CVE-2012-0699

Multiple cross-site request forgery CSRF vulnerabilities in Family Connections CMS aka FCMS 2.9 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests that 1 add news via an add action to familynews.php or 2 add a prayer via an add action to prayers.php...

Family CMS 2.9 and earlier multiple Vulnerabilities

1- CSRF缺陷 : 利用的POC如下： POC 1: Page "familynews.php" function autosubmit document.getElementById'ChangeSubmit'.submit; POC 2:页面 "prayers.php" function autosubmit document.getElementById'ChangeSubmit'.submit; input type="hidden" name="desc" value="testtes...

FCMS CMS 2.7.2 - Multiple Cross-Site Request Forgery Vulnerabilities

FCMS CMS 2.7.2 - Multiple Cross-Site Request Forgery Vulnerabilities FCMS2.7.2 cms and earlier multiple CSRF Vulnerability =================================================================================== Exploit Title: FCMS2.7.2 cms multiple CSRF Vulnerability Download link...

FCMS CMS 2.7.2 - Multiple Cross-Site Request Forgery Vulnerabilities

FCMS2.7.2 cms and earlier multiple CSRF Vulnerability =================================================================================== Exploit Title: FCMS2.7.2 cms multiple CSRF Vulnerability Download link...

Family CMS 2.7.2 - Multiple Persistent Cross-Site Scripting Vulnerabilities

FCMS2.7.2 cms and earlier multiple stored XSS Vulnerability =================================================================================== Exploit Title: FCMS2.7.2 cms multiple stored XSS Vulnerability Download link...

Haudenschilt Family Connections CMS (FCMS) Multiple PHP remote file inclusion vulnerabilities

This host is running Haudenschilt Family Connections CMS FCMS and is prone to multiple remote file inclusion vulnerabilities. OpenVAS Vulnerability Test $Id: secpodfcmsmultrfivuln.nasl 5394 2017-02-22 09:22:42Z teissa $ Haudenschilt Family Connections CMS FCMS Multiple PHP remote file inclusion...

fcms 2.2.3 - Remote File Inclusion

x Exploit Title: FCMS2.2.3 Remote File Inclusion x Date: 10-9-2010 x Author: LoSt.HaCkEr aDaMTRoJaN x Software Link: http://www.familycms.com/getstarted.php x Version: v 2.2.3 xTested on: Windows XP x CVE : x My E-MaIl:LoSt.HaCkEratHaCkErdotPs xExploit:...

fcms 2.2.3 - Remote File Inclusion

fcms 2.2.3 - Remote File Inclusion x Exploit Title: FCMS2.2.3 Remote File Inclusion x Date: 10-9-2010 x Author: LoSt.HaCkEr aDaMTRoJaN x Software Link: http://www.familycms.com/getstarted.php x Version: v 2.2.3 xTested on: Windows XP x CVE : x My E-MaIl:LoSt.HaCkEratHaCkErdotPs xExploit:...

Sql injection

Multiple SQL injection vulnerabilities in Haudenschilt Family Connections CMS FCMS 1.4 allow remote authenticated users to execute arbitrary SQL commands via the 1 address parameter to addressbook.php, the 2 getnews parameter to familynews.php, and the 3 pollid parameter to home.php in a results...