CVE-2008-6673

CVE-2008-6673 affects QuickerSite 1.8.5. The issue is an improper access restriction on admin functionality, allowing remote attackers to perform admin actions via unauthenticated requests: (1) change the admin password through cSaveAdminPW, (2) modify site information such as the contact address...

CVE-2008-6677

In CVE-2008-6677, Unrestricted file upload in QuickerSite 1.8.5 (fckeditor251/editor/filemanager/connectors/asp/upload.asp) allows remote attackers to execute arbitrary code by uploading a file with an executable extension and then accessing it via a direct request. This is supported by multiple ...

CVE-2008-6678

SQL injection vulnerability in asp/includes/contact.asp in QuickerSite 1.8.5 allows remote attackers to execute arbitrary SQL commands via the sNickName parameter in a profile action to default.asp...

CVE-2008-6675

CVE-2008-6675 affects QuickerSite 1.8.5 with multiple reflected XSS vectors. The vulnerabilities arise in (1) showThumb.aspx via the close parameter, (2) process_send.asp via SB_redirect and SB_feedback as reachable through default.asp, (3) picker.asp via paramCode and cColor, and (4) rss.asp via...

CVE-2008-6674

CVE-2008-6674 concerns mailPage.asp in QuickerSite 1.8.5 . The vulnerability lets remote attackers flood email accounts by issuing a large number of requests with a modified sEmail parameter. The public records describe this as a parameter tampering/abuse issue leading to message floods, with the...

CVE-2008-6676

QuickerSite 1.8.5 allows remote attackers to obtain sensitive information via a request to showThumb.aspx without any parameters, which reveals the installation path in an error message...

CVE-2008-6675

Multiple cross-site scripting XSS vulnerabilities in QuickerSite 1.8.5 allow remote attackers to inject arbitrary web script or HTML via 1 the close parameter to showThumb.aspx; 2 SBredirect and 3 SBfeedback parameters in processsend.asp, as reachable through default.asp; 4 paramCode and 5 cColor...

CVE-2008-6673

asp/bslogin.asp in QuickerSite 1.8.5 does not properly restrict access to administrative functionality, which allows remote attackers to 1 change the admin password via the cSaveAdminPW action; 2 modify site information, such as the contact address, via the saveAdmin; and 3 modify the site design...

CVE-2008-6676

CVE-2008-6676 affects QuickerSite 1.8.5. Affected component: showThumb.aspx (no parameters) allows remote attackers to obtain sensitive information by triggering an error message that reveals the installation path. Root cause is error disclosure in showThumb.aspx, leading to partial confidentiali...

QuickerSite Easy CMS Database Disclosure

-------------------------------AlpHaNiX---------------------------------- Found By : AlpHaNiX website : www.nullarea.net contact : AlpHaATHACKERDOTBZ script : QuickerSite Easy CMS download : null Demo : http://cupofcoffee.quickersite.com/ Exploits : --=DATABASE DISCLOSURE=--...

QuickerSite Easy CMS (QuickerSite.mdb) Database Disclosure Vulnerability

No description provided by source. -------------------------------AlpHaNiX---------------------------------- Found By : AlpHaNiX website : www.nullarea.net contact : AlpHaATHACKERDOTBZ script : QuickerSite Easy CMS download : null Demo : http://cupofcoffee.quickersite.com/ Exploits : --=DATABASE...

QuickerSite Easy CMS (QuickerSite.mdb) Database Disclosure Vulnerability

Exploit for unknown platform in category web applications ======================================================================== QuickerSite Easy CMS QuickerSite.mdb Database Disclosure Vulnerability ========================================================================...

QuickerSite Easy CMS - Database Disclosure

QuickerSite Easy CMS - Database Disclosure -------------------------------AlpHaNiX---------------------------------- Found By : AlpHaNiX website : www.nullarea.net contact : AlpHaATHACKERDOTBZ script : QuickerSite Easy CMS download : null Demo : http://cupofcoffee.quickersite.com/ Exploits :...

QuickerSite Easy CMS - Database Disclosure

-------------------------------AlpHaNiX---------------------------------- Found By : AlpHaNiX website : www.nullarea.net contact : AlpHaATHACKERDOTBZ script : QuickerSite Easy CMS download : null Demo : http://cupofcoffee.quickersite.com/ Exploits : --=DATABASE DISCLOSURE=--...

QuickerSite Multiple Vulnerabilities

www.BugReport.ir AmnPardaz Security Research Team Title: QuickerSite Multiple Vulnerabilities Vendor: www.quickersite.com Vulnerable Version: 1.8.5 Exploit: Available Impact: High Fix: N/A Original Advisory: http://bugreport.ir/index.php?/39 1. Description: QuickerSite is a Content Management...

QuickerSite 1.8.5 Multiple Remote Vulnerabilities

No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: QuickerSite Multiple Vulnerabilities Vendor: www.quickersite.com Vulnerable Version: 1.8.5 Exploit: Available Impact: High Fix: N/A Original Advisory: http://bugreport.ir/index.php?/39 1. Description:...

quicksite-multi.txt

www.BugReport.ir AmnPardaz Security Research Team Title: QuickerSite Multiple Vulnerabilities Vendor: www.quickersite.com Vulnerable Version: 1.8.5 Exploit: Available Impact: High Fix: N/A Original Advisory: http://bugreport.ir/index.php?/39 1. Description: QuickerSite is a Content Management...

QuickerSite 1.8.5 - Multiple Vulnerabilities

www.BugReport.ir AmnPardaz Security Research Team Title: QuickerSite Multiple Vulnerabilities Vendor: www.quickersite.com Vulnerable Version: 1.8.5 Exploit: Available Impact: High Fix: N/A Original Advisory: http://bugreport.ir/index.php?/39 1. Description: QuickerSite is a Content Management...

QuickerSite 1.8.5 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ================================================= QuickerSite 1.8.5 Multiple Remote Vulnerabilities ================================================= AmnPardaz Security Research Team Title: QuickerSite Multiple Vulnerabilities Vendor:...

QuickerSite 1.8.5 - Multiple Vulnerabilities

QuickerSite 1.8.5 - Multiple Vulnerabilities www.BugReport.ir AmnPardaz Security Research Team Title: QuickerSite Multiple Vulnerabilities Vendor: www.quickersite.com Vulnerable Version: 1.8.5 Exploit: Available Impact: High Fix: N/A Original Advisory: http://bugreport.ir/index.php?/39 1...