RunCMS 1.6 - disclaimer.php Remote File Overwrite

RunCMS 1.6 - disclaimer.php Remote File Overwrite RunCmss Bug Yahoo! Crawler body font-size: 10px; font-family: verdana; INPUT BORDER-TOP-WIDTH: 1px; FONT-WEIGHT: bold; BORDER-LEFT-WIDTH: 1px; FONT-SIZE: 10px; BORDER-LEFT-COLOR: D50428; BACKGROUND: 590009; BORDER-BOTTOM-WIDTH: 1px;...

RunCMS 1.6 - 'disclaimer.php' Remote File Overwrite

RunCmss Bug Yahoo! Crawler body font-size: 10px; font-family: verdana; INPUT BORDER-TOP-WIDTH: 1px; FONT-WEIGHT: bold; BORDER-LEFT-WIDTH: 1px; FONT-SIZE: 10px; BORDER-LEFT-COLOR: D50428; BACKGROUND: 590009; BORDER-BOTTOM-WIDTH: 1px; BORDER-BOTTOM-COLOR: D50428; COLOR: 00ff00; BORDER-TOP-COLOR:...

RunCMS <= 1.6 Local File Inclusion Vulnerability

No description provided by source. WwW.BugReport.ir AmnPardaz Security Research & Penetration Testing Group Title: RunCms Multiple Vulnerabilities Vendor: http://www.runcms.org/ Bugs: Local File Inclusion, Modules Authorization Weakness Vulnerable Version: RunCMS 1.6 Halloween, 1.5.x prior versio...

RunCMS <= 1.6 Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================ RunCMS Local File Inclusion Remote Code Execution Code Snippet: /include/common.php line131-143 // :: Register Globals Compatibility :: $globalstest = @ini...

RunCMS 1.6 - Local File Inclusion

WwW.BugReport.ir AmnPardaz Security Research & Penetration Testing Group Title: RunCms Multiple Vulnerabilities Vendor: http://www.runcms.org/ Bugs: Local File Inclusion, Modules Authorization Weakness Vulnerable Version: RunCMS 1.6 Halloween, 1.5.x prior versions also may be affected Exploitatio...

RunCMS 1.6 - Local File Inclusion

RunCMS 1.6 - Local File Inclusion WwW.BugReport.ir AmnPardaz Security Research & Penetration Testing Group Title: RunCms Multiple Vulnerabilities Vendor: http://www.runcms.org/ Bugs: Local File Inclusion, Modules Authorization Weakness Vulnerable Version: RunCMS 1.6 Halloween, 1.5.x prior version...

Code injection

Unspecified vulnerability in newbbplus in RunCms 1.5.2 has unknown impact and attack vectors...

CVE-2007-5535

Unspecified vulnerability in newbbplus in RunCms 1.5.2 has unknown impact and attack vectors...

CVE-2007-5535

Unspecified vulnerability in newbbplus in RunCms 1.5.2 has unknown impact and attack vectors...

CVE-2007-5535

Technical details for CVE-2007-5535 are not publicly available in the provided documents. No affected components, root cause, or remediation are described here. Monitor for updates.

RunCMS < 1.5.3 Unspecified Vulnerability

Binary data 4250.prm...

CVE-2007-2539

The showfiles function in RunCms 1.5.2 and earlier allows remote attackers to obtain sensitive information file existence and file metadata via unspecified vectors...

CVE-2007-2538

SQL injection vulnerability in class/debug/debugshow.php in RunCms 1.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the executedqueries array parameter...

Information disclosure

The showfiles function in RunCms 1.5.2 and earlier allows remote attackers to obtain sensitive information file existence and file metadata via unspecified vectors...

Sql injection

SQL injection vulnerability in class/debug/debugshow.php in RunCms 1.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the executedqueries array parameter...

CVE-2007-2538

SQL injection vulnerability in class/debug/debugshow.php in RunCms 1.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the executedqueries array parameter...

CVE-2007-2539

The showfiles function in RunCms 1.5.2 and earlier allows remote attackers to obtain sensitive information file existence and file metadata via unspecified vectors...

CVE-2007-2539

CVE-2007-2539 affects RunCMS 1.5.2 and earlier, where the show_files function leads to information disclosure (revealing file existence and metadata) via unspecified vectors. The available sources describe this as a remote information disclosure vulnerability, but do not provide concrete exploit ...

CVE-2007-2538

CVE-2007-2538 corresponds to an SQL injection in RunCms, affecting versions up to 1.5.2 (and earlier). The vulnerability resides in class/debug/debug_show.php, where the executed_queries array parameter is not properly validated, enabling remote attackers to craft SQL commands. Public references ...

runcms152-sql.txt

no authentication is performed to run showfiles and showqueries functions, look at this now in /class/debug/debug.php: ... function showqueries$executedqueries, $sorted=0 global $db; $executedqueries = unserializeurldecode$executedqueries; if $sorted == 1 sort$executedqueries; $issorted =...