CVE-2015-1562

Saurus CMS

Multiple Cross-Site Scripting Vulnerabilities in Saurus CMS

Saurus CMS is a content management system. Saurus CMS suffers from multiple cross-site scripting vulnerabilities due to the program failing to properly process user-supplied input. This allows attackers to exploit this vulnerability to steal cookie-based authentication credentials, execute...

CMS Saurus 4.7 Cross Site Scripting

Advisory: Reflecting XSS vulnerabilities in CMS Saurus v. 4.7 CE Advisory ID: SROEADV-2015-05 Author: Steffen Rösemann Affected Software: CMS Saurus v. 4.7 CE, released: 12.08.2014 Vendor URL: http://www.saurus.info Vendor Status: patched CVE-ID: - ========================== Vulnerability...

Saurus CMS Admin Panel - Multiple CSRF Vulnerabilities

No description provided by source. Author: Fady Mohammed Osman cute hacker Software Link: http://www.saurus.info/download/SaurusCMS-4.7.0.tgz Version: 4.7.0 Tested on: Ubuntu 10.04 CVE : Not available This vulnerability allows a malicious hacker to change password of a user and also it allows...

Saurus CMS 4.7.1 - Multiple Vulnerabilities

No description provided by source. waraxe-2013-SA106 - Multiple Vulnerabilities in Saurus CMS 4.7.1 ================================================================================ Author: Janek Vind waraxe Date: 14. July 2013 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-106.html...

Saurus CMS 4.7.1 Multiple Vulnerabilities

Saurus CMS version 4.7.1 suffers from cross site scripting, remote file inclusion, local file inclusion, information disclosure, remote SQL injection, HTTP response splitting, cross site request forgery, and directory traversal vulnerabilities. Saurus CMS 4.7.1 LFI / RFI / XSS / SQL Injection /...

Saurus CMS 4.7.1 - Multiple Vulnerabilities

Saurus CMS 4.7.1 - Multiple Vulnerabilities waraxe-2013-SA106 - Multiple Vulnerabilities in Saurus CMS 4.7.1 ================================================================================ Author: Janek Vind "waraxe" Date: 14. July 2013 Location: Estonia, Tartu Web:...

Saurus CMS 4.7.1 - Multiple Vulnerabilities

waraxe-2013-SA106 - Multiple Vulnerabilities in Saurus CMS 4.7.1 ================================================================================ Author: Janek Vind "waraxe" Date: 14. July 2013 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-106.html Description of vulnerable software...

[waraxe-2013-SA#106] - Multiple Vulnerabilities in Saurus CMS 4.7.1

waraxe-2013-SA106 - Multiple Vulnerabilities in Saurus CMS 4.7.1 ================================================================================ Author: Janek Vind "waraxe" Date: 14. July 2013 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-106.html Description of vulnerable software...

Saurus CMS 4.7.1 4.7.1 LFI / RFI / XSS / SQL Injection / Traversal / CSRF

waraxe-2013-SA106 - Multiple Vulnerabilities in Saurus CMS 4.7.1 ================================================================================ Author: Janek Vind "waraxe" Date: 14. July 2013 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-106.html Description of vulnerable software...

CVE-2010-4943

Multiple PHP remote file inclusion vulnerabilities in Saurus CMS 4.7.0 allow remote attackers to execute arbitrary PHP code via a URL in the classpath parameter to 1 file.php or 2 comdel.php...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Saurus CMS 4.7.0 allow remote attackers to execute arbitrary PHP code via a URL in the classpath parameter to 1 file.php or 2 comdel.php...

CVE-2010-4943

CVE-2010-4943 affects Saurus CMS 4.7.0 with multiple PHP remote file inclusion vulnerabilities. The issue allows a remote attacker to execute arbitrary PHP code by supplying a URL in the class_path parameter to either file.php or com_del.php. The connected documents corroborate the affected produ...

CVE-2010-4943

Multiple PHP remote file inclusion vulnerabilities in Saurus CMS 4.7.0 allow remote attackers to execute arbitrary PHP code via a URL in the classpath parameter to 1 file.php or 2 comdel.php...

Saurus CMS 4.7.0 Cross Site Request Forgery

Author: Fady Mohammed Osman cute hacker Software Link: http://www.saurus.info/download/SaurusCMS-4.7.0.tgz Version: 4.7.0 Tested on: Ubuntu 10.04 CVE : Not available This vulnerability allows a malicious hacker to change password of a user and also it allows changing the website information. PoC ...

Saurus CMS Admin Panel - Multiple Cross-Site Request Forgery Vulnerabilities

Saurus CMS Admin Panel - Multiple Cross-Site Request Forgery Vulnerabilities Author: Fady Mohammed Osman cute hacker Software Link: http://www.saurus.info/download/SaurusCMS-4.7.0.tgz Version: 4.7.0 Tested on: Ubuntu 10.04 CVE : Not available This vulnerability allows a malicious hacker to change...

Saurus CMS Admin Panel - Multiple Cross-Site Request Forgery Vulnerabilities

Author: Fady Mohammed Osman cute hacker Software Link: http://www.saurus.info/download/SaurusCMS-4.7.0.tgz Version: 4.7.0 Tested on: Ubuntu 10.04 CVE : Not available This vulnerability allows a malicious hacker to change password of a user and also it allows changing the website information. PoC ...

Saurus CMS Admin Panel Multiple CSRF Vulnerabilities

Exploit for php platform in category web applications ==================================================== Saurus CMS Admin Panel Multiple CSRF Vulnerabilities ==================================================== Author: Fady Mohammed Osman cute hacker Software Link:...

Saurus CMS 4.7.0 - Remote File Inclusion

Saurus CMS 4.7.0 - Remote File Inclusion Exploit Title: SaurusCMSupdate4.7.0 Remote File Include Date: 11-8-2010 Author: LoSt.HaCkEr Software Link: http://www.brothersoft.com/saurus-cms-download-17626.html Version: v 4.7.0 Tested on: Windows XP CVE : هكر المسيب ContactLoSt.HaCkEratyahoodotcom...

Saurus CMS 4.7.0 - Remote File Inclusion

Exploit Title: SaurusCMSupdate4.7.0 Remote File Include Date: 11-8-2010 Author: LoSt.HaCkEr Software Link: http://www.brothersoft.com/saurus-cms-download-17626.html Version: v 4.7.0 Tested on: Windows XP CVE : هكر المسيب ContactLoSt.HaCkEratyahoodotcom Exploit:...