150 matches found
VisualShapers EZContents 1.4.5 - File Disclosure
VisualShapers EZContents 1.4.5 - File Disclosure source: https://www.securityfocus.com/bid/26737/info VisualShapers ezContents is prone to a vulnerability that allows remote attackers to display the contents of arbitrary local files in the context of the webserver process. An attacker can exploit...
ezContents 1.4.5 (index.php link) Remote File Disclosure Vulnerability
Exploit for unknown platform in category web applications ====================================================================== ezContents 1.4.5 index.php link Remote File Disclosure Vulnerability ======================================================================...
Visualshapers EzContents GLOBALS[rootdp]远程文件包含漏洞
Visualshapers EzContents是一款基于PHP的内容管理程序。 Visualshapers EzContents不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于多个脚本对用户提交的WEB参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 VisualShapers ezContents 2.0.3 漏洞提供者 DarkFig...
ezContents多个SQL注入、远程/本地文件包含和跨站脚本漏洞
ezContents是一款开放源代码内容管理系统。 ezContents中存在多个输入验证错误，具体如下： 1 modules/moduleSec.php文件的moduleExternalLink函数中的漏洞允许攻击者使用ftps协议包含本地或外部资源的任意文件。include/functions.php文件中的isExternalLink函数和admin/adminbutton.php中的adminExternalLink函数也存在同样问题。 2 没有正确的过滤headeruserdata.php文件中的groupname参数输入，允许攻击者通过注入任意SQL代码控制SQL查询。 3...
ezcontents203.txt
VulnScr: ezContents Version 2.0.3 Web....: http://www.ezcontents.org/ Date...: Web July 28 10:44 2006 Credits: DarkFig [email protected] Vuln...: SQL Injection, Remote/Local File Inclusion, Cross Site Scripting == Remote / Local File Inclusion =================================...
CVE-2006-4478
SQL injection vulnerability in headeruserdata.php in Visual Shapers ezContents 2.0.3 allows remote attackers to execute arbitrary SQL commands via the groupname parameter...
CVE-2006-4477
Multiple PHP remote file inclusion vulnerabilities in Visual Shapers ezContents 2.0.3 allow remote attackers to execute arbitrary PHP code via an empty GLOBALSrootdp parameter and an ftps URL in the 1 GLOBALSadminhome parameter in a diary/eventlist.php, b gallery/gallerysummary.php, c...
CVE-2006-4478
CVE-2006-4478 describes an SQL injection in Visual Shapers ezContents 2.0.3, affecting headeruserdata.php via the groupname parameter. The underlying issue permits remote attackers to inject arbitrary SQL commands. Documented impact indicates potential data exposure, modification, or other SQL-le...
CVE-2006-4477
Multiple PHP remote file inclusion vulnerabilities in Visual Shapers ezContents 2.0.3 allow remote attackers to execute arbitrary PHP code via an empty GLOBALSrootdp parameter and an ftps URL in the 1 GLOBALSadminhome parameter in a diary/eventlist.php, b gallery/gallerysummary.php, c...
CVE-2006-4478
SQL injection vulnerability in headeruserdata.php in Visual Shapers ezContents 2.0.3 allows remote attackers to execute arbitrary SQL commands via the groupname parameter...
CVE-2006-4477
CVE-2006-4477 involves multiple PHP remote file inclusion vulnerabilities in Visual Shapers ezContents 2.0.3. The issue allows remote attackers to execute arbitrary PHP code by supplying an empty GLOBALS[rootdp] or a URL in the GLOBALS[admin_home] parameter (across files: diary/event_list.php, ga...
CVE-2006-4479
CVE-2006-4479: Affected software is Visual Shapers ezContents 2.0.3; vulnerability in loginreq2.php allows cross-site scripting via the subgroupname parameter. Impact: remote attackers can inject arbitrary script/HTML. The connected documents do not provide exploit details or a specific remediati...
CVE-2006-4479
Cross-site scripting XSS vulnerability in loginreq2.php in Visual Shapers ezContents 2.0.3 allows remote attackers to inject arbitrary web script or HTML via the subgroupname parameter...
ezContents Version 2.0.3 Remote/Local File Inclusion, SQL Injection, XSS
VulnScr: ezContents Version 2.0.3 Web....: http://www.ezcontents.org/ Date...: Web July 28 10:44 2006 Credits: DarkFig [email protected] Vuln...: SQL Injection, Remote/Local File Inclusion, Cross Site Scripting == Remote / Local File Inclusion =================================...
EZContents 2.0.3 - calendar.php?GLOBALS[language_home] Remote File Inclusion
EZContents 2.0.3 - calendar.php?GLOBALSlanguagehome Remote File Inclusion source: https://www.securityfocus.com/bid/19776/info ezContents is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these...
VisualShapers EZContents 2.0.3 - Headeruserdata.php SQL Injection
VisualShapers EZContents 2.0.3 - Headeruserdata.php SQL Injection source: https://www.securityfocus.com/bid/19777/info ezContents is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the...
VisualShapers EZContents 2.0.3 - 'Headeruserdata.php' SQL Injection
source: https://www.securityfocus.com/bid/19777/info ezContents is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabiliti...
EZContents 2.0 - 'gallery_summary.php?GLOBALS[admin_home]' Remote File Inclusion
source: https://www.securityfocus.com/bid/19776/info ezContents is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code a...
EZContents 2.0.3 - toprated.php?GLOBALS[language_home] Remote File Inclusion
EZContents 2.0.3 - toprated.php?GLOBALSlanguagehome Remote File Inclusion source: https://www.securityfocus.com/bid/19776/info ezContents is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these...
EZContents 2.0.3 - 'showlinks.php?GLOBALS[admin_home]' Remote File Inclusion
source: https://www.securityfocus.com/bid/19776/info ezContents is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code a...