203 matches found
Cross-site Scripting (XSS) - Generic in maxsite/cms
✍️ Description Cross-site scripting also known as XSS is a web security vulnerability that allows an attacker to compromise the interactions that users have with a vulnerable application. It allows an attacker to circumvent the same origin policy, which is designed to segregate different websites...
Cross-site scripting vulnerability in MaxSite CMS version 98
MaxSite CMS is a website management system. A cross-site scripting vulnerability exists in MaxSite CMS version 98. An attacker can insert malicious js code into a page to obtain user cookies and other information, leading to user hijacking...
CMS MAXSITE <= 1.10 (category) Remote SQL Injection Vulnerability
No description provided by source. CMS MAXSITE Remote SQL Injection Exploit = 1.10 + Author: Tesz @ THD + Home: http://www.thaishadow.com + Forum: http://www.thaishadow.com/board/index.php + Download: http://maxsite.geniuscyber.com/index.php?name=index + Dork: MAXSITE or intitle:MAXSITE + Exploit...
Atomy Maxsite - index.php Arbitrary File Upload
Atomy Maxsite - index.php Arbitrary File Upload source: https://www.securityfocus.com/bid/60859/info Atomy Maxsite is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input. An attacker can...
Atomy Maxsite - 'index.php' Arbitrary File Upload
source: https://www.securityfocus.com/bid/60859/info Atomy Maxsite is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input. An attacker can exploit this issue to upload arbitrary code and...
Уязвимость в MaxSite Anti Spam Image
Здравствуйте 3APA3A! Сообщаю вам о найденной мною Insufficient Anti-automation уязвимости в MaxSite Anti Spam Image. Это капча плагин для WordPress. Это переработанная версия оригинального плагина Anti Spam Image, об уязвимости в котором я писал в 2007 году в своём проекте MoBiC. Данная капча...
CVE-2008-6446
Static code injection vulnerability in the Guestbook component in CMS MAXSITE allows remote attackers to inject arbitrary PHP code into the guestbook via the message parameter...
Code injection
Static code injection vulnerability in the Guestbook component in CMS MAXSITE allows remote attackers to inject arbitrary PHP code into the guestbook via the message parameter...
CVE-2008-6446
The CVE concerns CMS MAXSITE’s Guestbook component where the message parameter enables static code injection, allowing remote PHP code execution. Affected: Guestbook functionality in MAXSITE (CMS). Root cause: insufficient input handling in the Guestbook message field leading to code execution. D...
CVE-2008-6446
Static code injection vulnerability in the Guestbook component in CMS MAXSITE allows remote attackers to inject arbitrary PHP code into the guestbook via the message parameter...
cmsmaxsite-exec.txt
!/usr/bin/perl ================================================================== CMS MAXSITE Component Guestbook Remote Command Execution Exploit ================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...
CMS MAXSITE Component Guestbook - Remote Command Execution
CMS MAXSITE Component Guestbook - Remote Command Execution !/usr/bin/perl ================================================================== CMS MAXSITE Component Guestbook Remote Command Execution Exploit ==================================================================...
CMS MAXSITE Component Guestbook Remote Command Execution Exploit
Exploit for unknown platform in category web applications ================================================================ CMS MAXSITE Component Guestbook Remote Command Execution Exploit ================================================================ !/usr/bin/perl...
CMS MAXSITE Component Guestbook - Remote Command Execution
!/usr/bin/perl ================================================================== CMS MAXSITE Component Guestbook Remote Command Execution Exploit ================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...
Sql injection
SQL injection vulnerability in index.php in MAXSITE 1.10 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter in a webboard action...
CVE-2008-2487
SQL injection vulnerability in index.php in MAXSITE 1.10 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter in a webboard action...
CVE-2008-2487
CVE-2008-2487 is an SQL injection vulnerability in MAXSITE 1.10 and earlier, exploitable via the category parameter in a webboard action on index.php. The issue allows remote attackers to execute arbitrary SQL commands. Affected product/version: MAXSITE 1.10 and earlier. Impact and risk: CVSS 2.0...
CVE-2008-2487
SQL injection vulnerability in index.php in MAXSITE 1.10 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter in a webboard action...
CMS MAXSITE <= 1.10 (category) Remote SQL Injection Vulnerability
No description provided by source. CMS MAXSITE Remote SQL Injection Exploit = 1.10 + Author: Tesz @ THD + Home: http://www.thaishadow.com + Forum: http://www.thaishadow.com/board/index.php + Download: http://maxsite.geniuscyber.com/index.php?name=index + Dork: MAXSITE or intitle:"MAXSITE" +...
cmsmaxsite-sql.txt
CMS MAXSITE Remote SQL Injection Exploit = 1.10 + Author: Tesz @ THD + Home: http://www.thaishadow.com + Forum: http://www.thaishadow.com/board/index.php + Download: http://maxsite.geniuscyber.com/index.php?name=index + Dork: MAXSITE or intitle:"MAXSITE" + Exploit:...