EUVD-2008-4169

Malware in sbrugna...

EUVD-2008-4168

Malware in sbrugna...

CVE-2008-4186

SQL injection vulnerability in index.php in webCMS Portal Edition allows remote attackers to execute arbitrary SQL commands via the iddoc parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-4185

SQL injection vulnerability in index.php in webCMS Portal Edition allows remote attackers to execute arbitrary SQL commands via the id parameter in a documentos action, a different vector than CVE-2008-3213...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in webCMS Portal Edition allows remote attackers to inject arbitrary web script or HTML via the patron parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-4186

The CVE-2008-4186 entry refers to a vulnerability in the webCMS Portal Edition where the issue is caused by an SQL injection in the file index.php via the parameter id_doc . The vulnerability allows remote attackers to execute arbitrary SQL commands. The root cause and affected component are docu...

CVE-2008-4184

Cross-site scripting XSS vulnerability in index.php in webCMS Portal Edition allows remote attackers to inject arbitrary web script or HTML via the patron parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-4184

The CVE affects webCMS Portal Edition, via an XSS in index.php that allows remote injection of arbitrary script/HTML through the patron parameter. Root cause is improper handling of input in index.php enabling reflected/stored XSS as described in CVE-2008-4184 and corroborated by NVD references. ...

CVE-2008-4185

SQL injection vulnerability in index.php in webCMS Portal Edition allows remote attackers to execute arbitrary SQL commands via the id parameter in a documentos action, a different vector than CVE-2008-3213...

CVE-2008-4186

SQL injection vulnerability in index.php in webCMS Portal Edition allows remote attackers to execute arbitrary SQL commands via the iddoc parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

WebCMS Portal Edition (index.php id) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================ WebCMS Portal Edition index.php id Blind SQL Injection Exploit ================================================================ !/usr/bin/perl -W webCMS Portal Edition...

CVE-2008-3213

SQL injection vulnerability in secciones/tablon/tablon.php in WebCMS Portal Edition allows remote attackers to execute arbitrary SQL commands via the id parameter to portal/index.php in a tablon action. NOTE: some of these details are obtained from third party information...

CVE-2008-3213

SQL injection vulnerability in secciones/tablon/tablon.php in WebCMS Portal Edition allows remote attackers to execute arbitrary SQL commands via the id parameter to portal/index.php in a tablon action. NOTE: some of these details are obtained from third party information...

CVE-2008-3213

The provided connected documents confirm a SQL injection vulnerability in WebCMS Portal Edition specifically in secciones/tablon/tablon.php, exploitable via the id parameter passed to portal/index.php in a tablon action. The root cause is unsanitized input leading to arbitrary SQL execution. Repo...