348 matches found
CVE-2006-0721
SQL injection vulnerability in pmlite.php in RunCMS 1.2 and 1.3a allows remote attackers to execute arbitrary SQL commands via the touserid parameter...
CVE-2006-0721
CVE-2006-0721 affects RunCMS versions 1.2 and 1.3a, with a vulnerability in pmlite.php that allows remote SQL execution via the to_userid parameter. The NVD entry lists a CVSS v2 base score of 7.5 (HIGH) , with network attack vector, low complexity, and no authentication required. Impacts are des...
RunCMS 1.21.3 - PMLite.php SQL Injection
RunCMS 1.21.3 - PMLite.php SQL Injection source: https://www.securityfocus.com/bid/16652/info RunCMS is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation coul...
[SA18831] RunCMS pmlite.php SQL Injection Vulnerability
TITLE: RunCMS pmlite.php SQL Injection Vulnerability SECUNIA ADVISORY ID: SA18831 VERIFY ADVISORY: http://secunia.com/advisories/18831/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: Runcms 1.x http://secunia.com/product/4808/ DESCRIPTION: Hamid Ebadi has...
RunCMS 1.2/1.3 - 'PMLite.php' SQL Injection
source: https://www.securityfocus.com/bid/16652/info RunCMS is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow an attacker to compromise the...
Design/Logic Flaw
Multiple PHP remote file include vulnerabilities in RunCMS 1.2 and earlier, with registerglobals and allowurlfopen enabled, allow remote attackers to execute arbitrary code via the bbPathpath parameter in 1 class.forumposts.php and 2 forumpollrenderer.php...
CVE-2006-0659
Multiple PHP remote file include vulnerabilities in RunCMS 1.2 and earlier, with registerglobals and allowurlfopen enabled, allow remote attackers to execute arbitrary code via the bbPathpath parameter in 1 class.forumposts.php and 2 forumpollrenderer.php...
CVE-2006-0659
Multiple PHP remote file include vulnerabilities in RunCMS 1.2 and earlier, with registerglobals and allowurlfopen enabled, allow remote attackers to execute arbitrary code via the bbPathpath parameter in 1 class.forumposts.php and 2 forumpollrenderer.php...
CVE-2006-0659
CVE-2006-0659 concerns multiple PHP remote code execution vulnerabilities in RunCMS 1.2 and earlier, arising when register_globals and allow_url_fopen are enabled. An attacker can trigger arbitrary code execution via the bbPath[path] parameter in (1) class.forumposts.php and (2) forumpollrenderer...
CVE-2006-0658
Vulnerability family: incomplete blacklist in FCKeditor. Affected: FCKeditor 2.0/2.2 as used in RunCMS and related products. Issue: remote attackers can upload and execute arbitrary script files by using extensions not listed in Config[DeniedExtensions][File] (e.g., .php.txt) due to inadequate ex...
runCMS <= 1.3a2 possible remote code execution through the integrated FCKEditor package
--- RunCMS = 1.3a2 remote code execution ------------------------------------ software: site: http://www.runcms.org/public/modules/news/ description: "RUNCMS E-Xoops is a extensible content management system based on the v1 core of Xoops"...
RunCMS < 1.3a3 Arbitrary File Upload
Binary data 3423.prm...
RunCMS Multiple Script bbPath Parameter Remote File Inclusion
The installed version of RunCMS fails to validate user input to the 'bbPath' parameter of two scripts. An unauthenticated attacker may be able to leverage this issue to view arbitrary files on the remote host or to execute arbitrary PHP code, possibly taken from third-party hosts. Note that...
RunCMS 1.2 - 'class.forumposts.php' Remote File Inclusion
?php ---runcms13axpl.php 17.30 09/02/2006 RunCMS = 1.2 arbitrary remote inclusion exploit " = 1.3a shell upload through FCKEditor coded by rgod site: http://retrogod.altervista.org usage: launch from Apache, fill in requested fields, then go! Sun-Tzu: "But when the army is restless and distrustfu...
RunCMS <= 1.2 (class.forumposts.php) Arbitrary Remote Inclusion Exploit
Exploit for unknown platform in category web applications ======================================================================= RunCMS = 1.2 class.forumposts.php Arbitrary Remote Inclusion Exploit ======================================================================= ?php ---runcms13axpl.php...
RunCMS <= 1.2 (class.forumposts.php) Arbitrary Remote Inclusion Exploit
No description provided by source. ?php ---runcms13axpl.php 17.30 09/02/2006 RunCMS = 1.2 arbitrary remote inclusion exploit " = 1.3a shell upload through FCKEditor coded by rgod site: http://retrogod.altervista.org usage: launch from Apache, fill in requested fields, then go! Sun-Tzu: "But when...
RunCMS <= 1.2 Multiple Vulnerabilities
The version of RunCMS installed on the remote host allows attackers to overwrite arbitrary variables by passing them via a POST method and may also suffer from several SQL injection vulnerabilities resulting in, for example, disclosure of the admin password hash. %NASLMINLEVEL 70300 C Tenable...
CVE-2005-2692
CVE-2005-2692 : Multiple SQL injection vulnerabilities affect RunCMS 1.2 and earlier. Exploitable through parameters in the newbb plus module (addquery, subquery), the forum parameter in newtopic.php, edit.php, or reply.php (newbb plus module), or the msg_id parameter in print.php (messages modul...
CVE-2005-2691
includes/common.php in RunCMS 1.2 and earlier calls the extract function with EXTROVERWRITE on HTTP POST variables, which allows remote attackers to overwrite arbitrary variables, possibly allowing execution of arbitrary code...