EUVD-2008-4499

Malware in sbrugna...

EUVD-2008-4500

Malware in sbrugna...

fastpublish cms 1.9999 (lfi/sql) Multiple Vulnerabilities

No description provided by source. Author: !DoktOR! Date found: 30.09.08 Product: fastpublish CMS Version: 1.9.9.9.9.d URL: www.fastpublish.de Download: http://www.fastpublish.de/richfiles/attachments/downloads/fastpublish19999dtrial.zip Vulnerability Class: SQL Injection SQL Injection Exploit 1:...

CVE-2008-4519

Multiple directory traversal vulnerabilities in Fastpublish CMS 1.9999 d allow remote attackers to include and execute arbitrary local files via a .. dot dot in the target parameter to 1 index2.php and 2 index.php...

CVE-2008-4518

Multiple SQL injection vulnerabilities in Fastpublish CMS 1.9.9.9.9 d 1.9999 d allow remote attackers to execute arbitrary SQL commands via the 1 sprache parameter to index2.php and the 2 artikel parameter to index.php...

Directory traversal

Multiple directory traversal vulnerabilities in Fastpublish CMS 1.9999 d allow remote attackers to include and execute arbitrary local files via a .. dot dot in the target parameter to 1 index2.php and 2 index.php...

Sql injection

Multiple SQL injection vulnerabilities in Fastpublish CMS 1.9.9.9.9 d 1.9999 d allow remote attackers to execute arbitrary SQL commands via the 1 sprache parameter to index2.php and the 2 artikel parameter to index.php...

CVE-2008-4519

Multiple directory traversal vulnerabilities in Fastpublish CMS 1.9999 d allow remote attackers to include and execute arbitrary local files via a .. dot dot in the target parameter to 1 index2.php and 2 index.php...

CVE-2008-4519

Multiple directory traversal vulnerabilities in Fastpublish CMS 1.9999 d allow remote attackers to include and execute arbitrary local files via a .. in the target parameter to (1) index2.php and (2) index.php. The underlying issue is in those target parameters; this could enable arbitrary local ...

CVE-2008-4518

Multiple SQL injection vulnerabilities in Fastpublish CMS 1.9.9.9.9 d 1.9999 d allow remote attackers to execute arbitrary SQL commands via the 1 sprache parameter to index2.php and the 2 artikel parameter to index.php...

CVE-2008-4518

CVE-2008-4518 involves multiple SQL injection vulnerabilities in Fastpublish CMS 1.9.9.9.9 d (1.9999 d). The issues allow remote attackers to execute arbitrary SQL commands via the sprache parameter to index2.php and the artikel parameter to index.php. Root cause: unvalidated input leading to SQL...

fastpublish-lfisql.txt

Author: !DoktOR! Date found: 30.09.08 Product: fastpublish CMS Version: 1.9.9.9.9.d URL: www.fastpublish.de Download: http://www.fastpublish.de/richfiles/attachments/downloads/fastpublish19999dtrial.zip Vulnerability Class: SQL Injection SQL Injection Exploit 1:...

Fastpublish CMS 1.9999 - Local File Inclusion SQL Injection

Fastpublish CMS 1.9999 - Local File Inclusion SQL Injection Author: !DoktOR! Date found: 30.09.08 Product: fastpublish CMS Version: 1.9.9.9.9.d URL: www.fastpublish.de Download: http://www.fastpublish.de/richfiles/attachments/downloads/fastpublish19999dtrial.zip Vulnerability Class: SQL Injection...

Fastpublish CMS 1.9999 (LFI/SQL) Multiple Remote Vulnerabilities

No description provided by source. Author: !DoktOR! Date found: 30.09.08 Product: fastpublish CMS Version: 1.9.9.9.9.d URL: www.fastpublish.de Download: http://www.fastpublish.de/richfiles/attachments/downloads/fastpublish19999dtrial.zip Vulnerability Class: SQL Injection SQL Injection Exploit 1:...

Fastpublish CMS 1.9999 (LFI/SQL) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ================================================================ Fastpublish CMS 1.9999 LFI/SQL Multiple Remote Vulnerabilities ================================================================...

Fastpublish CMS 1.9999 - Local File Inclusion / SQL Injection

Author: !DoktOR! Date found: 30.09.08 Product: fastpublish CMS Version: 1.9.9.9.9.d URL: www.fastpublish.de Download: http://www.fastpublish.de/richfiles/attachments/downloads/fastpublish19999dtrial.zip Vulnerability Class: SQL Injection SQL Injection Exploit 1:...

Fastpublish CMS Designconfig.PHP远程文件包含漏洞

Fastpublish CMS是一款基于PHP的WEB应用程序。 Fastpublish CMS不正确过滤用户提交的URI输入数据，远程攻击者可以利用漏洞以WEB权限执行任意PHP代码。 问题是由于'Designconfig.PHP'脚本对用户提交的'configfsBase'参数处理缺少充分过滤，提交远程服务器上的任意文件作为包含对象，可导致以WEB权限执行任意PHP代码。 Fashpublish CMS 1.9999 目前没有解决方案提供： http://www.fastpublish.org/...

CVE-2007-6325

PHP remote file inclusion vulnerability in adminbereich/designconfig.php in Fastpublish CMS 1.9999 allows remote attackers to execute arbitrary PHP code via a URL in the configfsBase parameter, a different vector than CVE-2006-2726...

Remote file inclusion

PHP remote file inclusion vulnerability in adminbereich/designconfig.php in Fastpublish CMS 1.9999 allows remote attackers to execute arbitrary PHP code via a URL in the configfsBase parameter, a different vector than CVE-2006-2726...

CVE-2007-6325

CVE-2007-6325 affects Fastpublish CMS 1.9999; vulnerability in adminbereich/designconfig.php allows remote PHP code execution via a URL in config[fsBase]. This is a different vector from CVE-2006-2726. No remediation details are provided in the documents.