Joomla BookLibrary Component SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla BookLibrary component. An attacker can exploit the vulnerability to access or modify database data...

SQL Injection Vulnerability in World Parameters under doyocms source/ajax.php File

DOYO universal station-building system using PHP and MYSQL development, is a free open source CMS station-building, enterprise station-building system , can be widely used for personal, business, government, institutions and many other website construction. doyocms system source/ajax.php file und...

Disc ORGanizer (DORG) - Multiple Vulnerabilities

Disc ORGanizer DORG - Multiple Vulnerabilities Exploit Title: DORG - Disc Organization System SQL Injection And Cross Site Scripting Software Link: http://www.opensourcecms.com/scripts/details.php?scriptid=479 Author: SECUPENT Website:www.secupent.com Email: researchatsecupentdotcom Date: 20-3-20...

Yeager Cross-Site Request Forgery Vulnerability

Yeager is an open source content management system . Yeager suffers from a cross-site request forgery vulnerability that allows remote attackers to construct malicious URIs, trick users into parsing them, and can target user contexts to perform malicious operations...

Orchard Cross-Site Scripting Vulnerability

Orchard is a Microsoft-led open source CMS project from the Outercurve Foundation. A cross-site scripting vulnerability exists in Orchard that allows remote attackers to inject arbitrary web script or HTML...

DeDeCMS < 5.7-sp1 - Remote File Inclusion

========================== Exploit Title: Dedecms variable coverage leads to getshell Date: 26-06-2015 Vendor Homepage: http://www.dedecms.com/ Version: dedecms 5.7-sp1 and all old version CVE : CVE-2015-4553 =========================== CVE-2015-4553Dedecms variable coverage leads to getshell...

An open source CMS to bypass the filtering XSS comfortably+getshell（viagra, the Shaolin Temple official website of the shots-the vulnerability warning-the black bar safety net

Brief description: I haven't at the front Desk too.。。。。 Powered by YIQICMS “Baidu for you to find relevant results about 1 7 2 0 0” Viagra official website shot Detailed description: The latest version 1. 8, The 首先 关注 /comment.php: code area if$action == "save" $msgtitle = $POST"msgtitle"; $msgna...

OneCMS 2.4 - Remote SQL Injection / Upload Vulnerabilities

No description provided by source. WwW.BugReport.ir AmnPardaz Security Research Team Title: OneCMS Vulnerabilities Vendor: http://www.insanevisions.com Bugs: SQL Injection Authentication bypass , Arbitrary file upload! Vulnerable Version: 2.4 prior versions also may be affected Exploitation: Remo...

[wig] WebApp Information Gatherer (Identify CMS)

wig is a Python tool that identifies a websites CMS by searching for fingerprints of static files and extracting version numbers from known files. OS identification is done by using the value of the ‘server’ and ‘X-Powered-By’ in the response header. These values are compared to a database of whi...

Joomla! ‘index.php’ SQL injection vulnerability-vulnerability warning-the black bar safety net

SSV-ID:6 1 4 5 9 Ranking Wiki contributions to vulnerability scanning to cloud storage VPS Mac SSV-AppDir:Joomla vulnerability Published: 2014-02-06 Vulnerability version: Joomla! 3.2.1 Vulnerability description: BUGTRAQ ID: 6 5 4 1 0 Joomla! Is the United States the Open Source Matters team...

Drupal resets 1 Million Passwords after Data Breach

A Drupal data breach was announced by the official Drupal Association, that Passwords for almost one million accounts on the Drupal.org website are being reset after hackers gained unauthorized access to sensitive user data. The security of the open source content management system has been...

Joomla Component redSHOP 1.5 Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ----------------------------------------------------------------------------- Joomla Component redSHOP 1.5 Blind SQL Injection Vulnerability ----------------------------------------------------------------------------- Author....: fame...

Ganesha Digital Library 4.2 SQL Injection

Ganesha Digital Library GDL Vulnerability Author : Arianom [email protected] Homepage : http://indonesiancoder.com o INDEX o I. Software Information II. POC III. About Software IV. Bug Fix V. Shout I. Software Information Vendor : http://kmrg.itb.ac.id/ Download :...

Pligg CMS 1.0.4 SQL Injection

/ ! Pligg CMS story.php?id SQL Injection Vulnerability ! Author : Don Tukulesto [email protected] ! Homepage: http://indonesiancoder.com ! Date : Tue, April 27, 2010 ! Tune in : http://antisecradio.fm choose your weapon / Software Information Vendor : http://www.pligg.com/ Download:...

Chilly CMS Cross Site Scripting

======================================================================= chillyCMS Persistent XSS Vulnerability ======================================================================= Vulnerability found in- Admin module email [email protected] company aksitservices Credit by Pratul Agrawal...

Section Rezin(Kesion)CMS V5. 5 filename parsing vulnerability-vulnerability warning-the black bar safety net

Section flood cms,eshop system to build the station brand. Professional open source cms projects customized services and card system, online output, online printing, advertising production, online photo ordering system provider. In the file upload process on a problem. Upload the file that is in...

OneCMS 2.4 - SQL Injection Upload

OneCMS 2.4 - SQL Injection Upload WwW.BugReport.ir AmnPardaz Security Research Team Title: OneCMS Vulnerabilities Vendor: http://www.insanevisions.com Bugs: SQL Injection Authentication bypass , Arbitrary file upload! Vulnerable Version: 2.4 prior versions also may be affected Exploitation: Remot...

OneCMS 2.4 Remote SQL Injection / Upload Vulnerabilities

Exploit for unknown platform in category web applications ======================================================== OneCMS 2.4 Remote SQL Injection / Upload Vulnerabilities ======================================================== WwW.BugReport.ir AmnPardaz Security Research Team Title: OneCMS...

onecms-sql.txt

WwW.BugReport.ir AmnPardaz Security Research Team Title: OneCMS Vulnerabilities Vendor: http://www.insanevisions.com Bugs: SQL Injection Authentication bypass , Arbitrary file upload! Vulnerable Version: 2.4 prior versions also may be affected Exploitation: Remote with browser Fix Available: No! ...

OneCMS 2.4 - SQL Injection / Upload

WwW.BugReport.ir AmnPardaz Security Research Team Title: OneCMS Vulnerabilities Vendor: http://www.insanevisions.com Bugs: SQL Injection Authentication bypass , Arbitrary file upload! Vulnerable Version: 2.4 prior versions also may be affected Exploitation: Remote with browser Fix Available: No! ...