EUVD-2008-6576

Malware in sbrugna...

EUVD-2007-4584

Malware in sbrugna...

CVE-2008-6614

Multiple SQL injection vulnerabilities in microcms-admin-login.php in Implied By Design IBD Micro CMS 3.5 aka 0.3.5 allow remote attackers to execute arbitrary SQL commands via 1 the administratorsusername parameter aka the Username field or 2 the administratorspass parameter aka the Password fie...

Sql injection

Multiple SQL injection vulnerabilities in microcms-admin-login.php in Implied By Design IBD Micro CMS 3.5 aka 0.3.5 allow remote attackers to execute arbitrary SQL commands via 1 the administratorsusername parameter aka the Username field or 2 the administratorspass parameter aka the Password fie...

CVE-2008-6614

Multiple SQL injection vulnerabilities in microcms-admin-login.php in Implied By Design IBD Micro CMS 3.5 aka 0.3.5 allow remote attackers to execute arbitrary SQL commands via 1 the administratorsusername parameter aka the Username field or 2 the administratorspass parameter aka the Password fie...

CVE-2008-6553

microcms-admin-home.php in Implied by Design Micro CMS Micro-CMS 3.5 aka 0.3.5 does not require authentication as an administrator, which allows remote attackers to 1 create administrative accounts via an addadmin action, 2 remove administrative accounts via a deleteadmin action, and 3 modify...

CVE-2008-6553

CVE-2008-6553 affects Implied by Design Micro CMS (Micro-CMS) version 3.5 (aka 0.3.5). The vulnerability arises because microcms-admin-home.php does not require administrator authentication, enabling remote attackers to perform administrative actions: add_admin (create admins), delete_admin (remo...

Sql injection

SQL injection vulnerability in cms/revert-content.php in Implied by Design Micro CMS Micro-CMS 3.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-4602

SQL injection vulnerability in cms/revert-content.php in Implied by Design Micro CMS Micro-CMS 3.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-4602

SQL injection vulnerability in cms/revert-content.php in Implied by Design Micro CMS Micro-CMS 3.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Micro CMS 3.5 (revert-content.php) Remote SQL Injection Vulnerability

No description provided by source. not sec group http://www.notsec.com [email protected] Micro CMS 3.5 Class: SQL Injection Found: 28/08/2007 Remote: Yes Site: http://www.impliedbydesign.com/ibd-micro-cms-static-content-manager.html Download: http://www.impliedbydesign.com/apps/microcms/microcms.zi...

Micro CMS 3.5 - revert-content.php SQL Injection

Micro CMS 3.5 - revert-content.php SQL Injection not sec group http://www.notsec.com [email protected] Micro CMS 3.5 Class: SQL Injection Found: 28/08/2007 Remote: Yes Site: http://www.impliedbydesign.com/ibd-micro-cms-static-content-manager.html Download:...

CVE-2006-3144

PHP remote file inclusion vulnerability in microcmsfiles/microcms-include.php in Implied By Design IBD Micro CMS 3.5 aka 0.3.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the microcmspath parameter. NOTE: it was later reported that this can also be leveraged to...

CVE-2006-3144

PHP remote file inclusion vulnerability in microcmsfiles/microcms-include.php in Implied By Design IBD Micro CMS 3.5 aka 0.3.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the microcmspath parameter. NOTE: it was later reported that this can also be leveraged to...

CVE-2006-3144

The CVE-2006-3144 entry concerns a PHP remote file inclusion in Implied By Design (IBD) Micro CMS 3.5 (aka 0.3.5) and earlier. The vulnerability allows an attacker to execute arbitrary PHP code by supplying a URL in the microcms_path parameter; later reports note it can also be used to include an...