FSA-017.txt

----------------------------------------------------- Advisory id: FSA:017 Author: Federico Fazzi Date: 15/06/2006, 20:31 Sinthesis: HotPlugCMS 1.0, Cross-Site Scripting Vulnerabilities Type: low Product: http://hotplugcms.com/ Patch: unavailable...

hotplugCMS.txt

HotPlugCMS doesn't check input field values, so logging in on /hotplugcms/administration/tblcontent is very easy with ' OR 1=1 / and a SQL-inject will bypass the entire authentication process. Typical, very simple SQL Injection. peda...

HotPlugCMS_1.0 - SQL Injection Vulnerability

HotPlugCMS doesn't check input field values, so logging in on /hotplugcms/administration/tblcontent is very easy with ' OR 1=1 / and a SQL-inject will bypass the entire authentication process. Typical, very simple SQL Injection. peda...