DrBenHur.com DBHcms 1.1.4 'dbhcms_core_dir' Parameter Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/37498/info DrBenHur.com DBHcms is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing...

DBHcms 1.1.4 - SQL Injection Vulnerability

No description provided by source. DBHcms 1.1.4 SQL Injection Vulnerability Exploit Title: DBHcms 1.1.4 SQL Injection Vulnerability Date: 24-10-2010 Author: ZonTa Mail: zontahackersatgmaildotcom IM : zontahackersatlivedotcom Software Link: http://www.drbenhur.com/downloads-dbhcms-114-1-69-en.html...

CVE-2010-4869

SQL injection vulnerability in index.php in DBHcms 1.1.4 allows remote attackers to execute arbitrary SQL commands via the editmenu parameter...

Sql injection

SQL injection vulnerability in index.php in DBHcms 1.1.4 allows remote attackers to execute arbitrary SQL commands via the editmenu parameter...

CVE-2010-4869

CVE-2010-4869 targets DBHcms 1.1.4, where a SQL injection flaw in index.php allows remote attackers to inject arbitrary SQL via the editmenu parameter. The CVSS2 base score is 7.5 (HIGH) with network attack vector, no authentication, and partial impact on confidentiality, integrity, and availabil...

CVE-2010-4869

SQL injection vulnerability in index.php in DBHcms 1.1.4 allows remote attackers to execute arbitrary SQL commands via the editmenu parameter...

HTB22796: Path disclousure in DBHcms

Vulnerability ID: HTB22796 Reference: http://www.htbridge.ch/advisory/pathdisclousureindbhcms.html Product: DBHcms Vendor: Kai-Sven Bunk http://www.drbenhur.com/ Vulnerable Version: Vendor Notification: 13 January 2011 Vulnerability Type: Path disclosure Status: Awaiting Vendor Response Risk leve...

DBHcms Path Disclosure

Vulnerability ID: HTB22796 Reference: http://www.htbridge.ch/advisory/pathdisclousureindbhcms.html Product: DBHcms Vendor: Kai-Sven Bunk http://www.drbenhur.com/ Vulnerable Version: Vendor Notification: 13 January 2011 Vulnerability Type: Path disclosure Status: Awaiting Vendor Response Risk leve...

DBHcms v1.1.4 (dbhcms_user and searchString) SQL Injection

Exploit for php platform in category web applications ========================================================== DBHcms v1.1.4 dbhcmsuser and searchString SQL Injection ========================================================== Vulnerability ID: HTB22651 Reference:...

DBHcms 1.1.4 SQL Injection

Vulnerability ID: HTB22651 Reference: http://www.htbridge.ch/advisory/sqlinjectionindbhcms.html Product: DBHcms Vendor: drbenhur.com http://www.drbenhur.com/ Vulnerable Version: 1.1.4 and probably prior versions Vendor Notification: 13 October 2010 Vulnerability Type: SQL Injection Status: Not...

DBHcms 1.1.4 SQL injection vulnerability-vulnerability warning-the black bar safety net

| DBHcms is a for personal and small business website open source content management system, while developing in multiple languages good support for search engine optimization. Program vulnerability the main reason is not on the submitted parameters are strictly filtered, resulting inSQL...

SQL injection in DBHcms

Vulnerability ID: HTB22651 Reference: http://www.htbridge.ch/advisory/sqlinjectionindbhcms.html Product: DBHcms Vendor: drbenhur.com http://www.drbenhur.com/ Vulnerable Version: 1.1.4 and probably prior versions Vendor Notification: 13 October 2010 Vulnerability Type: SQL Injection Status: Not...

DBHcms 1.1.4 - dbhcms_userSearchString SQL Injection

DBHcms 1.1.4 - dbhcmsuserSearchString SQL Injection Vulnerability ID: HTB22651 Reference: http://www.htbridge.ch/advisory/sqlinjectionindbhcms.html Product: DBHcms Vendor: drbenhur.com http://www.drbenhur.com/ Vulnerable Version: 1.1.4 and probably prior versions Vendor Notification: 13 October...

DBHcms 1.1.4 - 'dbhcms_user/SearchString' SQL Injection

Vulnerability ID: HTB22651 Reference: http://www.htbridge.ch/advisory/sqlinjectionindbhcms.html Product: DBHcms Vendor: drbenhur.com http://www.drbenhur.com/ Vulnerable Version: 1.1.4 and probably prior versions Vendor Notification: 13 October 2010 Vulnerability Type: SQL Injection Status: Not...

DBHcms 1.1.4 SQL injection vulnerability and fix-vulnerability warning-the black bar safety net

Vulnerability Description: The DBHcms is a for personal and small business website open source content management system, while developing in multiple languages good support for search engine optimization. Program vulnerability the main reason is not on the submitted parameters are strictly...

DBHcms 1.1.4 SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================== DBHcms 1.1.4 SQL Injection Vulnerability ======================================== Exploit Title: DBHcms 1.1.4 SQL Injection Vulnerability Date: 24-10-2010 Author: ZonTa Mail: zontahackersatgmaildotcom I...

DBHcms 1.1.4 - dbhcms_pid SQL Injection

DBHcms 1.1.4 - dbhcmspid SQL Injection DBHcms 1.1.4 SQL Injection Vulnerability Exploit Title: DBHcms 1.1.4 SQL Injection Vulnerability Date: 24-10-2010 Author: ZonTa Mail: zontahackersatgmaildotcom IM : zontahackersatlivedotcom Software Link:...

DBHcms 1.1.4 - 'dbhcms_pid' SQL Injection

DBHcms 1.1.4 SQL Injection Vulnerability Exploit Title: DBHcms 1.1.4 SQL Injection Vulnerability Date: 24-10-2010 Author: ZonTa Mail: zontahackersatgmaildotcom IM : zontahackersatlivedotcom Software Link: http://www.drbenhur.com/downloads-dbhcms-114-1-69-en.html Version: 1.1.4 Tested on:...

DBHcms 1.1.4 SQL Injection

DBHcms 1.1.4 SQL Injection Vulnerability Exploit Title: DBHcms 1.1.4 SQL Injection Vulnerability Date: 24-10-2010 Author: ZonTa Mail: zontahackersatgmaildotcom IM : zontahackersatlivedotcom Software Link: http://www.drbenhur.com/downloads-dbhcms-114-1-69-en.html Version: 1.1.4 Tested on:...

Multiple Vulnerabilities in DBHcms

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in DBHcms which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerabilities in DBHcms 1.1 The vulnerability exists due to input sanitation error in the...