348 matches found
RunCMS Module MyAnnonces (cid) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ========================================================== RunCMS Module MyAnnonces cid SQL Injection Vulnerability ========================================================== runcms MyAnnonces SQL Injectioncid DORK 1 : allinurl: "modules...
RunCMS 1.6.1 - 'admin.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/27852/info RunCMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the conte...
RunCMS 1.6.1 - admin.php Cross-Site Scripting
RunCMS 1.6.1 - admin.php Cross-Site Scripting source: https://www.securityfocus.com/bid/27852/info RunCMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code in th...
RunCMS 1.6.1 Multiple XSS and XSRF Vulnerabilties
RunCMS 1.6.1 Multiple XSS and XSRF Vulnerabilties by NBBN b 1 Create Webmaster admin XSRF Vulnerability/b htmlhead/headbody onLoad="javascript:document.attack.submit" form action="http://localhost/xampp/runcms/modules/system/admin.php" method="post" enctype="multipart/form-data" name="r" input...
CVE-2008-0224
SQL injection vulnerability in index.php in the Newbbplus 0.92 and earlier module in RunCMS 1.6.1 allows remote attackers to execute arbitrary SQL commands via the Client-Ip parameter...
CVE-2008-0224
The CVE-2008-0224 issue affects RunCMS’s Newbb_plus module (versions 0.92 and earlier, running on RunCMS 1.6.1). The root cause is an SQL injection vulnerability in index.php where unsanitized input from the Client-Ip header is used in a database query by the newbb_plus module. Exploitation could...
CVE-2008-0224
SQL injection vulnerability in index.php in the Newbbplus 0.92 and earlier module in RunCMS 1.6.1 allows remote attackers to execute arbitrary SQL commands via the Client-Ip parameter...
RunCMS Multiple Script lid Parameter SQL Injection
The version of this software installed on the remote host fails to sanitize user-supplied input to the 'lid' parameter of the 'modules/mydownloads/visit.php' script before using it in a database query. Regardless of PHP's 'magicquotesgpc' and 'registerglobals' settings, an attacker may be able to...
Newbb_plus Module for RunCMS Client-Ip Header SQL Injection
The version of RunCMS installed on the remote host fails to sanitize user-supplied input to the 'Client-Ip' request header before using it in a database query in the 'newbbplus' module. Regardless of PHP's 'magicquotesgpc' setting, an attacker may be able to exploit this issue to manipulate...
RunCMS Detection
The remote host is running RunCMS, a content-management system written in PHP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid29867; scriptversion"1.11"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01"; scriptnameenglish:"RunCMS Detection";...
RunCMS Newbb_plus <= 0.92 Client IP Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================ RunCMS Newbbplus "UnderWHAT?!" ; $mw-geometry '420x383' ; $mw-resizable0,0; $mw-Label-text = '', -font = 'Verdana 8',-foreground='red'-pack; $mw-Label-text = 'Newbbplus 'Taho...
RunCMS Newbb_plus 0.92 - Client IP SQL Injection
RunCMS Newbbplus 0.92 - Client IP SQL Injection !/usr/bin/perl use Tk; use Tk::BrowseEntry; use Tk::DialogBox; use LWP::UserAgent; $mw = new MainWindowtitle = "UnderWHAT?!" ; $mw-geometry '420x383' ; $mw-resizable0,0; $mw-Label-text = '', -font = 'Verdana 8',-foreground='red'-pack; $mw-Label-text...
RunCMS Newbb_plus 0.92 - Client IP SQL Injection
!/usr/bin/perl use Tk; use Tk::BrowseEntry; use Tk::DialogBox; use LWP::UserAgent; $mw = new MainWindowtitle = "UnderWHAT?!" ; $mw-geometry '420x383' ; $mw-resizable0,0; $mw-Label-text = '', -font = 'Verdana 8',-foreground='red'-pack; $mw-Label-text = 'Newbbplus 'Tahoma 7...
CVE-2007-6548
Multiple direct static code injection vulnerabilities in RunCMS before 1.6.1 allow remote authenticated administrators to inject arbitrary PHP code via the 1 header and 2 footer parameters to modules/system/admin.php in a meta-generator action, 3 the disclaimer parameter to modules/system/admin.p...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in RunCMS before 1.6.1 allow remote attackers to inject arbitrary web script or HTML via 1 the subject parameter to modules/news/submit.php; 2 the PATHINFO to modules/news/index.php, possibly related to the XoopsPageNav class; or 3 an avatar image...
CVE-2007-6547
RunCMS before 1.6.1 does not require entry of the old password during a password change, which allows context-dependent attackers to change passwords upon obtaining temporary access to a session...
Sql injection
Multiple SQL injection vulnerabilities in RunCMS before 1.6.1 allow remote attackers to execute arbitrary SQL commands via the lid parameter to 1 brokenfile.php, 2 visit.php, or 3 ratefile.php in modules/mydownloads/; or 4 ratelink.php, 5 modlink.php, or 6 brokenlink.php in modules/mylinks/...
Code injection
Multiple direct static code injection vulnerabilities in RunCMS before 1.6.1 allow remote authenticated administrators to inject arbitrary PHP code via the 1 header and 2 footer parameters to modules/system/admin.php in a meta-generator action, 3 the disclaimer parameter to modules/system/admin.p...
CVE-2007-6545
Multiple cross-site scripting XSS vulnerabilities in RunCMS before 1.6.1 allow remote attackers to inject arbitrary web script or HTML via 1 the subject parameter to modules/news/submit.php; 2 the PATHINFO to modules/news/index.php, possibly related to the XoopsPageNav class; or 3 an avatar image...