Lucene search
K

29 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2008-2189

Malware in sbrugna...

10CVSS6.4AI score0.05484EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2007-4099

Malware in sbrugna...

4.3CVSS6.4AI score0.0209EPSS
Exploits0References11
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2009-0497

Malware in sbrugna...

7.5CVSS6.4AI score0.00414EPSS
Exploits1References4
Packet Storm
Packet Storm
added 2023/08/02 12:0 a.m.217 views

COMpose-IT CMS 2.0 SQL Injection

==================================================================================================================================== | Title : COMpose-IT CMS v2.0 SQL injection Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 68.032-bit | ...

7.1AI score
Exploits0
Packet Storm
Packet Storm
added 2023/08/01 12:0 a.m.242 views

COMpose-IT CMS 2.0 Insecure Settings

==================================================================================================================================== | Title : COMpose-IT CMS v2.0 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 68.032-bi...

7.1AI score
Exploits0
Packet Storm
Packet Storm
added 2023/07/17 12:0 a.m.230 views

BM IT CMS 1.0 Insecure Settings

==================================================================================================================================== | Title : BM IT CMS v1.0 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 69.032-bit | |...

7.1AI score
Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.21 views

IT!CMS 0.2 menu-ed.php wndtitle Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/25129/info IT!CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage these issues...

7.1AI score
Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.14 views

IT!CMS 0.2 lang-en.php wndtitle Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/25129/info IT!CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage these issues...

7.1AI score
Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.15 views

IT!CMS 0.2 titletext-ed.php wndtitle Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/25129/info IT!CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage these issues...

7.1AI score
Exploits0
Packet Storm
Packet Storm
added 2012/08/25 12:0 a.m.22 views

Power-IT CMS Cross Site Scripting

Exploit Title: Power-IT Cms Cross Site Scripting Vulnerability Google Dork: intext:"Powered by PowerIT" Date: 08/24/2012 Author: Crim3R Vendor Home : http://www.poweritschools.com/ Tested on: all ====================================== POST DATA /Host: www.ceca-ct.org User-Agent: Mozilla/5.0 Windo...

Exploits0
Prion
Prion
added 2009/02/10 1:30 a.m.10 views

Sql injection

SQL injection vulnerability in login.php in IT!CMS 2.1a and earlier allows remote attackers to execute arbitrary SQL commands via the Username...

7.5CVSS9.1AI score0.00414EPSS
Exploits1References3Affected Software1
NVD
NVD
added 2009/02/10 1:30 a.m.8 views

CVE-2009-0493

SQL injection vulnerability in login.php in IT!CMS 2.1a and earlier allows remote attackers to execute arbitrary SQL commands via the Username...

7.5CVSS8.4AI score0.00414EPSS
Exploits1References3
Cvelist
Cvelist
added 2009/02/10 1:0 a.m.14 views

CVE-2009-0493

SQL injection vulnerability in login.php in IT!CMS 2.1a and earlier allows remote attackers to execute arbitrary SQL commands via the Username...

8.4AI score0.00414EPSS
Exploits1References3
CVE
CVE
added 2009/02/10 1:0 a.m.34 views

CVE-2009-0493

The CVE-2009-0493 entry describes a SQL injection in IT!CMS before or at 2.1a, affecting login.php via the Username parameter and allowing remote execution of arbitrary SQL. NVD lists a base score of 7.5 (HIGH) with network access, low attack complexity and no authentication required. The connect...

7.5CVSS8.7AI score0.00414EPSS
Exploits1References3Affected Software1
Packet Storm
Packet Storm
added 2009/01/07 12:0 a.m.20 views

IT!CMS SQL Injection Authentication Bypass

. . . / | || | / / || | / / \ \ \ \ | |/ \ / |/ \ \ \ | \ \ \ /| | /| | / | | | / // \ / / | | | Y \ \ | || /|| /\ |\ /| || / / / / / / / / / --++++++-- --+++ IT!CMS = vers. SQL Injection Vulnerability +++-- --++++++-- + Discovered by: certaindeath + Exploit: simple SQL injection +...

1.2AI score
Exploits0
NVD
NVD
added 2008/05/14 5:20 p.m.8 views

CVE-2008-2192

Static code injection vulnerability in box/minichat/boxpop.php in IT!CMS aka itcms 1.9 allows remote attackers to inject arbitrary PHP code into box/MiniChat/data/shouts.php via the shout parameter...

10CVSS7.2AI score0.05484EPSS
Exploits0References4
Prion
Prion
added 2008/05/14 5:20 p.m.7 views

Code injection

Static code injection vulnerability in box/minichat/boxpop.php in IT!CMS aka itcms 1.9 allows remote attackers to inject arbitrary PHP code into box/MiniChat/data/shouts.php via the shout parameter...

10CVSS7.8AI score0.05484EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2008/05/14 5:0 p.m.15 views

CVE-2008-2192

Static code injection vulnerability in box/minichat/boxpop.php in IT!CMS aka itcms 1.9 allows remote attackers to inject arbitrary PHP code into box/MiniChat/data/shouts.php via the shout parameter...

7.2AI score0.05484EPSS
Exploits0References4
CVE
CVE
added 2008/05/14 5:0 p.m.34 views

CVE-2008-2192

CVE-2008-2192 affects IT!CMS (aka itcms) 1.9, specifically the box/minichat/boxpop.php component. The root cause is a static code injection vulnerability that allows remote attackers to inject arbitrary PHP code into box/MiniChat/data/shouts.php via the shout parameter. Connected sources consiste...

10CVSS7.3AI score0.05484EPSS
Exploits0References4Affected Software1
Prion
Prion
added 2007/07/31 10:17 a.m.10 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in IT!CMS itcms 0.2 allow remote attackers to inject arbitrary web script or HTML via the wndtitle parameter to 1 lang-en.php, 2 menu-ed.php, or 3 titletext-ed.php...

4.3CVSS6.1AI score0.0209EPSS
Exploits0References10Affected Software1
Rows per page
Query Builder