123 matches found
Unauthorized Access Vulnerability in Free Version of Kile Self-Media News System
Kile Self-Media News Management System is a news management system based on TP5.1 development. An unauthorized access vulnerability exists in the free version of Kile Self-Media News System. An attacker can exploit the vulnerability to perform unauthorized operations, such as randomly deleting or...
CVE-2011-3642
Cross-site scripting XSS vulnerability in Flowplayer Flash 3.2.7 through 3.2.16, as used in the News system news extension for TYPO3 and Mahara, allows remote attackers to inject arbitrary web script or HTML via the plugin configuration directive in a reference to an external domain plugin...
Cross site scripting
Cross-site scripting XSS vulnerability in Flowplayer Flash 3.2.7 through 3.2.16, as used in the News system news extension for TYPO3 and Mahara, allows remote attackers to inject arbitrary web script or HTML via the plugin configuration directive in a reference to an external domain plugin...
CVE-2011-3642
Summary : CVE-2011-3642 is an XSS flaw in Flowplayer Flash (versions 3.2.7–3.2.16) used by the TYPO3 News system extension (and Mahara). An attacker can inject arbitrary script/HTML via the plugin configuration directive that references an external domain plugin, potentially compromising site use...
CVE-2011-3642
Cross-site scripting XSS vulnerability in Flowplayer Flash 3.2.7 through 3.2.16, as used in the News system news extension for TYPO3 and Mahara, allows remote attackers to inject arbitrary web script or HTML via the plugin configuration directive in a reference to an external domain plugin...
Gxlcms News System Ne***.php has SQL Injection Vulnerability
Gxlcms News System is a news cms content management system developed in php+mysql. Gxlcms News System Ne.php suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...
Gxlcms News System My***.php file has SQL injection vulnerability
Gxlcms News System is a news cms content management system developed in php+mysql. Gxlcms News System My.php file has a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...
Code Execution Vulnerability in Gxlcms News System
Gxlcms News System is a news cms content management system developed in php+mysql. Gxlcms news system has a code execution vulnerability that can be exploited by an attacker to execute remote code...
SQL Injection Vulnerability in Gxlcms News System AdsAction.class.php
Gxlcms News System is a news cms content management system developed in php+mysql. A SQL injection vulnerability exists in Gxlcms News System AdsAction.class.php. An attacker can exploit the vulnerability to obtain sensitive database information...
Code Execution Vulnerability in Gxlcms News System DataAction.class.php
Gxlcms News System is a news cms content management system developed in php+mysql. A code execution vulnerability exists in DataAction.class.php of Gxlcms News System. An attacker can exploit the vulnerability to obtain a webshell...
TYPO3 News system扩展跨站脚本漏洞
No description provided by source...
Cross-Site Scripting in extension "News system" (news)
It has been discovered that the extension "News system" news is susceptible to Cross-Site Scripting. Release Date: September 30, 2015 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 3.2.1 and below Vulnerability Typ...
VS News System show_news_inc.php newsordner Parameter PHP Code Execution - Ver2 (CVE-2007-1017)
A code execution vulnerability has been reported in Virtualsystem Vs-news-system. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
qibocms 多个系统同一原因的sql注入
简要描述： 因为qibocms 拥有很多系统。 看了看昨天发的那个洞 今天再下载了几个qibo其他的系统 发现有一部分系统存在该洞。 鉴于之前qibocms打补丁的时候总是打了几个系统 而遗漏了其他几个系统。 就把存在这洞的系统全部一个一个的写出来。 详细说明： 统一来看看全局文件 $POST=AddS$POST; $GET=AddS$GET; $COOKIE=AddS$COOKIE; function AddS$array foreach$array as $key=$value if!isarray$value $value=strreplace"&x","& x",$value;...
Plague News System 0.7 Delete.PHP Access Restriction Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14139/info Plague News System is prone to an access restriction bypass vulnerability. The issue exists due to a lack of sanity checks performed by 'delete.php' on deletion requests passed to the script. A remote attacker...
Plague News System 0.7 CID Parameter Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14137/info Plague News System is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'index.php' script. An attacker may leverag...
VS-News-System <= 1.2.1 (newsordner) Remote File Include Exploit
No description provided by source. html head meta http-equiv=Content-Type content=text/html; charset=windows-1254 titleVS-News-System = V1.2.1 newsordner Remote File Include Exploit/title script language=JavaScript...
Plague News System 0.7 CID Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14136/info Plague News System is prone to an SQL injection vulnerability. As a result, the attacker may modify the structure and logic of an SQL query that is made by the application. Other attacks may be possible dependi...
qibocms 新闻系统 Getshell (需结合解析漏洞)
简要描述： IIS || Apache。 详细说明： http://bbs.qibosoft.com/down2.php?v=news1.0down 下载地址。 在news/member/post.php中 requireonceMpath."inc/check.postarticle.php"; if$job=='postnew' if$step=='post' postnew; //生成静态 makearticlehtml"$Murl/member/post.php?job=endHTML&aid=$aid"; $mid && $mid继续发表新主题 续发本主题 返回主题列表 查看主...
