32 matches found
CVE-2008-2496
CVE-2008-2496 : The provided documents indicate multiple cross-site scripting (XSS) vulnerabilities in Quate CMS 0.3.4. The affected component is the admin area, with input vectors via PATH_INFO in four PHP pages: index.php, login.php, credits.php, and upgrade/index.php. The vulnerability type is...
CVE-2008-2496
Multiple cross-site scripting XSS vulnerabilities in Quate CMS 0.3.4 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 index.php, 2 login.php, and 3 credits.php in admin/, and 4 upgrade/index.php...
[DSECRG-08-024] Multiple Security Vulnerabilities (RFI,LFI,XSS) in QuateCMS
Digital Security Research Group DSecRG Advisory DSECRG-08-024 Application: Quate CMS Versions Affected: 0.3.4 Vendor URL: http://www.quate.net/ Bugs: RFI, Multiple LFI, Directory traversal, Multiple XSS Exploits: YES Reported: 18.03.2008 Second report: 25.03.2008 Vendor response: NONE Solution:...
Quate CMS 0.3.4 RD Remote Vulnerabilities
No description provided by source...
Quate CMS 0.3.4 - Multiple Vulnerabilities
Quate CMS 0.3.4 - Multiple Vulnerabilities Digital Security Research Group DSecRG Advisory DSECRG-08-030 Application: Quate CMS Versions Affected: 0.3.4 Vendor URL: http://www.quate.net/ Bugs: RFI, Multiple LFI, Directory traversal, Multiple XSS Exploits: YES Reported: 18.03.2008 Second report:...
Quate CMS 0.3.4 (RFI/LFI/XSS/DT) Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ================================================================ Quate CMS 0.3.4 RFI/LFI/XSS/DT Multiple Remote Vulnerabilities ================================================================ Digital Security Research Group DSecRG Advisor...
Quate CMS 0.3.4 - Multiple Vulnerabilities
Digital Security Research Group DSecRG Advisory DSECRG-08-030 Application: Quate CMS Versions Affected: 0.3.4 Vendor URL: http://www.quate.net/ Bugs: RFI, Multiple LFI, Directory traversal, Multiple XSS Exploits: YES Reported: 18.03.2008 Second report: 25.03.2008 Vendor response: NONE Solution:...
DSECRG-08-024.txt
Digital Security Research Group DSecRG Advisory DSECRG-08-024 Application: Quate CMS Versions Affected: 0.3.4 Vendor URL: http://www.quate.net/ Bugs: RFI, Multiple LFI, Directory traversal, Multiple XSS Exploits: YES Reported: 18.03.2008 Second report: 25.03.2008 Vendor response: NONE Solution:...
Immunity Canvas: GRAPE_INCLUDE
Name| grapeinclude ---|--- CVE| CVE-2008-1963 Exploit Pack| CANVAS Description| Grape Web Statistics Remote File include Notes| CVE Name: CVE-2008-1963 VENDOR: Quate Repeatability: Infinite References: http://www.securityfocus.com/bid/28838 CVE Url: https://vulners.com/cve/CVE-2008-1963 CVSS: 7.5...
CVE-2008-1963
PHP remote file inclusion vulnerability in includes/functions.php in Quate Grape Web Statistics 0.2a allows remote attackers to execute arbitrary PHP code via a URL in the location parameter...
CVE-2008-1963
CVE-2008-1963 affects Quate Grape Web Statistics 0.2a. A PHP remote file inclusion flaw in includes/functions.php can let an attacker supply a URL in the location parameter to execute arbitrary PHP code. The NVD entry reports a base score of 7.5 (HIGH) with network attack vector and no authentica...