EUVD-2009-4761

Malware in sbrugna...

EUVD-2009-4762

Malware in sbrugna...

CVE-2009-4798

Multiple SQL injection vulnerabilities in Diskos CMS 6.x allow remote attackers to execute arbitrary SQL commands via the 1 kat parameter to side.asp, and the 2 brugerid and 3 password fields to the administration login feature...

CVE-2009-4799

Diskos CMS 6.x stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 artiklerprod.mdb or 2 medlemmer.mdb...

Improper access control

Diskos CMS 6.x stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 artiklerprod.mdb or 2 medlemmer.mdb...

Sql injection

Multiple SQL injection vulnerabilities in Diskos CMS 6.x allow remote attackers to execute arbitrary SQL commands via the 1 kat parameter to side.asp, and the 2 brugerid and 3 password fields to the administration login feature...

CVE-2009-4799

Diskos CMS 6.x contains a vulnerability where sensitive data is stored under the web root with insufficient access control, allowing remote attackers to download the database via direct requests to artikler_prod.mdb or medlemmer.mdb. The issue is characterized by a network attack vector, low atta...

CVE-2009-4799

Diskos CMS 6.x stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 artiklerprod.mdb or 2 medlemmer.mdb...

CVE-2009-4798

Multiple SQL injection vulnerabilities in Diskos CMS 6.x allow remote attackers to execute arbitrary SQL commands via the 1 kat parameter to side.asp, and the 2 brugerid and 3 password fields to the administration login feature...

CVE-2009-4798

CVE-2009-4798 affects Diskos CMS 6.x, with multiple SQL injection flaws exposed via the (1) kat parameter to side.asp and (2) brugerid and (3) password fields in the administration login. The root cause is improper input handling allowing arbitrary SQL execution by remote attackers. The available...

Diskos CMS Manager (SQL/DB/Auth Bypass) Multiple Vulnerabilities

No description provided by source. Diskos CMS Manager & multiple vulnerabilitiesS Prodcut: Diskos CMS Manager Home : http://www.diskos.dk Vunlerability : SQL Injection & admin byapass & database disclosure Dork : "Powered By diskos" inurl:"side.asp?kat=1" Discovred by: AnGeL25dZ Contact :...

Diskos CMS Manager (SQL/DB/Auth Bypass) Multiple Vulnerabilities

Exploit for unknown platform in category web applications ================================================================ Diskos CMS Manager SQL/DB/Auth Bypass Multiple Vulnerabilities ================================================================ Diskos CMS Manager & multiple vulnerabilitiesS...

Diskos CMS Manager SQL Injection

Diskos CMS Manager & multiple vulnerabilitiesS Prodcut: Diskos CMS Manager Home : http://www.diskos.dk Vunlerability : SQL Injection & admin byapass & database disclosure Dork : "Powered By diskos" inurl:"side.asp?kat=1" Discovred by: AnGeL25dZ Contact : [email protected] Greetz to : ALLAH All...

Diskos CMS Manager - SQL Injection / File Disclosure / Authentication Bypass

Diskos CMS Manager & multiple vulnerabilitiesS Prodcut: Diskos CMS Manager Home : http://www.diskos.dk Vunlerability : SQL Injection & admin byapass & database disclosure Dork : "Powered By diskos" inurl:"side.asp?kat=1" Discovred by: AnGeL25dZ Contact : [email protected] Greetz to : ALLAH All...

Diskos CMS Manager - SQL Injection File Disclosure Authentication Bypass

Diskos CMS Manager - SQL Injection File Disclosure Authentication Bypass Diskos CMS Manager & multiple vulnerabilitiesS Prodcut: Diskos CMS Manager Home : http://www.diskos.dk Vunlerability : SQL Injection & admin byapass & database disclosure Dork : "Powered By diskos" inurl:"side.asp?kat=1"...