CVE-2006-5017

SQL injection vulnerability in admin/allusers.php in Szava Gyula and Csaba Tamas e-Vision CMS, probably 1.0, allows remote attackers to execute arbitrary SQL commands via the from parameter...

CVE-2006-5016

Unrestricted file upload vulnerability in admin/ximage.php in Szava Gyula and Csaba Tamas e-Vision CMS, probably 1.0, allows remote attackers to upload arbitrary files to the /imagebank directory...

CVE-2006-5017

CVE-2006-5017 corresponds to a SQL injection vulnerability in Szava Gyula and Csaba Tamas e-Vision CMS, affecting the admin/all_users.php component. The issue allows remote attackers to inject arbitrary SQL commands through the from parameter, enabling potential data disclosure or modification. P...

CVE-2006-5016

The CVE concerns Szava Gyula and Csaba Tamas e-Vision CMS (likely version 1.0). The vulnerable component is admin/x_image.php, where an unrestricted file upload allows remote attackers to place arbitrary files in the /imagebank directory. The vulnerability’s root cause is an unconstrained upload ...

E-Vision CMS Multible Remote injections

Hello,, E-Vision CMS Multible Remote injections SQL and File upload Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] upload any file admin/ximage.php this file is used to upload files and it does not check the permission This...

e-Vision CMS 2.0 (all_users.php) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? / / e-Vision CMS Remote sql injection exploit / By : HACKERS PAL / WwW.SoQoR.NeT / printr' // / e-Vision CMS Remote sql injection exploit / / by HACKERS PAL [email protected] / / site: http://www.soqor.net /'; if $argc2...

e-Vision CMS 2.0 - all_users.php SQL Injection

e-Vision CMS 2.0 - allusers.php SQL Injection !/usr/bin/php -q -d shortopentag=on / / site: http://www.soqor.net /'; if $argc0 Echo trim$var1; $page = getpage$url.$exploit; $page2 = getpage$url.$exploit2; ifpregmatch'/.+?/is',$page Echo "\n+...

e-Vision CMS 2.0 (all_users.php) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================= e-Vision CMS 2.0 allusers.php Remote SQL Injection Exploit ============================================================= !/usr/bin/php -q -d shortopentag=on / / site:...

e-Vision CMS 2.0 - 'all_users.php' SQL Injection

!/usr/bin/php -q -d shortopentag=on / / site: http://www.soqor.net /'; if $argc0 Echo trim$var1; $page = getpage$url.$exploit; $page2 = getpage$url.$exploit2; ifpregmatch'/.+?/is',$page Echo "\n+ User Name : "; pregreplacecallback'/\td...