400 matches found
S-CMS V3.0 build20170601 has an arbitrary file download vulnerability
S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. S-CMS V3.0 build20170601 '/admin/download.asp' page has an arbitrary file download vulnerability, allowing attackers to exploit the vulnerability to download database information...
S-CMS newsview.asp page has a SQL injection vulnerability in the n_id parameter.
S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. A SQL injection vulnerability exists in the S-CMS newsview.asp page. The lack of filtering of the 'nid' parameter allows an attacker to exploit the vulnerability to obtain sensitive database information...
Reflective Cross-site Scripting Vulnerability in S-CMS Enterprise Website Builder System
S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. A reflective cross-site scripting vulnerability exists in S-CMS. Due to insufficient filtering of user input, the program allows attackers to construct malicious web pages and induce users to parse and...
Stored Cross-site Scripting Vulnerability in s-cms Website Builder System
S-CMS is Zibo Shining Network Technology Co., Ltd. developed a solution for enterprise station-building products. A stored cross-site scripting vulnerability exists in the S-CMS website builder system. Due to the lack of filtering on the /member/memberreg.asp page, an attacker can launch a...
Default Backdoor Vulnerability in s-cms Website Builder System
S-CMS is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise to provide solutions to build a station of the product. There is a default backdoor vulnerability in s-cms website builder system. Allow attackers to directly obtain site or server permissions...
Y-R-S CMS 2015Q4 - (ID) SQL Injection Web Vulnerability
Document Title: =============== Y-R-S CMS 2015Q4 - ID SQL Injection Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1644 Release Date: ============= 2015-11-17 Vulnerability Laboratory ID VL-ID: ==================================== 1644...
Y-R-S CMS 2015Q4 - (ID) SQL Injection Web Vulnerability
Document Title: =============== Y-R-S CMS 2015Q4 - ID SQL Injection Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1644 Release Date: ============= 2015-11-17 Vulnerability Laboratory ID VL-ID: ==================================== 1644...
s-cms 2.5 - Multiple Vulnerabilities
No description provided by source. ============================================================ Exploit Title: S-CMS Multiple Vuln Date: 14/11/2010 Author: LordTittiS Greetings To: GodOfPain, SystemOveride Software Link: http://www.matteoiammarrone.com http://www.matteoiammarrone.com/public/s-cms...
S-CMS <= 2.0b3 Multiple Local File Inclusion Vulnerabilities
No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ---------------------...
S-CMS <= 2.0b3 (username) Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...
CVE-2010-4772
Cross-site scripting XSS vulnerability in blocks/lang.php in S-CMS 2.5 allows remote attackers to inject arbitrary web script or HTML via the id parameter to viewforum.php...
CVE-2010-4771
SQL injection vulnerability to viewforum.php in S-CMS 2.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in blocks/lang.php in S-CMS 2.5 allows remote attackers to inject arbitrary web script or HTML via the id parameter to viewforum.php...
Sql injection
SQL injection vulnerability to viewforum.php in S-CMS 2.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-4771
CVE-2010-4771 affects S-CMS 2.5, due to an SQL injection in viewforum.php where the id parameter enables remote attackers to execute arbitrary SQL commands. Reported impact aligns with a base score of 7.5 (HIGH) and network access with low attack complexity. The provided connected documents confi...
CVE-2010-4772
CVE-2010-4772 documents an XSS vulnerability in S-CMS 2.5. The issue resides in blocks/lang.php, where the id parameter passed to viewforum.php is susceptible to script/HTML injection. The vulnerability is triggered remotely via that parameter, enabling an attacker to inject arbitrary web script ...
CVE-2010-4771
SQL injection vulnerability to viewforum.php in S-CMS 2.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-4772
Cross-site scripting XSS vulnerability in blocks/lang.php in S-CMS 2.5 allows remote attackers to inject arbitrary web script or HTML via the id parameter to viewforum.php...
S-CMS 2.5 Multiple Vulnerabilities
Exploit for php platform in category web applications ================================== S-CMS 2.5 Multiple Vulnerabilities ================================== ============================================================ Exploit Title: S-CMS Multiple Vuln Date: 14/11/2010 Author: LordTittiS...
S_CMS 2.5 - Multiple Vulnerabilities
SCMS 2.5 - Multiple Vulnerabilities ============================================================ Exploit Title: S-CMS Multiple Vuln Date: 14/11/2010 Author: LordTittiS Greetings To: GodOfPain, SystemOveride Software Link: http://www.matteoiammarrone.com http://www.matteoiammarrone.com/public/s-cm...