EUVD-2018-2261

Malware in sbrugna...

CVE-2018-10183

An issue was discovered in BigTree 4.2.22. There is cross-site scripting XSS in /core/inc/lib/less.php/test/index.php because of a $SERVER'REQUESTURI' echo, as demonstrated by the dir parameter in a file=charsets action...

PT-2018-9736

Name of the Vulnerable Software and Affected Versions: BigTree version 4.2.22 Description: The issue is related to cross-site scripting XSS in the /core/inc/lib/less.php/test/index.php file. This occurs due to the echo of the $ SERVER'REQUEST URI' variable. The vulnerability can be demonstrated b...

CVE-2018-10183: Improper Neutralization of Input During Web Page Generation

An issue was discovered in BigTree 4.2.22. There is cross-site scripting XSS in /core/inc/lib/less.php/test/index.php because of a $SERVER'REQUESTURI' echo, as demonstrated by the dir parameter in a file=charsets action...

Family Connections CMS v2. 5. 0-v2. 7. 1 (less.php) remote command execution exploit-vulnerability warning-the black bar safety net

Author: TPCS From: 90sec Blog: http://blog.163.com/jianshitianxiaao/ 0x01 introduction Recently in practice some PoC, to find this old cave to practice hand, the first PoC released is in the exploitDB on, just not posted the link, we go to search under it. A start to get to the original PoC, want...

CVE-2011-5130

dev/less.php in Family Connections CMS FCMS 2.5.0 - 2.7.1, when registerglobals is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in the argv1 parameter...

PT-2012-2108

Name of the Vulnerable Software and Affected Versions Family Connections CMS FCMS versions 2.5.0 through 2.7.1 Description The issue allows remote attackers to execute arbitrary commands. This is possible when the register globals setting is enabled, and shell metacharacters are used in the argv1...

CVE-2011-5130: Improper Control of Generation of Code

dev/less.php in Family Connections CMS FCMS 2.5.0 - 2.7.1, when registerglobals is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in the argv1 parameter...

Family Connections less.php Remote Command Execution

Exploit for php platform in category web applications This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Family Connections CMS 2.5.02.7.1 - less.php Remote Command Execution

Family Connections CMS 2.5.02.7.1 - less.php Remote Command Execution $theme = isset$argv1 ? $argv1 : 'default'; system"clear"; if fileexists"$dir/themes/$theme/style.css" echo "\n themes/$theme/style.css already exists.\n\n"; echo "Overwrite y/n ? "; $handle = fopen "php://stdin","r"; $line =...

Family Connections CMS 2.7.1 Remote Command Execution

$theme = isset$argv1 ? $argv1 : 'default'; system"clear"; if fileexists"$dir/themes/$theme/style.css" echo "\n themes/$theme/style.css already exists.\n\n"; echo "Overwrite y/n ? "; $handle = fopen "php://stdin","r"; $line = fgets$handle; if trim$line != 'y' exit; $worked = system"php -q...

Family Connections CMS 2.5.0/2.7.1 - 'less.php' Remote Command Execution

$theme = isset$argv1 ? $argv1 : 'default'; system"clear"; if fileexists"$dir/themes/$theme/style.css" echo "\n themes/$theme/style.css already exists.\n\n"; echo "Overwrite y/n ? "; $handle = fopen "php://stdin","r"; $line = fgets$handle; if trim$line != 'y' exit; $worked = system"php -q...