CVE-2012-6519

SQL injection vulnerability in modules/poll/index.php in DIY-CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the start parameter to mod.php...

CVE-2012-6519

The CVE-2012-6519 issue affects DIY-CMS 1.0, where an SQL injection flaw exists in modules/poll/index.php. The vulnerability is triggered by the start parameter to mod.php, allowing remote attackers to execute arbitrary SQL commands. The impact is described as enabling data access/ modification w...

CVE-2012-6518

Cross-site request forgery CSRF vulnerability in mod.php in DiY-CMS 1.0 allows remote attackers to hijack the authentication of administrators for requests that create a poll via an add action to the poll module...

CVE-2012-6517

DiY-CMS 1.0 is affected by multiple XSS vulnerabilities allowing remote attackers to inject arbitrary script/HTML via (1) the question parameter to /modules/poll/add.php and (2) the question or (3) the answer parameter to /modules/poll/edit.php. The root cause is unsafe handling of input leading ...

CVE-2012-6519

SQL injection vulnerability in modules/poll/index.php in DIY-CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the start parameter to mod.php...

CVE-2010-3206

Multiple PHP remote file inclusion vulnerabilities in DiY-CMS 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the 1 lang parameter to modules/guestbook/blocks/control.block.php, 2 mainmodule parameter to index.php, and 3 getFile parameter to includes/general.functions.php...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in DiY-CMS 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the 1 lang parameter to modules/guestbook/blocks/control.block.php, 2 mainmodule parameter to index.php, and 3 getFile parameter to includes/general.functions.php...

CVE-2010-3206

DiY-CMS 1.0 is vulnerable to multiple remote file inclusion (RFI) flaws. The issues arise from unvalidated user input in three vectors: (1) lang parameter to modules/guestbook/blocks/control.block.php, (2) main_module parameter to index.php, and (3) getFile parameter to includes/general.functions...