CVE-2009-1502

CVE-2009-1502 affects S-Cms versions 1.1 Stable and 1.5.2, where the plugin.php page parameter is vulnerable to directory traversal, allowing remote attackers to include and execute arbitrary local files. The vulnerability stems from improper handling of directory traversal sequences, enabling un...

CVE-2009-1502

Directory traversal vulnerability in plugin.php in S-Cms 1.1 Stable and 1.5.2 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the page parameter...

S-CMS version 1.1 suffers from a local file inclusion vulnerability in plugin.php

s-cms/plugin.php code: $page=$GET'page'; error 1 $sqlselectplugincase= mysqlquery"SELECT FROM ".$prefix."plugins WHERE active = '1' AND file='$page'"; if $sqlselectplugincase include "plugins/$page"; error 2 S-CMS version 1.1 暂无 yildirimordulari.com/s-cms/plugin.php?page=File for demo:...

S-Cms 1.1 Stable (page) Local File Inclusion Vulnerability

No description provided by source. S-Cms 1.1 Stable page LFi ---------------------------------------------------------- Discovered By: ZoRLu Date: 29.04.2009 Home: yildirimordulari.com / dafgamers.com / z0rlu.blogspot.com msn: [email protected] N0T: Herkes Hecker Olmus :S N0T: if you wanna lea...

S-CMS 1.1 Stable - page Local File Inclusion

S-CMS 1.1 Stable - page Local File Inclusion S-Cms 1.1 Stable page LFi ---------------------------------------------------------- Discovered By: ZoRLu Date: 29.04.2009 Home: yildirimordulari.com / dafgamers.com / z0rlu.blogspot.com msn: [email protected] N0T: Herkes Hecker Olmus :S N0T: if you...

S-Cms 1.1 Stable (page) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ========================================================== S-Cms 1.1 Stable page Local File Inclusion Vulnerability ========================================================== S-Cms 1.1 Stable page LFi...

S-CMS 1.1 Stable - 'page' Local File Inclusion

S-Cms 1.1 Stable page LFi ---------------------------------------------------------- Discovered By: ZoRLu Date: 29.04.2009 Home: yildirimordulari.com / dafgamers.com / z0rlu.blogspot.com msn: [email protected] N0T: Herkes Hecker Olmus :S N0T: if you wanna learn hack you must be register to my...

S-CMS 1.1 Local File Inclusion

S-Cms 1.1 Stable page LFi ---------------------------------------------------------- Discovered By: ZoRLu Date: 29.04.2009 Home: yildirimordulari.com / dafgamers.com / z0rlu.blogspot.com msn: [email protected] N0T: Herkes Hecker Olmus :S N0T: if you wanna learn hack you must be register to my...

Authentication flaw

S-Cms 1.1 Stable allows remote attackers to bypass authentication and obtain administrative access via an OK value for the login cookie...

CVE-2009-0863

SQL injection vulnerability in admin/deletepage.php in S-Cms 1.1 Stable allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-0864

S-Cms 1.1 Stable allows remote attackers to bypass authentication and obtain administrative access via an OK value for the login cookie...

CVE-2009-0864

S-Cms 1.1 Stable allows remote attackers to bypass authentication and obtain administrative access via an OK value for the login cookie...

CVE-2009-0863

SQL injection vulnerability in admin/deletepage.php in S-Cms 1.1 Stable allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-0864

CVE-2009-0864 affects S-Cms 1.1 Stable. The flaw allows remote attackers to bypass authentication and obtain administrative access by using an OK value for the login cookie, enabling partial confidentiality, integrity, and availability impact. The CVSSv2 base score is 7.5 (HIGH). No remediation d...

CVE-2009-0863

The CVE-2009-0863 entry describes a SQL injection in S-Cms 1.1 Stable, exploitable via the id parameter in admin/delete_page.php, allowing remote execution of arbitrary SQL commands. Affected software/component: S-Cms 1.1 Stable (admin/delete_page.php). Root cause: unsafely constructed SQL query ...

S-Cms 1.1 Stable Insecure Cookie Handling / Mass Page Delete Vulns

No description provided by source. 0x01 Informations: Name : S-Cms 1.1 Stable Download : http://www.hotscripts.com/listings/jump/download/87992/ Vulnerability : Insecure Cookie Handling / Mass Page Delete Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged fil...

S-CMS 1.1 Stable - Insecure Cookie Handling Mass Page Delete

S-CMS 1.1 Stable - Insecure Cookie Handling Mass Page Delete 0x01 Informations: Name : S-Cms 1.1 Stable Download : http://www.hotscripts.com/listings/jump/download/87992/ Vulnerability : Insecure Cookie Handling / Mass Page Delete Author : x0r Contact : [email protected] Notes : Proud to be...

S-CMS 1.1 Insecure Cookie Handling

0x01 Informations: Name : S-Cms 1.1 Stable Download : http://www.hotscripts.com/listings/jump/download/87992/ Vulnerability : Insecure Cookie Handling / Mass Page Delete Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is /path/loginaction.php...

S-CMS 1.1 Stable - Insecure Cookie Handling / Mass Page Delete

0x01 Informations: Name : S-Cms 1.1 Stable Download : http://www.hotscripts.com/listings/jump/download/87992/ Vulnerability : Insecure Cookie Handling / Mass Page Delete Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is /path/loginaction.php...

S-Cms 1.1 Stable Insecure Cookie Handling / Mass Page Delete Vulns

Exploit for unknown platform in category web applications ================================================================== S-Cms 1.1 Stable Insecure Cookie Handling / Mass Page Delete Vulns ================================================================== 0x01 Informations: Name : S-Cms 1.1...