4541 matches found
OS2A-1001.txt
OS2A ePing Arbitrary File Creation/Command Execution Vulnerability OS2A ID: OS2A1001 Status Published: 08/04/2005 Updated : 08/05/2005 Patch Released Class: File Creation/Command Execution Severity: CRITICAL Overview: ePing is a ping utility plugin for e107, a PHP-based content management system...
FlatNuke < 2.5.6 Multiple Remote Vulnerabilities
The remote host is running FlatNuke, a content management system written in PHP that uses flat files rather than a database for its storage. The version of FlatNuke installed on the remote host suffers from several flaws: - Arbitrary PHP Code Execution Vulnerability The application fails to remov...
JAWS Glossary Gadget Multiple XSS
The remote host is running JAWS, a content management system written in PHP. The remote version of this software does not perform a proper validation of user-supplied input to several variables used in the 'GlossaryModel.php' script, and is, therefore, vulnerable to cross-site scripting attacks...
cleverNotSo.txt
Clever copy Path disclosure and multiple XSS vendor url:http://clevercopy.bestdirectbuy.com advisory:http://lostmon.blogspot.com/2005/07/ clever-copy-path-disclosure-and-xss.html vendor notify: yes exploit available:yes Clever Copy is a free, fully scalable web site portal and news posting...
FreeBSD : postnuke -- XSS (XSS) vulnerabilities (7e580822-8cd8-11d9-8c81-000a95bc6fae)
A cross-site scripting vulnerability is present in the PostNuke PHP content management system. By passing data injected through exploitable errors in input validation, an attacker can insert code which will run on the machine of anybody viewing the page. It is feasible that this attack could be...
CVE-2004-2210: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in Express-Web Content Management System CMS allow remote attackers to steal cookie-based authentication information and possibly perform other exploits via the 1 n, 2 b, 3 e, or 4 a parameters to default.asp, 5 the Referer header in an HTTP reque...
Drupal Software Detection
Drupal, an open source content management system written in PHP, is running on the remote web server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18638; scriptversion"1.35"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/05/24";...
XOOPS Detection
The remote host is running XOOPS, a web content management system written in PHP and released under the GPL. Tenable Network Security, Inc. include"compat.inc"; if description scriptid18613; scriptversion"1.18"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/05/24";...
clevercopyXSS.txt
Clevercopy is an open source content management system with the core engine available for free and some add-ons available for purchase. Its website is at http://clevercopy.bestdirectbuy.com/ Clevercopy suffers from a Cross Site scripting XSS vulnerability;...
exponentXSS.txt
Exponent is an open source content management system designed primarily for non-technical types. Its website is at http://www.exponentcms.org/ Exponent suffers from a Cross Site scripting XSS vulnerability; http://host/folder/index.php?module=newsmodule&src=@random41940a897e943∫=&...
XOOPS 2.0.11 && Earlier Multiple Vulnerabilities
GulfTech Security Research June 28th, 2005 Vendor : XOOPS URL : http://www.xoops.org/ Version : XOOPS 2.0.11 And Earlier Risk : Multiple Vulnerabilities Description: XOOPS is a very popular dynamic web content management system written in Object Oriented PHP. One of the features of XOOPS is it's...
[Full-disclosure] SEC-CONSULT SA20050602-1 :: Arbitrary File Inclusion in phpCMS 1.2.x
SEC-CONSULT Security Advisory 20050602-1 ======================================================================= title: Arbitrary File Inclusion in phpCMS 1.2.x program: phpCMS vulnerable version: 1.2.0, 1.2.1, 1.2.1pl1 homepage: www.phpcms.de found: 2005-05-31 by: sk0L / SEC-CONSULT /...
postnukeInclusion.txt
Product : Postnuke 0.750 http://www.postnuke.com Description: Postnuke 0.750 - 0.760rc4 local file inclusion Severity: High Description =========== Postnuke is Web Content Management System written in PHP and using mysql as database backend. Detail ====== Directory traversal in function pnModFunc...
[SECURITYREASON.COM] PostNuke XSS 0.760{RC2,RC3}
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PostNuke XSS 0.760RC2,RC3 cXIb8O3.6 Author: Maksymilian Arciemowicz cXIb8O3 Date: 4.3.2005 from SECURITYREASON.COM - --- 0.Description --- PostNuke: The Phoenix Release 0.750 PostNuke is an open source, open developement content management system CMS...
CVE-2004-2067
SQL injection vulnerability in controlpanel.php in Jaws Framework and Content Management System 0.4 allows remote attackers to execute arbitrary SQL and bypass authentication via the 1 user, 2 password, or 3 cryptedpassword parameters...
CVE-2004-2067
CVE-2004-2067: SQL injection in controlpanel.php of Jaws Framework and Content Management System 0.4 allows remote attackers to bypass authentication by injecting via the (1) user, (2) password, or (3) crypted_password parameters. Impact indicated as partial confidentiality/integrity/availability...
CVE-2004-2067: Undefined Security Weakness
SQL injection vulnerability in controlpanel.php in Jaws Framework and Content Management System 0.4 allows remote attackers to execute arbitrary SQL and bypass authentication via the 1 user, 2 password, or 3 cryptedpassword parameters...
Multiples Full Path Disclosure in php-nuke 7.6 (and below)
Multiples Full Path Disclosure in php-nuke 7.6 and below --------------------------------------------------------------------------- Author: project-restart Date: 27. April 2005 Location: Brazil Web: http://www.project-restart.org/ Target: PHP-nuke 7.6 and below...
DUPortal/DUPortal Pro Multiple Scripts SQL Injection (1)
The remote host is running DUPortal, a content management system written in ASP. The remote version of this software is vulnerable to several SQL injection vulnerabilities in files 'details.asp', 'search.asp', 'default.asp' , 'cat.asp' and more. With a specially crafted URL, an attacker can explo...
Mambo Detection
The remote host is running Mambo, a content management system written in PHP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17672; scriptversion"1.24"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/05/24"; scriptnameenglish:"Mambo Detection";...