CVE-2011-3789

phpwcms 1.4.7 r412 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by template/incscript/frontendrender/disabled/majonavi.php and certain other files...

CVE-2011-3789

The CVE-2011-3789 entry concerns phpwcms 1.4.7 r412, where remote attackers can disclose sensitive information by directly requesting certain PHP files (e.g., template/inc_script/frontend_render/disabled/majonavi.php), causing error messages to reveal the installation path. The connected sources ...

phpwcms v1.4.7 XSRF Vulnerability (Add Admin User)

Exploit for php platform in category web applications + Exploit Title: phpwcms v1.4.7 XSRF VulnerabilityAdd Admin User + Author : ^Xecuti0n3r + E-mail : xecuti0n3ryahoo.com + Category : Web Apps XSRF + Dork : intext:"phpwcms Copyright" + Download Link :...

phpwcms 1.4.7 Cross Site Request Forgery

Exploit Title: phpwcms v1.4.7 XSRF VulnerabilityAdd Admin User + Author : ^Xecuti0n3r + E-mail : xecuti0n3ryahoo.com + Category : Web Apps XSRF + Dork : intext:"phpwcms Copyright" + Download Link : http://phpwcms.googlecode.com/files/phpwcmsr412.zip + PHPCMS Official website :...

phpwcms Detection

The remote web server hosts phpwcms, a web-based content management system written in PHP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid48202; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01"; scriptnameenglish:"phpwcms...

XSRF (CSRF) in phpwcms

Vulnerability ID: HTB22476 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinphpwcms.html Product: phpwcms Vendor: Oliver Georgi http://www.phpwcms.de/ Vulnerable Version: 1.4.5 and Probably Prior Versions Vendor Notification: 01 July 2010 Vulnerability Type: CSRF Cross-Site Request Forgery...

phpwcms 1.4.5 Cross Site Request Forgery / Cross Site Scripting

================================== Vulnerability ID: HTB22475 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinphpwcms.html Product: phpwcms Vendor: Oliver Georgi http://www.phpwcms.de/ Vulnerable Version: 1.4.5 and Probably Prior Versions Vendor Notification: 01 July 2010 Vulnerabili...

XSS vulnerability in phpwcms

Vulnerability ID: HTB22475 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinphpwcms.html Product: phpwcms Vendor: Oliver Georgi http://www.phpwcms.de/ Vulnerable Version: 1.4.5 and Probably Prior Versions Vendor Notification: 01 July 2010 Vulnerability Type: Stored XSS Cross Site...

PHPWCMS 1.4.5 - 'PHPwcms.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41720/info phpwcms is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of th...

PHPWCMS 1.4.5 - PHPwcms.php Cross-Site Scripting

PHPWCMS 1.4.5 - PHPwcms.php Cross-Site Scripting source: https://www.securityfocus.com/bid/41720/info phpwcms is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

Multiple Vulnerabilities in phpwcms

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in phpwcms which could be exploited to perform cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerability in phpwcms The vulnerability exists due to input sanitation error ...

PHPWCMS Cross-Site Request Forgery Vulnerability

No description provided by source. ?php / Exploit Title: PHPWCMS Cross-Site Request Forgery Vulnerability Date: 06/16/2010 Author: Jeremiah Talamantes Software Link: http://phpwcms.googlecode.com/files/phpwcmsr398.zip Version: 1.4.5 r398 Tested on: WinXP SP2 EN on WAMP 2.0 CVE: N/A Jeremiah...

PHPWCMS 1.4.5 r398 Cross Site Request Forgery

PHPWCMS 1.4.5 r389 Cross Site Request Forgery function myfunc var frm = document.getElementById"csrf"; frm.submit; window.onload = myfunc; input type="hidden"...

CSRF in PHPWCMS 1.4.5

?php / Exploit Title: PHPWCMS Cross-Site Request Forgery Vulnerability Date: 06/16/2010 Author: Jeremiah Talamantes Software Link: http://phpwcms.googlecode.com/files/phpwcmsr398.zip Version: 1.4.5 r398 Tested on: WinXP SP2 EN on WAMP 2.0 CVE: N/A Jeremiah Talamantes RedTeam Security RedTeam Labs...

PHPWCMS 1.4.5 r398 - Cross-Site Request Forgery

PHPWCMS 1.4.5 r398 - Cross-Site Request Forgery PHPWCMS 1.4.5 r389 Cross Site Request Forgery function myfunc var frm = document.getElementById"csrf"; frm.submit; window.onload = myfunc; input type="hidden" name="dirpublic" val...

PHPWCMS 1.4.5 r389 Cross Site Request Forgery Vulnerability

Exploit for php platform in category web applications =========================================================== PHPWCMS 1.4.5 r389 Cross Site Request Forgery Vulnerability =========================================================== PHPWCMS 1.4.5 r389 Cross Site Request Forgery function myfunc v...

PHPWCMS 1.4.5 r398 - Cross-Site Request Forgery

PHPWCMS 1.4.5 r389 Cross Site Request Forgery function myfunc var frm = document.getElementById"csrf"; frm.submit; window.onload = myfunc; input type="hidden" name="dirpid" value...

How hackers exploit file include vulnerabilities website intrusion-vulnerability warning-the black bar safety net

One, see vulnerability announcement Recent want to learn what the files contain vulnerability, inadvertently saw on the file that contains the vulnerability announcement. Roughly meaning is such, PhpwCMS 1.2.6 system The following files exist in the file containing the vulnerability:...

Immunity Canvas: PHPWCMS_INCLUDE

Name| phpwcmsinclude ---|--- CVE| CVE-2007-5185 Exploit Pack| CANVAS Description| phpwcms remote file include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: phpwcms CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5185 CVE Name: CVE-2007-5185...

CVE-2007-5185

Multiple PHP remote file inclusion vulnerabilities in phpWCMS XT 0.0.7 BETA and earlier allow remote attackers to execute arbitrary PHP code via a URL in the HTMLMENUDirPath parameter to 1 configHTMLMENU.php and 2 configPHPLM.php in phpwcmstemplate/incscript/frontendrender/navigation/...