56 matches found
EUVD-2010-2058
Malware in sbrugna...
EUVD-2010-2059
Malware in sbrugna...
EUVD-2012-6363
Malware in sbrugna...
CVE-2012-6513
Cross-site scripting XSS vulnerability in index.php/AdminPreferences in gpEasy CMS 2.3.3 allows remote attackers to inject arbitrary web script or HTML via the jsoncallback parameter...
gpEasy CMS 4.4 Cross Site Scripting
Affected software: gpeasy cms Type of vulnerability:stored xss URL:gpeasy.com Discovered by: provensec Website: provensec.com version: gpEasy 4.4 Proof of concept goto edit layout and fill filed with xss payload " and save it javascript will execute --20cf303f64d02dcd89051578f782 Content-Type:...
gpEasy <= 1.5RC3 Remote FIle Include Exploit
No description provided by source. Exploit Title: gpEasy = 1.5RC3 Remote FIle Include Exploit Date: 18-12-2009 Author: cr4wl3r Software Link: http://sourceforge.net/projects/gpeasy/files/ Version: N/A Tested on: GNU/LINUX Code adminpassword.php :...
gpEasy <= 1.6.1 CSRF Remote Add Admin Exploit
No description provided by source. ============================================= gpEasy = 1.6.1 CSRF Remote Add Admin Exploit ============================================= Author : Giuseppe 'giudinvx' D'Inverno Email : giudinvxatgmaildotcom Date : 04-29-2010 Site :...
CVE-2013-0807
Cross-site scripting XSS vulnerability in the NewSectionPrompt function in include/tool/editingpage.php in gpEasy CMS 3.5.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the section parameter in a newsection action to index.php...
CVE-2013-0807
Cross-site scripting XSS vulnerability in the NewSectionPrompt function in include/tool/editingpage.php in gpEasy CMS 3.5.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the section parameter in a newsection action to index.php...
CVE-2013-0807
gpEasy CMS 3.5.2 and earlier are affected by a Cross-Site Scripting (XSS) vulnerability in the NewSectionPrompt function (include/tool/editing_page.php). The issue arises from insufficient sanitisation of the section parameter in the new_section action to index.php, enabling an attacker to inject...
PT-2014-2464
Name of the Vulnerable Software and Affected Versions gpEasy CMS versions 3.5.2 and earlier Description A cross-site scripting XSS issue exists in the NewSectionPrompt function, allowing remote attackers to inject arbitrary web script or HTML. This is achieved by manipulating the section paramete...
CVE-2013-0807: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the NewSectionPrompt function in include/tool/editingpage.php in gpEasy CMS 3.5.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the section parameter in a newsection action to index.php...
gpEasy v4.3.x CMS - Multiple Web Vulnerabilities
Document Title: =============== gpEasy v4.3.x CMS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1189 Release Date: ============= 2014-02-06 Vulnerability Laboratory ID VL-ID: ==================================== 1189 Comm...
gpEasy 4.3.x XSS / File Inclusion / Shell Upload
Document Title: =============== gpEasy v4.3.x CMS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1189 Release Date: ============= 2014-02-06 Vulnerability Laboratory ID VL-ID: ==================================== 1189 Comm...
gpEasy v4.3.x CMS - Multiple Web Vulnerabilities
Document Title: =============== gpEasy v4.3.x CMS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1189 Release Date: ============= 2014-02-05 Vulnerability Laboratory ID VL-ID: ==================================== 1189 Comm...
gpEasy CMS 4.0 Shell Upload Vulnertability
gpEasy CMS version 4.0 suffers from a remote shell upload vulnerability. Exploit Title : gpEasy CMS Malicious File Upload Date : 4 June 2013 Exploit Author : CWH Underground Site : www.2600.in.th Vendor Homepage : http://gpeasy.com/ Software Link : http://gpeasy.com/SpecialgpEasy?cmd=dlzip Versio...
gpEasy CMS 4.0 Shell Upload
Exploit Title : gpEasy CMS Malicious File Upload Date : 4 June 2013 Exploit Author : CWH Underground Site : www.2600.in.th Vendor Homepage : http://gpeasy.com/ Software Link : http://gpeasy.com/SpecialgpEasy?cmd=dlzip Version : 4.0 Tested on : Window and Linux...
Cross-Site Scripting (XSS) vulnerability in gpEasy
Advisory ID: HTB23137 Product: gpEasy Vendor: gpeasy Vulnerable Versions: 3.5.2 and probably prior Tested Version: 3.5.2 Vendor Notification: January 2, 2013 Vendor Patch: January 2, 2013 Public Disclosure: January 23, 2013 Vulnerability Type: Cross-Site Scripting CWE-79 CVE Reference:...
CVE-2012-6513
Cross-site scripting XSS vulnerability in index.php/AdminPreferences in gpEasy CMS 2.3.3 allows remote attackers to inject arbitrary web script or HTML via the jsoncallback parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php/AdminPreferences in gpEasy CMS 2.3.3 allows remote attackers to inject arbitrary web script or HTML via the jsoncallback parameter...