EUVD-2005-2417

Malware in sbrugna...

EUVD-2005-2416

Malware in sbrugna...

EUVD-2006-1297

Malware in sbrugna...

EUVD-2005-2418

Malware in sbrugna...

Contrexx CMS egov Module 1.0.0 - SQL Injection

Contrexx CMS egov Module 1.0.0 - SQL Injection Exploit Title: Contrexx CMS:egov moudle SQL injection Google Dork: inurl:?section=egov Date: 12/9/2016 Exploit Author: hamidreza borghei Software Link: https://www.cloudrexx.com/de/index.php?section=downloads&cmd=7&category=8 Version: 1.0.0 Tested on...

Contrexx CMS egov Module 1.0.0 - SQL Injection

Exploit for php platform in category web applications Exploit Title: Contrexx CMS:egov moudle SQL injection Google Dork: inurl:?section=egov Date: 12/9/2016 Exploit Author: hamidreza borghei Software Link: https://www.cloudrexx.com/de/index.php?section=downloads&cmd=7&category=8 Version: 1.0.0...

Contrexx CMS egov Module 1.0.0 - SQL Injection

Exploit Title: Contrexx CMS:egov moudle SQL injection Google Dork: inurl:?section=egov Date: 12/9/2016 Exploit Author: hamidreza borghei Software Link: https://www.cloudrexx.com/de/index.php?section=downloads&cmd=7&category=8 Version: 1.0.0 Tested on: linux sql injection in id parameter:...

Contrexx multiple input validation vulnerabilities-vulnerability warning-the black bar safety net

Affected system: Contrexx Contrexx 1.0.4 Not affected system: Contrexx Contrexx 1.0.5 Description: -------------------------------------------------------------------------------- BUGTRAQ ID: 1 4 3 5 2 CVECAN ID: CVE-2 0 0 5-2 4 1 5 Contrexx is an open source content management system. Contrexx...

Contrexx Shopsystem <= 2.2 SP3 - Blind SQL Injection

No description provided by source. Exploit title: Contrexx Shopsystem Blind SQL Injection Exploit Exploit PoC: index.php?section=shop&productId=VALID productid and YOUR BLIND SQL CODE Exploit tested on: Debian 6, Ubuntu Linux 11.04 Exploit found and written by: Penguin Version: = 2.2 SP 3 Date...

Contrexx 1.0.4 - Multiple Input Validation Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/14352/info Contrexx is affected by multiple input validation vulnerabilities. These issues can allow an attacker to carry out HTML injection, SQL injection and information disclosure attacks. Contrexx versions prior to...

Contrexx CMS 1.0.x Index.PHP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/17128/info Contrexx CMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...

Contrexx Shopsystem <= 2.2 SP3 (catId) - Blind SQL Injection

No description provided by source. !/usr/bin/php ?php / Exploit title: Contrexx Shopsystem Blind SQL Injection Exploit Exploit written by: Penguin Exploit: index.php?section=shop&catId=VALID categoryid and YOUR BLIND SQL CODE Exploit tested on: Debian 6, Ubuntu Linux 11.04 Software price: abount...

Contrexx Shopsystem 2.2 SP3 Blind SQL Injection

!/usr/bin/php ?php / Exploit title: Contrexx Shopsystem Blind SQL Injection Exploit Exploit written by: Penguin Exploit: index.php?section=shop&catId=VALID categoryid and YOUR BLIND SQL CODE Exploit tested on: Debian 6, Ubuntu Linux 11.04 Software price: abount 700 CHF Vendor:...

Contrexx ShopSystem 2.2 SP3 - catId Blind SQL Injection

Contrexx ShopSystem 2.2 SP3 - catId Blind SQL Injection !/usr/bin/php ?php / Exploit title: Contrexx Shopsystem Blind SQL Injection Exploit Exploit written by: Penguin Exploit: index.php?section=shop&catId=VALID categoryid and YOUR BLIND SQL CODE Exploit tested on: Debian 6, Ubuntu Linux 11.04...

Contrexx ShopSystem 2.2 SP3 - &#039;catId&#039; Blind SQL Injection

!/usr/bin/php ?php / Exploit title: Contrexx Shopsystem Blind SQL Injection Exploit Exploit written by: Penguin Exploit: index.php?section=shop&catId=VALID categoryid and YOUR BLIND SQL CODE Exploit tested on: Debian 6, Ubuntu Linux 11.04 Software price: abount 700 CHF Vendor:...

Contrexx ShopSystem 2.2 SP3 - Blind SQL Injection

Contrexx ShopSystem 2.2 SP3 - Blind SQL Injection Exploit title: Contrexx Shopsystem Blind SQL Injection Exploit Exploit PoC: index.php?section=shop&productId=VALID productid and YOUR BLIND SQL CODE Exploit tested on: Debian 6, Ubuntu Linux 11.04 Exploit found and written by: Penguin Version: =...

Contrexx Shopsystem <= 2.2 SP3 Blind SQL Injection (2 exploits)

Exploit for php platform in category web applications Exploit title: Contrexx Shopsystem Blind SQL Injection Exploit Exploit PoC: index.php?section=shop&productId=VALID productid and YOUR BLIND SQL CODE Exploit tested on: Debian 6, Ubuntu Linux 11.04 Exploit found and written by: Penguin Version:...

Contrexx ShopSystem 2.2 SP3 - Blind SQL Injection

Exploit title: Contrexx Shopsystem Blind SQL Injection Exploit Exploit PoC: index.php?section=shop&productId=VALID productid and YOUR BLIND SQL CODE Exploit tested on: Debian 6, Ubuntu Linux 11.04 Exploit found and written by: Penguin Version: = [email protected] !/usr/bin/php...

Daily web applications security vulnerabilities summary &#40;PHP, ASP, JSP, CGI, Perl&#41;

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Contrexx CMS: crossite scripting, registration automation...

Vulnerabilities in Contrexx CMS

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting и Insufficient Anti-automation уязвимостях в Contrexx CMS. XSS: http://site/index.php?section=search&term=2220style=22xss:expressionalertdocument.cookie IE Insufficient Anti-Automation: На странице регистраций...