EUVD-2014-9173

Malware in sbrugna...

EUVD-2018-10154

Malware in sbrugna...

s-cms code execution vulnerability

s-cms is a content management system CMS based on PHP and MySQL. A security vulnerability exists in the file management for website security in s-cms version 3.0. The vulnerability can be exploited by remote attackers to generate robots.php files with the help of the 'txt' parameter of the...

CVE-2018-18426

s-cms 3.0 allows remote attackers to execute arbitrary PHP code by placing this code in a crafted User-agent Disallow value in the robots.php txt parameter...

Code injection

s-cms 3.0 allows remote attackers to execute arbitrary PHP code by placing this code in a crafted User-agent Disallow value in the robots.php txt parameter...

CVE-2018-18426

CVE-2018-18426 affects s-cms 3.0. A remote attacker can achieve arbitrary PHP code execution by placing code in a crafted User-agent Disallow value in robots.php txt parameter. Multiple sources (NVD/NVC CNVD/CVE listings) describe the same vector: the vulnerability in the robots.php handling allo...

CVE-2018-18426

s-cms 3.0 allows remote attackers to execute arbitrary PHP code by placing this code in a crafted User-agent Disallow value in the robots.php txt parameter...

CVE-2018-18426: Improper Control of Generation of Code

s-cms 3.0 allows remote attackers to execute arbitrary PHP code by placing this code in a crafted User-agent Disallow value in the robots.php txt parameter...

PT-2018-14453

Name of the Vulnerable Software and Affected Versions s-cms version 3.0 Description The issue allows remote attackers to execute arbitrary PHP code. This can be achieved by placing the malicious code in a crafted User-agent Disallow value in the robots.php txt parameter. Recommendations For s-cms...

PHP-Fusion 'administration/robots.php' HTML Injection Vulnerability

PHP-Fusion is an open source lightweight content management system based on MySql and PHP. An HTML injection vulnerability exists in PHP-Fusion, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or...

Sql injection

SQL injection vulnerability in the formulaireRobot function in admin/robots.lib.php in RobotStats 1.0 allows remote attackers to execute arbitrary SQL commands via the robot parameter to admin/robots.php...

CVE-2014-9348

RobotStats 1.0 is affected by a SQL injection in the formulaireRobot function (admin/robots.lib.php) that allows remote attackers to inject arbitrary SQL via the robot parameter to admin/robots.php. The vulnerability stems from improper handling of the robot parameter, enabling potentially readin...

CVE-2014-9348

SQL injection vulnerability in the formulaireRobot function in admin/robots.lib.php in RobotStats 1.0 allows remote attackers to execute arbitrary SQL commands via the robot parameter to admin/robots.php...

PT-2014-8952

Name of the Vulnerable Software and Affected Versions RobotStats version 1.0 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The injection can occur via the nom or user agent...

PT-2014-8951

Name of the Vulnerable Software and Affected Versions RobotStats version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the robot parameter in the admin/robots.php endpoint, specifically targeting the formulaireRobot function in...

RobotStats 1.0 SQL Injection

Title : RobotStats v1.0 robot param SQL Injection Vulnerability Author : ZoRLu / [email protected] / [email protected] Home : http://milw00rm.com / its online Twitter : https://twitter.com/milw00rm or @milw00rm Date : 22.11.2014 Demo : http://alpesoiseaux.free.fr/robotstats/ Download :...