IAA и XSS уязвимости в CMS WebManager-Pro

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Insufficient Anti-automation и Cross-Site Scripting уязвимостях в CMS WebManager-Pro. Это украинская коммерческая CMS. Insufficient Anti-automation WASC-21: На странице контактов http://site/index.php?menuid=x нет защиты от автоматизированных...

CMS WebManager-Pro 7.4.3 Cross Site Scripting

Hello list! I want to warn you about Insufficient Anti-automation and Cross-Site Scripting vulnerabilities in CMS WebManager-Pro. It's Ukrainian commercial CMS. Earlier I already told about interesting RCE vulnerability in this CMS, which I mentioned about last month in article Placing shells...

CMS WebManager-Pro 7.4.3 Code Execution / Cross Site Request Forgery

Hello list! I want to warn you about Remote Code Execution and Cross-Site Request Forgery vulnerabilities in CMS WebManager-Pro. This CMS is widely using at different web sites, including security and government sites. ------------------------- Affected products: -------------------------...

CMS WebManager-Pro Cross Site Scripting / SQL Injection

Hello Bugtraq! I want to warn you about Cross-Site Scripting and SQL Injection vulnerabilities in CMS WebManager-Pro. It's Ukrainian commercial CMS. ------------------------- Affected products: ------------------------- Vulnerable are CMS WebManager-Pro v.7.4.3 version from FGSStudio and previous...

XSS и SQL Injection уязвимости в CMS WebManager-Pro

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting и SQL Injection уязвимостях в CMS WebManager-Pro это украинская коммерческая CMS. XSS WASC-08: http://site/index.php?word=2220onMouseOver=alertdocument.cookie20 SQL Injection Authentication Bypass WASC-19: На странице...

Уязвимости в CMS WebManager-Pro

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Arbitrary File Uploading и Code Execution уязвимостях в CMS WebManager-Pro это украинская коммерческая CMS. Arbitrary File Uploading WASC-42: В админке в разделе "файлы" http://site/admin/files.php возможна загрузка произвольных файлов. Code...

CMS WebManager-Pro SQL Injection

Hello Bugtraq! I want to warn you about SQL Injection and Redirector URL Redirector Abuse vulnerabilities in CMS WebManager-Pro SecurityVulns ID:11108. It's Ukrainian commercial CMS. SQL Injection: http://site/c.php?id=1%20and%20version=5 Redirector:...