261 matches found
Multiple vulnerabilities in ImpressCMS
Vulnerability ID: HTB23064 Reference: https://www.htbridge.ch/advisory/multiplevulnerabilitiesinimpresscms.html Product: ImpressCMS Vendor: The ImpressCMS Project http://www.impresscms.org/ Vulnerable Version: 1.3 Final and probably prior Tested Version: 1.3 Final Vendor Notification: 14 December...
Multiple vulnerabilities in ImpressCMS
No description provided by source. Reference: https://www.htbridge.ch/advisory/multiplevulnerabilitiesinimpresscms.html Product: ImpressCMS Vendor: The ImpressCMS Project http://www.impresscms.org/ Vulnerable Version: 1.3 Final and probably prior Tested Version: 1.3 Final Vendor Notification: 14...
ImpressCMS 1.3 Final Cross Site Scripting / Local File Inclusion
Vulnerability ID: HTB23064 Reference: https://www.htbridge.ch/advisory/multiplevulnerabilitiesinimpresscms.html Product: ImpressCMS Vendor: The ImpressCMS Project http://www.impresscms.org/ Vulnerable Version: 1.3 Final and probably prior Tested Version: 1.3 Final Vendor Notification: 14 December...
Multiple vulnerabilities in ImpressCMS
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in ImpressCMS, which can be exploited to perform cross-site scripting and local file inclusion attacks. 1 Multiple Arbitrary XSS vulnerabilities in ImpressCMS: CVE-2012-0986 1.1 Input appended to the URL after...
impressCMS <= 1.2.4_final (FU/RFI) Multiple Vulnerability
Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...
CVE-2010-4616
Cross-site scripting XSS vulnerability in modules/content/admin/content.php in ImpressCMS 1.2.3 Final, and possibly other versions before 1.2.4, allows remote attackers to inject arbitrary web script or HTML via the quicksearchContentContent parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in modules/content/admin/content.php in ImpressCMS 1.2.3 Final, and possibly other versions before 1.2.4, allows remote attackers to inject arbitrary web script or HTML via the quicksearchContentContent parameter...
CVE-2010-4616
ImpressCMS vulnerability CVE-2010-4616: An XSS flaw in modules/content/admin/content.php (quicksearch_ContentContent) affects ImpressCMS 1.2.3 Final and possibly earlier versions before 1.2.4. An attacker can inject arbitrary HTML/script via the quicksearch_ContentContent parameter, with exploita...
CVE-2010-4616
Cross-site scripting XSS vulnerability in modules/content/admin/content.php in ImpressCMS 1.2.3 Final, and possibly other versions before 1.2.4, allows remote attackers to inject arbitrary web script or HTML via the quicksearchContentContent parameter...
ImpressCMS 1.2.x - quicksearch_ContentContent HTML Injection
ImpressCMS 1.2.x - quicksearchContentContent HTML Injection source: https://www.securityfocus.com/bid/45541/info ImpressCMS is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content...
XSS vulnerability in ImpressCMS
Vulnerability ID: HTB22766 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinimpresscms.html Product: ImpressCMS Vendor: The ImpressCMS Project http://www.impresscms.org Vulnerable Version: 1.2.3 Final and probably prior versions Vendor Notification: Vulnerability Type: XSS Cross Site...
ImpressCMS 1.2.3 Final Cross Site Scripting
Vulnerability ID: HTB22766 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinimpresscms.html Product: ImpressCMS Vendor: The ImpressCMS Project http://www.impresscms.org Vulnerable Version: 1.2.3 Final and probably prior versions Vendor Notification: Vulnerability Type: XSS Cross Site...
ImpressCMS 1.2.x - 'quicksearch_ContentContent' HTML Injection
source: https://www.securityfocus.com/bid/45541/info ImpressCMS is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would run in the context of t...
Cross-site Scripting (XSS) Vulnerability in ImpressCMS
High-Tech Bridge SA Security Research Lab has discovered vulnerability in ImpressCMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in ImpressCMS: CVE-2010-4616 The vulnerability exists due to input sanitation error in the...
CVE-2010-4271
SQL injection vulnerability in ImpressCMS before 1.2.3 RC2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
Sql injection
SQL injection vulnerability in ImpressCMS before 1.2.3 RC2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2010-4271
CVE-2010-4271 affects ImpressCMS prior to 1.2.3 RC2. The issue is a SQL injection that could allow remote attackers to execute arbitrary SQL commands via unspecified vectors. Remediation: upgrade to ImpressCMS 1.2.3 RC2 or later.
CVE-2010-4271
SQL injection vulnerability in ImpressCMS before 1.2.3 RC2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
ImpressCMS 1.2.1 Final Cross Site Scripting
------------------------------------------------------------------------ Software................ImpressCMS 1.2.1 Final Vulnerability...........Reflected Cross-site Scripting Download................http://www.impresscms.org/ Release Date............7/11/2010 Tested On...............Windows Vista...
CSSTidy 1.3 - css_optimiser.php Cross-Site Scripting
CSSTidy 1.3 - cssoptimiser.php Cross-Site Scripting source: https://www.securityfocus.com/bid/41552/info CSSTidy is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. ImpressCMS versions that use the vulnerable application are also affected. A...