FlexCMS 3.2.1 for logged in users XSS

Exploit for php platform in category web applications Persistent XSS in FLEXCMS 3.2.1 Software vendor: http://www.flexcms.com/flex/index.html The Persistent XSS appears when any user go to edit profile Display name and then injects the xss code instead of his display name. After inkection this...

FlexCMS Insecure Cookie Handling

============================================================================== » FlexCMS Insecure Cookie Handling Vulnerability ============================================================================== » Script: FlexCMS v3.1 » Language: PHP » Site page: FlexCMS is a joint venture of DCSun...

FlexCMS < 3.0 'CookieUsername' Parameter SQL Injection (deprecated)

Binary data 5144.prm...

FlexCMS 2.5 - 'CookieUsername' Cookie SQL Injection

source: https://www.securityfocus.com/bid/36179/info FlexCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data,...

FlexCMS 2.5 - CookieUsername Cookie SQL Injection

FlexCMS 2.5 - CookieUsername Cookie SQL Injection source: https://www.securityfocus.com/bid/36179/info FlexCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

FlexCMS 2.5 Blind SQL Injection

============================================= FlexCMS Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-1 + Discovered By : Inj3ct0r + Site : Inj3ct0r.com + Support e-mail : submitatinj3ct0r.com ...

Sql injection

SQL injection vulnerability in FlexCMS 2.5 allows remote attackers to execute arbitrary SQL commands via the ItemId parameter. NOTE: some of these details are obtained from third party information...

CVE-2009-1256

SQL injection vulnerability in FlexCMS 2.5 allows remote attackers to execute arbitrary SQL commands via the ItemId parameter. NOTE: some of these details are obtained from third party information...

CVE-2009-1256

SQL injection vulnerability in FlexCMS 2.5 allows remote attackers to execute arbitrary SQL commands via the ItemId parameter. NOTE: some of these details are obtained from third party information...

CVE-2009-1256

The vulnerability described for CVE-2009-1256 is a SQL injection in FlexCMS 2.5, exploitable via the ItemId parameter. The affected component is FlexCMS 2.5 (web application), with the root cause being improper handling of ItemId leading to arbitrary SQL commands execution. Reported impact includ...

FlexCMS Calendar (ItemId) Blind SQL Injection Vulnerability

No description provided by source. FlexCMS CalendarItemId Blind SQL Injection Vulnerability AUTHOR: MisterRichard Developer site: http://www.flexcms.dk/ Admin login site: http://target.com/flexadmin/ = Vulnerability author : Lanti-Net = Contact: lanti-netathotmaildotcom = Site : www.khg-crew.ws =...

FlexCMS Calendar Blind SQL Injection

FlexCMS CalendarItemId Blind SQL Injection Vulnerability AUTHOR: MisterRichard Developer site: http://www.flexcms.dk/ Admin login site: http://target.com/flexadmin/ = Vulnerability author : Lanti-Net = Contact: lanti-netathotmaildotcom = Site : www.khg-crew.ws = Greetz: SpYrO , boom3rang, KHG,...

FlexCMS Calendar - 'itemID' Blind SQL Injection

FlexCMS CalendarItemId Blind SQL Injection Vulnerability AUTHOR: MisterRichard Developer site: http://www.flexcms.dk/ Admin login site: http://target.com/flexadmin/ = Vulnerability author : Lanti-Net = Contact: lanti-netathotmaildotcom = Site : www.khg-crew.ws = Greetz: SpYrO , boom3rang, KHG,...

FlexCMS Calendar - itemID Blind SQL Injection

FlexCMS Calendar - itemID Blind SQL Injection FlexCMS CalendarItemId Blind SQL Injection Vulnerability AUTHOR: MisterRichard Developer site: http://www.flexcms.dk/ Admin login site: http://target.com/flexadmin/ = Vulnerability author : Lanti-Net = Contact: lanti-netathotmaildotcom = Site :...

Flex CMS Calendar (ItemId) Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== FlexCMS Calendar ItemId Blind SQL Injection Vulnerability =========================================================== FlexCMS CalendarItemId Blind SQL Injection Vulnerability...

Sql injection

SQL injection vulnerability in FlexCMS allows remote attackers to execute arbitrary SQL commands via the catId parameter...

CVE-2009-0534

SQL injection vulnerability in FlexCMS allows remote attackers to execute arbitrary SQL commands via the catId parameter...

CVE-2009-0534

CVE-2009-0534 refers to a SQL injection vulnerability in FlexCMS. The affected component is the application’s handling of the catId parameter, which can be manipulated by an attacker to execute arbitrary SQL commands remotely. This vulnerability is documented across multiple sources (NVD entry an...

CVE-2009-0534

SQL injection vulnerability in FlexCMS allows remote attackers to execute arbitrary SQL commands via the catId parameter...

FlexCMS (catId) Remote SQL Injection Vulnerability

No description provided by source. AUTHOR: MisterRichard FlexCMS Remote SQL Injection Discovered by MisterRichard. Developer site: http://www.flexcms.dk/ Developer has not been notified. Live demo: Injection:...