1752 matches found
Sql injection
Multiple SQL injection vulnerabilities in Phoenix View CMS Pre Alpha2 and earlier allow remote attackers to execute arbitrary SQL commands via the del parameter to 1 gbuch.admin.php, 2 links.admin.php, 3 menue.admin.php, 4 news.admin.php, and 5 todo.admin.php in admin/module/...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Phoenix View CMS Pre Alpha2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 ltarget parameter to a admin/adminframe.php and the 2 conf parameter to b gbuch.admin.php, c links.admin.php, d menue.admin.php, e...
CVE-2008-2535
Multiple SQL injection vulnerabilities in Phoenix View CMS Pre Alpha2 and earlier allow remote attackers to execute arbitrary SQL commands via the del parameter to 1 gbuch.admin.php, 2 links.admin.php, 3 menue.admin.php, 4 news.admin.php, and 5 todo.admin.php in admin/module/...
CVE-2008-2534
Directory traversal vulnerability in admin/adminframe.php in Phoenix View CMS Pre Alpha2 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the ltarget parameter...
CVE-2008-2533
Multiple cross-site scripting (XSS) vulnerabilities exist in Phoenix View CMS Pre Alpha2 and earlier. The issue stems from unsanitized user input passed via the ltarget parameter to admin/admin_frame.php and via the conf parameter to the following pages in admin/module/: gbuch.admin.php, links.ad...
CVE-2008-2534
CVE-2008-2534 describes a directory traversal vulnerability in the Phoenix View CMS (Pre Alpha2 and earlier). The flaw resides in the admin/admin_frame.php component, where an attacker can manipulate the ltarget parameter (via .. path traversal) to include and execute arbitrary local files. This ...
CVE-2008-2535
Phoenix View CMS (Pre Alpha2 and earlier) contains multiple SQL injection vulnerabilities in the admin module. The issue arises via the del parameter in five files: gbuch.admin.php, links.admin.php, menue.admin.php, news.admin.php, and todo.admin.php, allowing remote attackers to execute arbitrar...
CVE-2008-2533
Multiple cross-site scripting XSS vulnerabilities in Phoenix View CMS Pre Alpha2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 ltarget parameter to a admin/adminframe.php and the 2 conf parameter to b gbuch.admin.php, c links.admin.php, d menue.admin.php, e...
Phoenix View CMS <= Pre Alpha2 (SQL/LFI/XSS) Multiple Vulnerabilities
No description provided by source. Phoenix View CMS = Pre Alpha2 Multiple Vulnerabilities LFISQLIXSS Found by : tw8 Date : 8.05.2008 Website && Forum : http://rstzone.org && http://rstzone.org/forum/ Bug type : LFI, SQLI & XSS Affected software description: Application : Phoenix View CMS Version ...
Phoenix View CMS Pre Alpha2 - SQL Injection / Local File Inclusion / Cross-Site Scripting
Phoenix View CMS = Pre Alpha2 Multiple Vulnerabilities LFISQLIXSS Found by : tw8 Date : 8.05.2008 Website && Forum : http://rstzone.org && http://rstzone.org/forum/ Bug type : LFI, SQLI & XSS Affected software description: Application : Phoenix View CMS Version : = Pre Alpha2 Vendor :...
Phoenix View CMS <= Pre Alpha2 (SQL/LFI/XSS) Multiple Vulnerabilities
Exploit for unknown platform in category web applications ===================================================================== Phoenix View CMS = Pre Alpha2 SQL/LFI/XSS Multiple Vulnerabilities ===================================================================== Phoenix View CMS = Pre Alpha2...
Phoenix View CMS Pre Alpha2 - SQL Injection Local File Inclusion Cross-Site Scripting
Phoenix View CMS Pre Alpha2 - SQL Injection Local File Inclusion Cross-Site Scripting Phoenix View CMS = Pre Alpha2 Multiple Vulnerabilities LFISQLIXSS Found by : tw8 Date : 8.05.2008 Website && Forum : http://rstzone.org && http://rstzone.org/forum/ Bug type : LFI, SQLI & XSS Affected software...
Microsoft Office Web Components Spreadsheet ActiveX control URL parsing stack buffer overflow
Overview The Microsoft Office Web Components ActiveX controls contain a stack buffer overflow in the processing of URLs, which allows a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Microsoft Office Web Components are ActiveX controls that provide...
Directory traversal
Directory traversal vulnerability in administrator/download.php in IDMOS aka Phoenix 1.0 allows remote attackers to read arbitrary files via a .. dot dot in the fileName parameter...
CVE-2008-0431
CVE-2008-0431 affects IDMOS (aka Phoenix) 1.0, where the administrator/download.php handler is vulnerable to directory traversal via the fileName parameter (..). This allows remote attackers to read arbitrary files on the affected system. The issue is triggered by an invalid path input and result...
CVE-2007-5889
CVE-2007-5889 describes PHP remote file inclusion vulnerabilities in IDMOS 1.0 Alpha (aka Phoenix). The affected components are the admin-facing scripts (admin.php, menu_add.php, menu_operation.php) under the administrator/ path, where a URL passed to site_absolute_path can cause arbitrary PHP co...
CVE-2007-5293
Multiple cross-site scripting XSS vulnerabilities in IDMOS 1.0-beta aka Phoenix allow remote attackers to inject arbitrary web script or HTML via the 1 errmsg parameter to error.php and the 2 content parameter to templates/simple/ia.php...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in IDMOS 1.0-beta aka Phoenix allow remote attackers to inject arbitrary web script or HTML via the 1 errmsg parameter to error.php and the 2 content parameter to templates/simple/ia.php...
Remote file inclusion
PHP remote file inclusion vulnerability in core/aural.php in IDMOS 1.0-beta aka Phoenix allows remote attackers to execute arbitrary PHP code via a URL in the siteabsolutepath parameter...