EUVD-2014-8343

Malware in sbrugna...

EUVD-2014-8342

Malware in sbrugna...

Etiko CMS Multiple Vulnerabilities

Etiko CMS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-8505

Multiple cross-site scripting XSS vulnerabilities in Etiko CMS allow remote attackers to inject arbitrary web script or HTML via the 1 pageid parameter to loja/index.php or 2 articleid parameter to index.php...

CVE-2014-8506

Multiple SQL injection vulnerabilities in Etiko CMS allow remote attackers to execute arbitrary SQL commands via the 1 pageid parameter to loja/index.php or 2 articleid parameter to index.php...

Sql injection

Multiple SQL injection vulnerabilities in Etiko CMS allow remote attackers to execute arbitrary SQL commands via the 1 pageid parameter to loja/index.php or 2 articleid parameter to index.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Etiko CMS allow remote attackers to inject arbitrary web script or HTML via the 1 pageid parameter to loja/index.php or 2 articleid parameter to index.php...

CVE-2014-8506

Etiko CMS is affected by multiple SQL injection vulnerabilities (CVE-2014-8506) that allow remote attackers to execute arbitrary SQL via the page_id parameter to loja/index.php or the article_id parameter to index.php. This is supported by NVD/OpenVAS entries that identify affected components as ...

CVE-2014-8506

Multiple SQL injection vulnerabilities in Etiko CMS allow remote attackers to execute arbitrary SQL commands via the 1 pageid parameter to loja/index.php or 2 articleid parameter to index.php...

CVE-2014-8505

Etiko CMS is affected by multiple XSS vulnerabilities (CVE-2014-8505). The issues allow remote attackers to inject arbitrary script/HTML via the page_id parameter to loja/index.php or the article_id parameter to index.php. Affected software: Etiko CMS (components/pages loja/index.php and index.ph...

CVE-2014-8505

Multiple cross-site scripting XSS vulnerabilities in Etiko CMS allow remote attackers to inject arbitrary web script or HTML via the 1 pageid parameter to loja/index.php or 2 articleid parameter to index.php...

PT-2014-8569

Name of the Vulnerable Software and Affected Versions Etiko CMS affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the page id parameter to "loja/index.php" or the article id parameter to "index.php"...

PT-2014-8568

Name of the Vulnerable Software and Affected Versions Etiko CMS affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. Specifically, the vulnerabilities...

CVE-2014-8506: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Etiko CMS allow remote attackers to execute arbitrary SQL commands via the 1 pageid parameter to loja/index.php or 2 articleid parameter to index.php...

CVE-2014-8505: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Etiko CMS allow remote attackers to inject arbitrary web script or HTML via the 1 pageid parameter to loja/index.php or 2 articleid parameter to index.php...

Etiko CMS Cross Site Scripting / SQL Injection

SQL Injection & XSS on Etiko CMS. Risk: High CWE number: CWE-89,CWE-79 Date: 13/10/2014 Vendor: www.etikweb.com Version: All Author: Felipe " Renzi " Gabriel Contact: [email protected] Tested on: Windows 8 ; Chrome ; Sqlmap 1.0-dev-nongit-20140906 Vulnerables Files: /index.php & /loja/index.php...

Etiko CMS Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications '''''''''''''''''''''''''''''''''''''''''''''''''''''''''''' CMS Etiko Arbitrary File Upload Vulnerability Google Dork: intext:"CMS Etiko" Date: 27/10/2012 Author: Sys32 Email: tha.Sys32atgmaildotcom Vendor: http://www.etikweb.com/ Category:...