15 matches found
EUVD-2007-6515
Malware in sbrugna...
EUVD-2009-3787
Malware in sbrugna...
EUVD-2005-0828
Malware in sbrugna...
EUVD-2006-1220
Malware in sbrugna...
EUVD-2007-6512
Malware in sbrugna...
EUVD-2009-3786
Malware in sbrugna...
EUVD-2007-5510
Malware in sbrugna...
CVE-2009-3815
RunCMS 2M1, when running with certain errorreporting levels, allows remote attackers to obtain sensitive information via 1 the op parameter to modules/contact/index.php or 2 uid parameter to userinfo.php, which leaks the installation path in an error message when these parameters are used in a ca...
CVE-2005-2691
includes/common.php in RunCMS 1.2 and earlier calls the extract function with EXTROVERWRITE on HTTP POST variables, which allows remote attackers to overwrite arbitrary variables, possibly allowing execution of arbitrary code...
SUSE CVE-2005-2691
includes/common.php in RunCMS 1.2 and earlier calls the extract function with EXTROVERWRITE on HTTP POST variables, which allows remote attackers to overwrite arbitrary variables, possibly allowing execution of arbitrary code...
RunCMS 1.6.1 - bbPath[root_theme] Remote File Inclusion
RunCMS 1.6.1 - bbPathroottheme Remote File Inclusion source: https://www.securityfocus.com/bid/30331/info RunCMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues can allow an attacker to compromise the...
RunCMS < 1.5.3 Unspecified Vulnerability
Binary data 4250.prm...
runcms152-sql.txt
no authentication is performed to run showfiles and showqueries functions, look at this now in /class/debug/debug.php: ... function showqueries$executedqueries, $sorted=0 global $db; $executedqueries = unserializeurldecode$executedqueries; if $sorted == 1 sort$executedqueries; $issorted =...
RunCMS 1.x - 'Bigshow.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/16970/info RunCMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before including it in dynamically generated HTML content. An attacker may leverage this issue t...
PT-2005-1856 · Php · Php
Name of the Vulnerable Software and Affected Versions: RUNCMS version 1.1A Ciamos version 0.9.2 RC1 e-Xoops version 1.05 Rev3 Description: The issue allows remote attackers to obtain sensitive information via an invalid parameter to the convertorderbytrans function, which reveals the path in a PH...