Entry Level Content Management System (EL CMS) - SQL Injection

Contact : vir0e5athackermaildotcom + Group : TECON The Eye COnference Indonesia + Site : http://tecon-crew.org Software Information +SOftware : Entry Level Content Management System EL CMS +vendor : http://www.entrylevelcms.com/ +Vulnerability : SQL Injection Vulnerable File...

CVE-2010-1076

Cross-site scripting XSS vulnerability in index.php in Entry Level CMS EL CMS allows remote attackers to inject arbitrary web script or HTML via the subj parameter, which is not properly handled in a forced SQL error message. NOTE: the provenance of this information is unknown; the details are...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Entry Level CMS EL CMS allows remote attackers to inject arbitrary web script or HTML via the subj parameter, which is not properly handled in a forced SQL error message. NOTE: the provenance of this information is unknown; the details are...

CVE-2010-1076

Cross-site scripting XSS vulnerability in index.php in Entry Level CMS EL CMS allows remote attackers to inject arbitrary web script or HTML via the subj parameter, which is not properly handled in a forced SQL error message. NOTE: the provenance of this information is unknown; the details are...

CVE-2010-1075

CVE-2010-1075 is an SQL injection vulnerability in the EL CMS (Entry Level CMS) where the vulnerable component is index.php . The issue allows remote attackers to execute arbitrary SQL commands through the subj parameter. The available documents do not specify the exact root cause in code, affect...

CVE-2010-1076

The CVE-2010-1076 entry concerns an XSS in Entry Level CMS (EL CMS): index.php allows remote injection of arbitrary script/HTML via the subj parameter when handling a forced SQL error message. This is documented across multiple sources (NVD, Red Hat, CVE list, etc.). Details specify the vulnerabl...

CVE-2010-1075: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Entry Level CMS EL CMS allows remote attackers to execute arbitrary SQL commands via the subj parameter...

Entry Level Content Management System (EL CMS) Sql Injection Exploit

Exploit for unknown platform in category web applications ==================================================================== Entry Level Content Management System EL CMS Sql Injection Exploit ==================================================================== +Title : SQL Injection Entry Level...