EUVD-2009-2576

Malware in sbrugna...

CVE-2008-7123

CVE-2008-7123 affects zKup CMS 2.0–2.3. The vulnerability is a static code injection in admin/configuration/modifier.php that allows remote attackers to inject arbitrary PHP code into fichiers/config.php via a null byte (%00) in the login parameter during an ajout action, bypassing the regular ex...

CVE-2008-7124: Improper Authentication

zKup CMS 2.0 through 2.3 does not require administrative authentication for admin/configuration/modifier.php, which allows remote attackers to gain administrator privileges via a direct request, as demonstrated by adding a new administrator...

CVE-2008-7123: Improper Control of Generation of Code

Static code injection vulnerability in admin/configuration/modifier.php in zKup CMS 2.0 through 2.3 allows remote attackers to inject arbitrary PHP code into fichiers/config.php via a null byte %00 in the login parameter in an ajout action, which bypasses the regular expression check...

CVE-2009-2581

The CVE-2009-2581 entry describes a Cross‑Site Scripting (XSS) vulnerability in EditeurScripts EsNews 1.2, specifically in modifier.php where the msg parameter can be exploited to inject arbitrary web script or HTML. The affected component is the modifier.php script within EsNews 1.2; the underly...

CVE-2009-2581: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in modifier.php in EditeurScripts EsNews 1.2 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...