PHP and with a MySQL back-end. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid20129; scriptversion"1.15"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01";...
e107 remote commands execution
e107 0.617 stable/ 0.6171 / 0.6172 resetcore.php utility SQL Injection / Login bypass / remote code execution / cross site scripting software: site: http://e107.org/news.php description: "e107 is a content management system written in php and using the popular open source mySQL database system fo...
Secunia Research: MySource Cross-Site Scripting and File Inclusion Vulnerabilities
====================================================================== Secunia Research 18/10/2005 - MySource Cross-Site Scripting and File Inclusion Vulnerabilities - ====================================================================== Table of Contents Affected...
WebGUI < 6.7.6 Asset.pm Asset Addition Arbitrary Code Execution
The remote host is running WebGUI, a content management system from Plain Black Software. The installed version of WebGUI on the remote host fails to sanitize user-supplied input via the 'class' variable to various sources before using it to run commands. By leveraging this flaw, an attacker may ...
lucidCMS 1.0.11 is susceptible to a cross site scripting attack
Description: lucidCMS is a simple and flexible content management system for the individual or organization that wishes to manage a collection of webpages without the overhead and complexity of other available "community" CMS options. version:lucidCMS 1.0.11 vendor:www.lucidcms.net Vulnerability:...
lucidCMS.txt
Description: lucidCMS is a simple and flexible content management system for the individual or organization that wishes to manage a collection of webpages without the overhead and complexity of other available "community" CMS options. version:lucidCMS 1.0.11 vendor:www.lucidcms.net Vulnerability:...
cmsXSS.txt
Description: CMS lets you update your pages and keep the content on a static page that will not become stale regardless of how much other content gets placed on your site version:CMS Made Simple 0.10 vendor:http://www.cmsmadesimple.org Vulnerability: cross site script exploit:...
ATutor 1.5.1 SQL Injection / Admin credentials disclosure / remote code execution
ATUTOR 1.5.1 possibly prior versions SQL INJECTION / ADMIN & USERS CREDENTIALS DISCLOSURE / INFORMATION DISCLOSURE / USER IMPERSONATION / REMOTE CODE EXECUTION software: site: http://www.atutor.ca/ description: "ATutor is an Open Source Web-based Learning Content Management System LCMS designed...