7887 matches found
Qwerty CMS - id SQL Injection
Qwerty CMS - id SQL Injection QWERTY CMS lite - SQL INJ Found: b3 from GraBBerZ.com = Injection in index.php variable: id http://site/index.php?act=publ&id=-3+UNION+SELECT+1,2,3,4,5 = Administrator Table: rkh8t5po Columns: secret873ktlW,pass459khyf Column with pass: pass459khyf Admin CP:...
Qwerty CMS - 'id' SQL Injection
QWERTY CMS lite - SQL INJ Found: b3 from GraBBerZ.com = Injection in index.php variable: id http://site/index.php?act=publ&id=-3+UNION+SELECT+1,2,3,4,5 = Administrator Table: rkh8t5po Columns: secret873ktlW,pass459khyf Column with pass: pass459khyf Admin CP: /admin/admin.php = CMS PAGE :...
CVE-2009-0526
Multiple cross-site scripting XSS vulnerabilities in index.php in AdaptCMS Lite 1.4 allow remote attackers to inject arbitrary web script or HTML via the 1 url and 2 acuparam parameters, and 3 the URI...
Remote file inclusion
PHP remote file inclusion vulnerability in plugins/rssimporterfunctions.php in AdaptCMS Lite 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter...
CVE-2009-0527
PHP remote file inclusion vulnerability in plugins/rssimporterfunctions.php in AdaptCMS Lite 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter...
CVE-2009-0527
PHP remote file inclusion vulnerability in plugins/rssimporterfunctions.php in AdaptCMS Lite 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter...
CVE-2009-0527
AdaptCMS Lite 1.4 is affected by CVE-2009-0527 due to a PHP remote file inclusion in plugins/rss_importer_functions.php. An attacker can supply a URL in the sitepath parameter to execute arbitrary PHP code on the server. This is a remote code execution risk as described in the CVE entry. Public e...
CVE-2009-0526
Multiple cross-site scripting XSS vulnerabilities in index.php in AdaptCMS Lite 1.4 allow remote attackers to inject arbitrary web script or HTML via the 1 url and 2 acuparam parameters, and 3 the URI...
CVE-2009-0526
AdaptCMS Lite (1.4; and 1.5 per OpenVAS) is affected by multiple cross-site scripting (XSS) vulnerabilities and a remote file-include vulnerability due to insufficient sanitization of user-supplied data in index.php. The issues allow injecting arbitrary script/HTML via the url, acuparam, and the ...
AdaptCMS Lite 1.4 (XSS/RFI) Multiple Remote Vulnerabilities
No description provided by source. AdaptCMS Lite 1,4 Multiple Vulnes Remote File Include , Remote XSS Free Download : http://213.203.218.125/a/ad/adaptcms/AdaptCMSLite1.4.zip Or : http://www.adaptcms.com/ - Found By : RoMaNcYxHaCkEr - My Site : WwW.Sec-Code.CoM - My Group : Security - Codes Group...
AdaptCMS Lite 1.4 RFI / XSS
AdaptCMS Lite 1,4 Multiple Vulnes Remote File Include , Remote XSS Free Download : http://213.203.218.125/a/ad/adaptcms/AdaptCMSLite1.4.zip Or : http://www.adaptcms.com/ - Found By : RoMaNcYxHaCkEr - My Site : WwW.Sec-Code.CoM - My Group : Security - Codes Group Exploit 1: - Remote File Include :...
AdaptCMS Lite 1.4 (XSS/RFI) Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications =========================================================== AdaptCMS Lite 1.4 XSS/RFI Multiple Remote Vulnerabilities =========================================================== AdaptCMS Lite 1,4 Multiple Vulnes Remote File Include , Remot...
AdaptCMS Lite 1.4 - Cross-Site Scripting / Remote File Inclusion
AdaptCMS Lite 1,4 Multiple Vulnes Remote File Include , Remote XSS Free Download : http://213.203.218.125/a/ad/adaptcms/AdaptCMSLite1.4.zip Or : http://www.adaptcms.com/ - Found By : RoMaNcYxHaCkEr - My Site : WwW.Sec-Code.CoM - My Group : Security - Codes Group Exploit 1: - Remote File Include :...
Fujitsu Systemcast Wizard Lite PXE请求远程溢出漏洞
BUGTRAQ ID: 33342 Systemcast Wizard Lite是用于创建富士通PRIMEQUEST服务器系统的支持软件。 Systemcast Wizard Lite的PXEService服务监听PXE协议请求。入站报文被拷贝到了0x400字节的固定缓冲区，但传送给recvfrom的参数长度为0x5DC，因此如果远程攻击者发送了超过0x400字节的特制upd报文的话，就可以触发溢出，导致执行任意指令。 Fujitsu Systemcast Wizard Lite = 2.0 Fujitsu ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载...
CVE-2009-0270
Stack-based buffer overflow in PXEService.exe in Fujitsu SystemcastWizard Lite 2.0A, 2.0, 1.9, and earlier allows remote attackers to execute arbitrary code via a large PXE protocol request in a UDP packet...
Directory traversal
Directory traversal vulnerability in the TFTP service in Fujitsu SystemcastWizard Lite 2.0A, 2.0, 1.9, and earlier allows remote attackers to read arbitrary files via directory traversal sequences in unspecified vectors...
Stack overflow
Stack-based buffer overflow in PXEService.exe in Fujitsu SystemcastWizard Lite 2.0A, 2.0, 1.9, and earlier allows remote attackers to execute arbitrary code via a large PXE protocol request in a UDP packet...
CVE-2009-0271
CVE-2009-0271 describes a directory traversal vulnerability in the TFTP service of Fujitsu SystemWizard Lite (versions 2.0A, 2.0, 1.9 and earlier). The issue allows remote attackers to read arbitrary files via directory traversal sequences. The available documents confirm the affected product and...
CVE-2009-0270
CVE-2009-0270 describes a stack-based buffer overflow in Fujitsu SystemcastWizard Lite’s PXEService.exe (affected: SystemcastWizard Lite 2.0A, 2.0, 1.9 and earlier). An overly large PXE protocol request sent via UDP could allow remote attackers to execute arbitrary code with the privileges of PXE...
