CVE-2005-3728

CVE-2005-3728 concerns Idetix Software Systems Revize CMS. The vulnerability arises because Revize CMS stores conf/revize.xml under the web document root with insufficient access control, enabling remote attackers to obtain sensitive configuration information. The NVD metrics indicate a MEDIUM ba...

CVE-2005-3729

Idetix Software Systems Revize CMS allows remote attackers to obtain sensitive information via direct requests to files in the revize/debug directory, such as 1 apptables.html and 2 main.html...

CVE-2005-3727

SQL injection vulnerability in debug/queryresults.jsp in Idetix Software Systems Revize CMS allows remote attackers to execute arbitrary SQL commands via the query parameter...

CVE-2005-3730

Multiple cross-site scripting XSS vulnerabilities in HTTPTranslatorServlet in Idetix Software Systems Revize CMS allow remote attackers to inject arbitrary web script or HTML via the 1 resourcetype, 2 objectmap, and 3 redirect parameters, possibly involving setWebSpace.jsp...

revizeSQL.txt

Revizer CMS SQL information disclosure and XSS Vendor url:http://www.idetix.com Advisore:http://lostmon.blogspot.com/2005/11/ revizer-cms-sql-information-disclosure.html Vendor notify: exploit available:yes The Revizer Web Content Management System enables non-technical content contributors to...

Revize CMS - Revize.XML Information Disclosure

Revize CMS - Revize.XML Information Disclosure source: https://www.securityfocus.com/bid/15482/info Revize CMS is prone to an information disclosure vulnerability. This issue is due to a failure in the application to restrict access to sensitive files. An attacker can exploit this vulnerability t...

Revize CMS HTTPTranslatorServlet - Cross-Site Scripting

source: https://www.securityfocus.com/bid/15484/info Revize CMS is prone to a cross-site scripting vulnerabilities. This is due to a lack of proper sanitization of user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting use...

Revize CMS - Query_results.jsp SQL Injection

Revize CMS - Queryresults.jsp SQL Injection source: https://www.securityfocus.com/bid/15481/info Revize CMS is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitati...

Revize CMS HTTPTranslatorServlet - Cross-Site Scripting

Revize CMS HTTPTranslatorServlet - Cross-Site Scripting source: https://www.securityfocus.com/bid/15484/info Revize CMS is prone to a cross-site scripting vulnerabilities. This is due to a lack of proper sanitization of user-supplied input. An attacker may leverage this issue to have arbitrary...

Revize CMS - 'Revize.XML' Information Disclosure

source: https://www.securityfocus.com/bid/15482/info Revize CMS is prone to an information disclosure vulnerability. This issue is due to a failure in the application to restrict access to sensitive files. An attacker can exploit this vulnerability to retrieve sensitive information. Information...

Revize CMS - 'Query_results.jsp' SQL Injection

source: https://www.securityfocus.com/bid/15481/info Revize CMS is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...