33 matches found
EUVD-2007-3569
Malware in sbrugna...
EUVD-2007-3571
Malware in sbrugna...
EUVD-2007-3570
Malware in sbrugna...
EUVD-2022-52149
Malicious code in bioql PyPI...
CVE-2022-4892
A vulnerability was found in MyCMS. It has been classified as problematic. This affects the function buildview of the file lib/gener/view.php of the component Visitors Module. The manipulation of the argument original/converted leads to cross site scripting. It is possible to initiate the attack...
MyCMS Cross-Site Scripting Vulnerability
MyCMS is a full-featured content management system application. a cross-site scripting vulnerability exists in MyCMS, which stems from the fact that manipulation of the parameter original/converted can lead to cross-site scripting that can remotely launch an attack. No detailed vulnerability...
CVE-2022-4892
A vulnerability was found in MyCMS. It has been classified as problematic. This affects the function buildview of the file lib/gener/view.php of the component Visitors Module. The manipulation of the argument original/converted leads to cross site scripting. It is possible to initiate the attack...
CVE-2022-4892
A vulnerability was found in MyCMS. It has been classified as problematic. This affects the function buildview of the file lib/gener/view.php of the component Visitors Module. The manipulation of the argument original/converted leads to cross site scripting. It is possible to initiate the attack...
Cross site scripting
A vulnerability was found in MyCMS. It has been classified as problematic. This affects the function buildview of the file lib/gener/view.php of the component Visitors Module. The manipulation of the argument original/converted leads to cross site scripting. It is possible to initiate the attack...
CVE-2022-4892
The CVE-2022-4892 entry concerns MyCMS. Affected component: Visitors Module, build_view function in lib/gener/view.php. Issue: manipulation of the original/converted argument leads to cross-site scripting, enabling remote initiation of an attack. Patch: d64fcba4882a50e21cdbec3eb4a080cb694d26ee. A...
CVE-2022-4892 MyCMS Visitors Module view.php build_view cross site scripting
A vulnerability was found in MyCMS. It has been classified as problematic. This affects the function buildview of the file lib/gener/view.php of the component Visitors Module. The manipulation of the argument original/converted leads to cross site scripting. It is possible to initiate the attack...
PT-2023-15903 · Mycms · Mycms
Name of the Vulnerable Software and Affected Versions: MyCMS affected versions not specified Description: A problematic issue was found in MyCMS, affecting the build view function of the file lib/gener/view.php in the Visitors Module. The manipulation of the original/converted argument leads to...
MyCMS 跨站脚本漏洞
MyCMS is a full-featured content management system application. a cross-site scripting vulnerability exists in MyCMS, which stems from the fact that manipulation of the parameter original/converted can lead to cross-site scripting that can remotely launch an attack. No detailed vulnerability...
MyCMS <= 0.9.8 - Remote Command Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo MyCMS = 0.9.8 Remote Command Execution Exploit by BlackHawk [email protected] http://itablackhawk.altervista.org Thanks to rgod for the php code and Marty for the Love ; if $argc3 echo Usage: php .$argv0. Host Path C...
MyBlog (MyCMS) Remote PHP Code execution / PHP Code injection ..
Hello,, MyBlog MyCMS Remote PHP Code execution / PHP Code injection .. http://sourceforge.net/projects/myblog/ Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Exploit : - !/usr/bin/php -q -d shortopentag=on ? / / MyCMS Comman...
mycms098-exec.txt
!/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love "; if $argc 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n";...
CVE-2007-3587
MyCMS 0.9.8 and earlier allows remote attackers to gain privileges via the admin cookie parameter, as demonstrated by a post to admin/settings.php that injects PHP code into settings.inc, which can then be executed via a direct request to index.php...
Code injection
Multiple direct static code injection vulnerabilities in MyCMS 0.9.8 and earlier allow remote attackers to inject arbitrary PHP code into 1 a score.txt file via the score parameter, or 2 a setby.txt file via a login cookie, which is then included by games.php. NOTE: programs that use games.php...
CVE-2007-3586
Multiple direct static code injection vulnerabilities in MyCMS 0.9.8 and earlier allow remote attackers to inject arbitrary PHP code into 1 a score.txt file via the score parameter, or 2 a setby.txt file via a login cookie, which is then included by games.php. NOTE: programs that use games.php...
CVE-2007-3585
PHP remote file inclusion vulnerability in games.php in MyCMS 0.9.8 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the id parameter...