135 matches found
fuzzylime cms <= 3.01 (admindir) Remote File Inclusion Vulnerability
No description provided by source. .-----------------------------------------------------------------------------. | vuln.: fuzzylime cms = 3.01 Remote File Inclusion Vulnerability | | download: http://cms.fuzzylime.co.uk/ | | dork: powered by fuzzylime | | | | author: [email protected] | | homepage...
fuzzylime cms <= 3.0 - Local File Inclusion Vulnerability
No description provided by source. not sec group http://www.notsec.com [email protected] fuzzylime cms = 3.0 Class: Local File Inclusion Found: 08/09/2007 Site: http://cms.fuzzylime.co.uk/ Download: http://cms.fuzzylime.co.uk/files/cms.zip Author: wHITeShEEp of notsec Contact: [email protected]...
Fuzzylime(cms) Version Detection
This script detects the installed version of Fuzzylimecms. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2009-2177
code/display.php in fuzzylime cms 3.03a and earlier, when magicquotesgpc is disabled, allows remote attackers to conduct directory traversal attacks and overwrite arbitrary files via a "....//" dot dot in the s parameter, which is collapsed into a "../" value...
CVE-2009-2176
Multiple directory traversal vulnerabilities in fuzzylime cms 3.03a and earlier, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 list parameter to code/confirm.php and the 2 template parameter to...
Directory traversal
Multiple directory traversal vulnerabilities in fuzzylime cms 3.03a and earlier, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 list parameter to code/confirm.php and the 2 template parameter to...
CVE-2009-2177
code/display.php in fuzzylime cms 3.03a and earlier, when magicquotesgpc is disabled, allows remote attackers to conduct directory traversal attacks and overwrite arbitrary files via a "....//" dot dot in the s parameter, which is collapsed into a "../" value...
CVE-2009-2176
Multiple directory traversal vulnerabilities in fuzzylime cms 3.03a and earlier, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 list parameter to code/confirm.php and the 2 template parameter to...
CVE-2009-2176
The provided connected documents confirm CVE-2009-2176 affects fuzzylime CMS, specifically versions 3.03a and earlier. The vulnerability is described as multiple directory traversal flaws that, when magic_quotes_gpc is disabled, allow remote attackers to include and execute arbitrary local files ...
CVE-2009-2177
code/display.php in fuzzylime cms 3.03a and earlier, when magicquotesgpc is disabled, allows remote attackers to conduct directory traversal attacks and overwrite arbitrary files via a "....//" dot dot in the s parameter, which is collapsed into a "../" value...
CVE-2009-2177
Fuzzylime CMS exposes a directory traversal and arbitrary file overwrite via the s parameter (....// collapsing to ../) in code/display.php for versions 3.03a and earlier when magic_quotes_gpc is disabled, enabling remote access. No remediation details are provided in the supplied documents.
Directory traversal
Multiple directory traversal vulnerabilities in fuzzylime cms 3.01 and 3.01a allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the s parameter to code/commupdate.php in a count action or 2 the heads parameter to code/newsheads.php. NOTE: the blog.php vector...
CVE-2008-6834
Multiple directory traversal vulnerabilities in fuzzylime cms 3.01 and 3.01a allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the s parameter to code/commupdate.php in a count action or 2 the heads parameter to code/newsheads.php. NOTE: the blog.php vector...
Directory traversal
Directory traversal vulnerability in commsrss.php in fuzzylime cms before 3.01b allows remote attackers to include and execute arbitrary local files via a .. dot dot in a files array element for a blogs action, as demonstrated by the files0 parameter...
CVE-2008-6833
Directory traversal vulnerability in commsrss.php in fuzzylime cms before 3.01b allows remote attackers to include and execute arbitrary local files via a .. dot dot in a files array element for a blogs action, as demonstrated by the files0 parameter...
CVE-2008-6834
Multiple directory traversal vulnerabilities in fuzzylime cms 3.01 and 3.01a allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the s parameter to code/commupdate.php in a count action or 2 the heads parameter to code/newsheads.php. NOTE: the blog.php vector...
CVE-2008-6834
CVE-2008-6834 affects fuzzylime CMS versions 3.01 and 3.01a. The vulnerability is a directory traversal that allows remote attackers to include and execute arbitrary local files by supplying a ".." sequence in either the s parameter to code/commupdate.php (count action) or the heads parameter to ...
CVE-2008-6833
Affected software: fuzzylime (cms) prior to version 3.01b, specifically the commsrss.php script. Vulnerability type & root cause: directory traversal/ local file inclusion via the files[] parameter in the blogs action, where input is not properly sanitized before being used in an include. Impact:...
fuzzylime cms <= 3.03a Local Inclusion / Arbitrary File Corruption PoC
+------------------------------------------------------------------------+ | fuzzylime cms = 3.03a local inclusion / arbitrary file corruption poc | +-----------+------------------------------------------------------------+ | by staker | +-----------+---------------------+ Author : xhaxkerx Speci...
fuzzylime cms <= 3.03a Local Inclusion / Arbitrary File Corruption PoC
No description provided by source. +------------------------------------------------------------------------+ | fuzzylime cms = 3.03a local inclusion / arbitrary file corruption poc | +-----------+------------------------------------------------------------+ | by staker |...