Directory traversal

Directory traversal vulnerability in 404.php in Drake CMS allows remote attackers to include and execute arbitrary local arbitrary files via a .. dot dot in the dprivate parameter. NOTE: some of these details are obtained from third party information. NOTE: Drake CMS has only a beta version...

CVE-2007-1849

Directory traversal vulnerability in 404.php in Drake CMS allows remote attackers to include and execute arbitrary local arbitrary files via a .. dot dot in the dprivate parameter. NOTE: some of these details are obtained from third party information. NOTE: Drake CMS has only a beta version...

CVE-2007-1850

Directory traversal vulnerability in classes/captcha/captcha.jpg.php in Drake CMS allows remote attackers to read arbitrary files or list arbitrary directories, and obtain the installation path, via a .. dot dot in the dprivate parameter. NOTE: Drake CMS has only a beta version available, and the...

CVE-2007-1849

CVE-2007-1849 describes a directory traversal vulnerability in Drake CMS (in the 404.php script) that allows remote attackers to include and execute arbitrary local files via a ".." in the d_private parameter. The vulnerability affects the beta version of Drake CMS, and the vendor has stated they...

CVE-2007-1849

Directory traversal vulnerability in 404.php in Drake CMS allows remote attackers to include and execute arbitrary local arbitrary files via a .. dot dot in the dprivate parameter. NOTE: some of these details are obtained from third party information. NOTE: Drake CMS has only a beta version...

CVE-2007-1848

CVE-2007-1848 describes a cross-site scripting (XSS) flaw in Drake CMS where the admin/classes/ui.dta.php script fails to properly sanitize the desc[][title] input, allowing remote attackers to inject arbitrary web-script or HTML. The issue is associated with Drake CMS’s beta release; the vendor ...

CVE-2007-1850

Directory traversal vulnerability in classes/captcha/captcha.jpg.php in Drake CMS allows remote attackers to read arbitrary files or list arbitrary directories, and obtain the installation path, via a .. dot dot in the dprivate parameter. NOTE: Drake CMS has only a beta version available, and the...

CVE-2007-1848

Cross-site scripting XSS vulnerability in admin/classes/ui.dta.php in Drake CMS allows remote attackers to inject arbitrary web script or HTML via the desctitle field. NOTE: Drake CMS has only a beta version available, and the vendor has previously stated "We do not consider security reports vali...

CVE-2007-1850

CVE-2007-1850 concerns Drake CMS. A directory traversal vulnerability exists in the file path components/classes/captcha/captcha.jpg.php, exploitable via the d_private parameter with a .. sequence to read arbitrary files, list directories, and reveal the installation path. Reported effects includ...

Drake CMS 0.3.7 - '404.php' Local File Inclusion

source: https://www.securityfocus.com/bid/23215/info Drake CMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts. Version 0.3.7 Beta is vulnerable;...

Drake CMS 0.3.7 - 404.php Local File Inclusion

Drake CMS 0.3.7 - 404.php Local File Inclusion source: https://www.securityfocus.com/bid/23215/info Drake CMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute...

Drake CMS v0.3.2 < = RFi Vulnerabilities

Drake CMS v0.3.2 = RFi Vulnerabilities Download : http://sourceforge.net/project/showfiles.php?groupid=166901&packageid=192077&releaseid=420104 Script Name : Drake CMS v0.3.2 Coded By : KaRTaL Contact : k4rtalatgmaildotcom V.Code in : pathadminincludesheader.php include$aclassesdir.'menu.php';...

[x0n3-h4ck]Drake CMS v 0.2 XSS exploit

-=--------------------ADVISORY-------------------=- Drake CMS V. 0.2 Author: CorryL x0n3-h4ck.org -=-----------------------------------------------=- -=+ Application: Drake CMS -=+ Version: 0.2 -=+ Vendor's URL: https://sourceforge.net/projects/drakecms/ -=+ Platform: WindowsLinuxUnix -=+ Bug typ...

Drake CMS 0.2 Index.PHP Cross-Site Scripting Vulnerability

Drake CMS 0.2 Index.PHP Cross-Site Scripting Vulnerability. Webapps exploit for php platform source: http://www.securityfocus.com/bid/20998/info Drake CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issu...

Drake CMS xhtml.php远程文件包含漏洞

Drake CMS是一款高效、可自定义的内容管理系统。 Drake CMS在处理用户请求时存在输入验证漏洞，远程攻击者可能利用此漏洞在服务器上以Web进程权限执行任意命令。 Drake CMS的xhtml.php脚本没有正确地验证用户输入，允许攻击者通过包含本地或外部资源的任意文件导致执行任意PHP代码。 Drake Drake CMS 0.2.2.846 Drake ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://wiki.drakecms.org/index.php?title=MainPage...

CVE-2006-5767

PHP remote file inclusion vulnerability in includes/xhtml.php in Drake CMS 0.2.2 alpha rev.846 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the droot parameter...

CVE-2006-5767

PHP remote file inclusion vulnerability in includes/xhtml.php in Drake CMS 0.2.2 alpha rev.846 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the droot parameter...

CVE-2006-5767

The CVE-2006-5767 entry describes a PHP remote file inclusion in Drake CMS

drakeCMS.txt

-=--------------------ADVISORY-------------------=- Drake CMS V. 0.2 Author: CorryL x0n3-h4ck.org -=----------------------------------------------------=- -=+ Application: Drake CMS -=+ Version: 0.2 -=+ Vendor's URL: https://sourceforge.net/projects/drakecms/ -=+ Platform: Windows\Linux\Unix -=+...

Drake CMS <= 0.2.2.846 Remote File Include Vulnerability

No description provided by source. Coding 4 Fun c4f.pl Drake CMS v0.2.2.846 http://drakecms.org ; Class = Remote File Inclusion ; Download = https://sourceforge.net/project/showfiles.php?groupid=166901&packageid=192077&releaseid=420102 ; Found by = GregStar gregstaratc4fdotpl ;...