iCMS 1.1 - Admin SQL Injection Brute Force

iCMS 1.1 - Admin SQL Injection Brute Force !/usr/bin/python INFORMATION Exploit Title: iCMS v1.1 Admin SQLi/bruteforce Exploit Author: TecR0c Date: 18/3/2011 Software link: http://bit.ly/hbYy35 Tested on: Linux bt Version: v1.1 XXX: The likelihood of this exploit being successful is low as it...

iCMS 1.1 - Admin SQL Injection / Brute Force

!/usr/bin/python INFORMATION Exploit Title: iCMS v1.1 Admin SQLi/bruteforce Exploit Author: TecR0c Date: 18/3/2011 Software link: http://bit.ly/hbYy35 Tested on: Linux bt Version: v1.1 XXX: The likelihood of this exploit being successful is low as it requires knowledge of the web path and file...

iCMS 1.1 SQL Injection / Bruteforcer

!/usr/bin/python INFORMATION Exploit Title: iCMS v1.1 Admin SQLi/bruteforce Exploit Author: TecR0c Date: 18/3/2011 Software link: http://bit.ly/hbYy35 Tested on: Linux bt Version: v1.1 XXX: The likelihood of this exploit being successful is low as it requires knowledge of the web path and file...

asiCMS alpha 0.208 Multiple Remote File Inclusion Vulnerabilities

No description provided by source. =========================================================================================== o asiCMS alpha 0.208 Multiple Remote File Inclusion Vulnerability Software : asiCMS version alpha 0.208 Vendor : http://asicms.sourceforge.net/ Download :...

CVE-2005-4396

Cross-site scripting XSS vulnerability in admin/Default.asp in iCMS allows remote attackers to inject arbitrary web script or HTML via the LoginMSG parameter. NOTE: the provenance of this issue is unknown; the details were obtained solely from third party sources...

CVE-2005-4397

CVE-2005-4397 describes an SQL injection vulnerability in iCMS’s RunScript.asp where the Event_ID parameter enables remote attackers to execute arbitrary SQL commands. Public references (OSVDB, Secunia, NVD) list a CVSS v2 base score of 7.5 (HIGH) with network access, no authentication, and parti...

CVE-2005-4396

The CVE-2005-4396 entry describes an XSS vulnerability in iCMS, specifically in the admin/Default.asp page, where an attacker can cause the browser to execute injected script or HTML by supplying the LoginMSG parameter. The vulnerability is confirmed in multiple sources (e.g., NVD) with a CVSS v2...

CVE-2005-4397

SQL injection vulnerability in RunScript.asp iCMS allows remote attackers to execute arbitrary SQL commands via the EventID parameter...

CVE-2005-4396

Cross-site scripting XSS vulnerability in admin/Default.asp in iCMS allows remote attackers to inject arbitrary web script or HTML via the LoginMSG parameter. NOTE: the provenance of this issue is unknown; the details were obtained solely from third party sources...

CVE-2005-4397: Undefined Security Weakness

SQL injection vulnerability in RunScript.asp iCMS allows remote attackers to execute arbitrary SQL commands via the EventID parameter...

CVE-2005-4396: Undefined Security Weakness

Cross-site scripting XSS vulnerability in admin/Default.asp in iCMS allows remote attackers to inject arbitrary web script or HTML via the LoginMSG parameter. NOTE: the provenance of this issue is unknown; the details were obtained solely from third party sources...

CVE-2005-4219

setting.php in Innovative CMS ICMS, formerly Imoel-CMS contains username and password information in cleartext, which might allow attackers to obtain this information via a direct request to setting.php. NOTE: on a properly configured web server, it would be expected that a .php file would be...

CVE-2005-4219

CVE-2005-4219 affects Innovative CMS (ICMS, formerly Imoel-CMS). The setting.php page reportedly returns cleartext username and password information, potentially allowing an attacker to obtain credentials via a direct request. The NVD entry assigns a base CVSS v2 of 5.0 (Medium): Attack Vector Ne...

CVE-2005-3574

PHP file inclusion vulnerability in index.php of iCMS allows remote attackers to include arbitrary files via the page parameter...

CVE-2005-3574

PHP file inclusion vulnerability in index.php of iCMS allows remote attackers to include arbitrary files via the page parameter...

CVE-2005-3574

CVE-2005-3574 affects iCMS (PHP) via index.php. The vulnerability allows remote attackers to include arbitrary files through the page parameter, enabling a network-based attack with no authentication. The CVSSv2 base metrics in the provided data indicate a MEDIUM severity, with partial confidenti...

CVE-2005-3574: Undefined Security Weakness

PHP file inclusion vulnerability in index.php of iCMS allows remote attackers to include arbitrary files via the page parameter...

iCMS Remote File Include Vulnerability

iCMS Remote File Include Vulnerability Author: r0t hackers.by.lv Date: 14. nov 2005 software:iCMS vendor:http://www.cogilent.com/ software description: iCMS is an interactive Web Content Management System. The purpose of this product is to facilitate organizations that require power solutions to...