[DSECRG-08-037] Multiple Local File Include Vulnerabilities in Pluck CMS 4.5.2

Digital Security Research Group DSecRG Advisory DSECRG-08-037 Application: Pluck CMS Versions Affected: 4.5.2 Vendor URL: http://www.pluck-cms.org/ Bug: Multiple Local File Include Exploits: YES Reported: 28.07.2008 Vendor Response: 03.08.2008 Solution: YES Date of Public Advisory: 25.08.2008...

[DSECRG-08-038] Multiple Local File Include Vulnerabilities in ezContents CMS 2.0.3

Digital Security Research Group DSecRG Advisory DSECRG-08-038 Application: ezContents CMS Versions Affected: 2.0.3 Application URL: http://www.ezcontents.org/ Vendor URL: http://www.visualshapers.com/ Bug: Multiple Local File Include Exploits: YES Reported: 05.08.2008 Second report: 18.08.2008...

CVE-2008-4051

creationtimestamp| type| source ---|---|--- 2008-08-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32297...

Pluck CMS 4.5.2 Multiple Local File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ============================================================= Pluck CMS 4.5.2 Multiple Local File Inclusion Vulnerabilities ============================================================= Digital Security Research Group DSecRG Advisory...

EZContents CMS 2.0.3 - Multiple Local File Inclusions

Digital Security Research Group DSecRG Advisory DSECRG-08-038 Application: ezContents CMS Versions Affected: 2.0.3 Application URL: http://www.ezcontents.org/ Vendor URL: http://www.visualshapers.com/ Bug: Multiple Local File Include Exploits: YES Reported: 05.08.2008 Second report: 18.08.2008...

Pluck CMS 4.5.2 - Multiple Local File Inclusions

Pluck CMS 4.5.2 - Multiple Local File Inclusions Digital Security Research Group DSecRG Advisory DSECRG-08-037 Application: Pluck CMS Versions Affected: 4.5.2 Vendor URL: http://www.pluck-cms.org/ Bug: Multiple Local File Include Exploits: YES Reported: 28.07.2008 Vendor Response: 03.08.2008...

EZContents CMS 2.0.3 - Multiple Local File Inclusions

EZContents CMS 2.0.3 - Multiple Local File Inclusions Digital Security Research Group DSecRG Advisory DSECRG-08-038 Application: ezContents CMS Versions Affected: 2.0.3 Application URL: http://www.ezcontents.org/ Vendor URL: http://www.visualshapers.com/ Bug: Multiple Local File Include Exploits:...

ezContents CMS 2.0.3 Multiple Local File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ================================================================== ezContents CMS 2.0.3 Multiple Local File Inclusion Vulnerabilities ================================================================== Digital Security Research Group DSecRG...

Pluck CMS 4.5.2 - Multiple Local File Inclusions

Digital Security Research Group DSecRG Advisory DSECRG-08-037 Application: Pluck CMS Versions Affected: 4.5.2 Vendor URL: http://www.pluck-cms.org/ Bug: Multiple Local File Include Exploits: YES Reported: 28.07.2008 Vendor Response: 03.08.2008 Solution: YES Date of Public Advisory: 25.08.2008...

miacms-sql.txt

MiaCMS SourceCtrl+F3 ... onclick="window.open'http://digg.com/submit?phase=3&url='+encodeURIComponentlocation.href+'&bodytext=This+site+uses+MiaCMS+-+the+free%2C+open+source+content+management+system+admin%3A21232f297a57a5a743894a0e4a801fc3& admin:21232f297a57a5a743894a0e4a801fc3...

phpcart-xss.txt

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com -d3hydr8 - sinner01 - baltazar - P47r1ck - C1c4Tr1Z - beenu -rsauron - letsgorun - K1u - DON - OutLawz - MAGE -JeTFyrE -r45c4l -Bond...

5 star review - Cross-Site Scripting SQL Injection

5 star review - Cross-Site Scripting SQL Injection Viva IslaM Viva IslaM XSS / Remote SQL Injection Five Star Review recommend.php itemid http://review-script.com/ AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM & WwW.ReaL-HaCk.NeT Email : [email protected] SYRIAN Arab HACkErS -: Exploites :- User Exploit...

CVE-2008-3748

creationtimestamp| type| source ---|---|--- 2008-08-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6277 2009-12-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10597...

[DSECRG-08-036] Multiple Security Vulnerabilities in Freeway eCommerce 1.4.1.171

Digital Security Research Group DSecRG Advisory DSECRG-08-036 Application: Freeway eCommerce Versions Affected: 1.4.1.171 Vendor URL: http://www.openfreeway.org/ Bugs: RFI, Multiple LFI, XSS Exploits: YES Reported: 27.06.2008 Second report: 04.07.2008 Vendor response: 06.07.2008 Solution: YES Dat...

CVE-2008-3770

creationtimestamp| type| source ---|---|--- 2008-08-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32259 2008-08-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32268 2008-08-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32266 2008-08-18...

CVE-2008-6517

creationtimestamp| type| source ---|---|--- 2008-08-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32271...

CVE-2008-3733

creationtimestamp| type| source ---|---|--- 2008-08-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6253 2009-03-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8176...

Meet#Web 0.8 - 'RegRightsResource.class.php?root_path' Remote File Inclusion

source: https://www.securityfocus.com/bid/30673/info MeetWeb is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...

CVE-2008-4321

creationtimestamp| type| source ---|---|--- 2008-08-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6240 2008-08-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6248 2008-08-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6256 2026-06-28...

CVE-2008-6066

creationtimestamp| type| source ---|---|--- 2008-08-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32231 2008-08-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32235 2008-08-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32236 2008-08-13...