111 matches found
CVE-2012-5918
CVE-2012-5918 affects razorCMS 1.2, where remote authenticated users can access administrator directories and files by creating and deleting a directory, indicating a directory traversal / improper path handling vulnerability. The connected records corroborate the same description; no explicit mi...
CVE-2012-5918
razorCMS 1.2 allows remote authenticated users to access administrator directories and files by creating and deleting a directory...
CVE-2012-1900
Cross-site request forgery CSRF vulnerability in admin/index.php in RazorCMS 1.2.1 and earlier allows remote attackers to hijack the authentication of administrators for requests that delete arbitrary web pages via a showcats action...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in admin/index.php in RazorCMS 1.2.1 and earlier allows remote attackers to hijack the authentication of administrators for requests that delete arbitrary web pages via a showcats action...
CVE-2012-1900
CVE-2012-1900 affects RazorCMS 1.2.1 and earlier. The vulnerability is a Cross-Site Request Forgery in admin/index.php that lets remote attackers hijack an administrator’s session to perform showcats actions that delete arbitrary web pages. Root cause: CSRF in the admin interface enabling unautho...
CVE-2012-1900
Cross-site request forgery CSRF vulnerability in admin/index.php in RazorCMS 1.2.1 and earlier allows remote attackers to hijack the authentication of administrators for requests that delete arbitrary web pages via a showcats action...
RazorCMS <= 1.2.1 STABLE CSRF (Delete Web Pages)
Exploit for php platform in category web applications +------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : RazorCMS body onload="javascrip...
RazorCMS 1.2.1 STABLE Shell Upload
Exploit Title: RazorCMS /datastore/webshell.php...
RazorCMS 1.2.1 STABLE - Arbitrary File Upload
RazorCMS 1.2.1 STABLE - Arbitrary File Upload Exploit Title: RazorCMS /datastore/webshell.php...
RazorCMS <= 1.2.1 STABLE File Upload Vulnerability
Exploit for php platform in category web applications Exploit Title: RazorCMS /datastore/webshell.php 0day.today 2018-02-17...
RazorCMS 1.2.1 STABLE Cross Site Request Forgery
+------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : RazorCMS CSR...
RazorCMS 1.2.1 Stable - Cross-Site Request Forgery (Delete Web Pages)
+------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : RazorCMS CSRF Exploit to add ADMIN account/H2...
RazorCMS 1.2.1 STABLE - Arbitrary File Upload
Exploit Title: RazorCMS /datastore/webshell.php...
RazorCMS 1.2.1 Stable - Cross-Site Request Forgery (Delete Web Pages)
RazorCMS 1.2.1 Stable - Cross-Site Request Forgery Delete Web Pages +------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : RazorCMS body onload="ja...
razorCMS 1.2 Path Traversal
Exploit Title: razorCMS 1.2 Path Traversal Google Dork: "Powered by razorCMS" Date: January 10, 2012 Author: chap0 Software Link: http://www.razorcms.co.uk/archive/core/ Version: 1.2 Tested on: Ubuntu Patch: Upgrade to latest release 1.2.1 Greetz To: RazorCMS is vulnerable to Path Traversal, when...
razorCMS 1.2 path traversal-vulnerability warning-the black bar safety net
Title: razorCMS 1.2 Path Traversal Author: chap0 Download address: http://www.razorcms.co.uk/archive/core/ Affected version: 1.2 Test platform: Ubuntu Patches: Upgrade to latest release 1.2.1 RazorCMS is vulnerable to Path Traversal, when logged in with a least privileged user account the user ca...
razorCMS 1.2 Path Traversal Vulnerability
Exploit for php platform in category web applications Exploit Title: razorCMS 1.2 Path Traversal Google Dork: "Powered by razorCMS" Date: January 10, 2012 Author: chap0 Software Link: http://www.razorcms.co.uk/archive/core/ Version: 1.2 Tested on: Ubuntu Patch: Upgrade to latest release 1.2.1...
RazorCMS 1.2 - Directory Traversal
RazorCMS 1.2 - Directory Traversal Exploit Title: razorCMS 1.2 Path Traversal Google Dork: "Powered by razorCMS" Date: January 10, 2012 Author: chap0 Software Link: http://www.razorcms.co.uk/archive/core/ Version: 1.2 Tested on: Ubuntu Patch: Upgrade to latest release 1.2.1 Greetz To: RazorCMS is...
RazorCMS 1.2 - Directory Traversal
Exploit Title: razorCMS 1.2 Path Traversal Google Dork: "Powered by razorCMS" Date: January 10, 2012 Author: chap0 Software Link: http://www.razorcms.co.uk/archive/core/ Version: 1.2 Tested on: Ubuntu Patch: Upgrade to latest release 1.2.1 Greetz To: RazorCMS is vulnerable to Path Traversal, when...
Cross site scripting
Cross-site scripting XSS vulnerability in admin/core/adminfunc.php in razorCMS 1.0 stable allows remote attackers to inject arbitrary web script or HTML via the content parameter in an edit action to admin/index.php...