Kasseler CMS 1.1.0/1.2.0 Lite - SQL Injection

Kasseler CMS 1.1.0, 1.2.0 Lite SQL Injection Author: !DoktOR! Date found: 13.09.08 Product: Kasseler CMS Version: 1.1.0, 1.2.4 URL: www.kasseler-cms.net Vulnerability Class: SQL Injection...

Kasseler CMS 1.1.01.2.0 Lite - SQL Injection

Kasseler CMS 1.1.01.2.0 Lite - SQL Injection Kasseler CMS 1.1.0, 1.2.0 Lite SQL Injection Author: !DoktOR! Date found: 13.09.08 Product: Kasseler CMS Version: 1.1.0, 1.2.4 URL: www.kasseler-cms.net Vulnerability Class: SQL Injection...

kasselercms-lfixss.txt

Cr@zyKing / sqL L0v3r'Z Crew Co. 2008 // From Turkey http://biyosecurity.com / If there isn't the devotion Success there... : Greatz : aLL my Friend'z Kasseler-Cms LFI/XSS Multiple Remote Vulnerabilities Down : http://www.kasseler-cms.net LFI :...

Directory traversal

Directory traversal vulnerability in Kasseler CMS 1.3.0 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter to index.php, possibly related to the phpManual module...

CVE-2008-3088

Cross-site scripting XSS vulnerability in the Files module in Kasseler CMS 1.3.0 and 1.3.1 Lite allows remote attackers to inject arbitrary web script or HTML via the cid parameter in a Category action to index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in the Files module in Kasseler CMS 1.3.0 and 1.3.1 Lite allows remote attackers to inject arbitrary web script or HTML via the cid parameter in a Category action to index.php...

CVE-2008-3087

Directory traversal vulnerability in Kasseler CMS 1.3.0 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter to index.php, possibly related to the phpManual module...

CVE-2008-3087

Directory traversal vulnerability in Kasseler CMS 1.3.0 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter to index.php, possibly related to the phpManual module...

CVE-2008-3087

CVE-2008-3087 affects Kasseler CMS 1.3.0 and enables a directory traversal via a .. in the file parameter to index.php (possibly related to the phpManual module). The NVD entry records this as a medium-severity vulnerability (CVSS v2 base score 5.0) with network access and no authentication requi...

CVE-2008-3088

Cross-site scripting XSS vulnerability in the Files module in Kasseler CMS 1.3.0 and 1.3.1 Lite allows remote attackers to inject arbitrary web script or HTML via the cid parameter in a Category action to index.php...

CVE-2008-3088

Kasseler CMS (Files module) vulnerable to Cross-site Scripting (XSS) via the cid parameter in a Category action to index.php, affecting versions 1.3.0 and 1.3.1 Lite. Root cause: unsanitized input leading to script/HTML injection. Impact: remote attacker can inject arbitrary web script; authentic...

Kasseler CMS 1.3.0 (LFI/XSS) Multiple Vulnerabilities

No description provided by source...

Kasseler CMS 1.3.0 - Local File Inclusion Cross-Site Scripting

Kasseler CMS 1.3.0 - Local File Inclusion Cross-Site Scripting Cr@zyKing / sqL L0v3r'Z Crew Co. 2008 // From Turkey http://biyosecurity.com / If there isn't the devotion Success there... : Greatz : aLL my Friend'z Kasseler-Cms LFI/XSS Multiple Remote Vulnerabilities Down :...

Kasseler CMS 1.3.0 (LFI/XSS) Multiple Vulnerabilities

Exploit for unknown platform in category web applications ===================================================== Kasseler CMS 1.3.0 LFI/XSS Multiple Vulnerabilities ===================================================== Kasseler-Cms LFI/XSS Multiple Remote Vulnerabilities Down :...

Kasseler CMS 1.3.0 - Local File Inclusion / Cross-Site Scripting

Cr@zyKing / sqL L0v3r'Z Crew Co. 2008 // From Turkey http://biyosecurity.com / If there isn't the devotion Success there... : Greatz : aLL my Friend'z Kasseler-Cms LFI/XSS Multiple Remote Vulnerabilities Down : http://www.kasseler-cms.net LFI :...