Seditio 170 Cross Site Request Forgery / SQL Injection

============================================================ Vulnerable Software: Seditio 170 seditio-build170.20120302 Downloaded from:http://www.neocrome.net/files/code/seditio-build170.20120302.rar MD5 SUM:beb6adc6abb56f947698c1efdbae9430 seditio-build170.20120302.rar...

Seditio SF Quick Ban 1.0 Cross Site Request Forgery

================================================================ Vulnerable Software: SF - Quick Ban sfquickban version 1.0 is Plugin for Seditio CMS. http://www.seditioforge.com/plugins/administration/sf-quick-ban-i65.html http://www.seditioforge.com/page.php?id=65&a=dl MD5 SUM:...

Seditio Chat 1.0 Cross Site Request Forgery

========================================================= Vulnerable Software: Seditio Chat Plugin Chat İndex Plugin v 1.0 http://www.seditio-eklenti.com/page.php?id=418 http://www.seditio-eklenti.com/chat-plugin-index-d418.html Downloaded: http://www.seditio-eklenti.com/datas/users/1-chat.rar MD...

Seditio 165 Cross Site Request Forgery / Backup Disclosure

============================================= Vulnerable Software: Seditio v165 Downloaded from: http://seditio-eklenti.com/datas/users/1-seditio.165.rar This version is under development of Kaan $ md5sum 1-seditio.165.rar 2eebc8d80f7fcd4e9a0d0659ef193488 1-seditio.165.rar...

PmOS - Pm Okuma Sistemi Cross Site Scripting

============================================================================ Vulnerable Software: PmOS - Pm Okuma Sistemi plugin for Seditio CMS. http://seditio-eklenti.com/datas/users/1-pmoku.rar MD5 SUM: 88235c2b4b0613bff87545d2d887f042 1-pmoku.rar...

seditio165_CSRF_and_world_readble_db_dumpissuses

============================================= Vulnerable Software: Seditio v165 Downloaded from: http://seditio-eklenti.com/datas/users/1-seditio.165.rar This version is under development of Kaan $ md5sum 1-seditio.165.rar 2eebc8d80f7fcd4e9a0d0659ef193488 1-seditio.165.rar...

Seditio Portal Multiple Vulnerabilities

Exploit for php platform in category web applications +---------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Seditio Portal Multiple VulnerabilitiesCSRF Add admin + add new article /Sql InjecTion Da...

Sql injection

SQL injection vulnerability in events/inc/events.inc.php in the Events plugin for Seditio CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the c parameter to plug.php...

CVE-2009-1411

SQL injection vulnerability in events/inc/events.inc.php in the Events plugin for Seditio CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the c parameter to plug.php...

CVE-2009-1411

CVE-2009-1411 describes an SQL injection in the Events plugin for Seditio CMS 1.0. The vulnerability exists in events/inc/events.inc.php and allows remote attackers to inject arbitrary SQL via the c parameter to plug.php. This leads to potential confidentiality and integrity impacts on the affect...

CVE-2009-1411

SQL injection vulnerability in events/inc/events.inc.php in the Events plugin for Seditio CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the c parameter to plug.php...

Seditio CMS Events Plugin (c) Remote SQL Injection Vulnerability

No description provided by source. +=================================================================+ xTitle : Seditio Events Remote SQL Injection Seditio Events Plugin Remote SQL Injection xSoftware : Seditio CMS xVendor : www.neocrome.ne xDate : 17 April 2009 Indonesia xAuthor : OoNBoy xContac...

Seditio CMS Events SQL Injection

+=================================================================+ xTitle : Seditio Events Remote SQL Injection Seditio Events Plugin Remote SQL Injection xSoftware : Seditio CMS xVendor : www.neocrome.ne xDate : 17 April 2009 Indonesia xAuthor : OoNBoy xContact : [email protected] xBlog :...

Seditio CMS Events Plugin (c) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Seditio CMS Events Plugin c Remote SQL Injection Vulnerability ================================================================...

Seditio CMS Events Plugin - c SQL Injection

Seditio CMS Events Plugin - c SQL Injection +=================================================================+ xTitle : Seditio Events Remote SQL Injection Seditio Events Plugin Remote SQL Injection xSoftware : Seditio CMS xVendor : www.neocrome.ne xDate : 17 April 2009 Indonesia xAuthor : OoNBo...

Seditio CMS Events Plugin - 'c' SQL Injection

+=================================================================+ xTitle : Seditio Events Remote SQL Injection Seditio Events Plugin Remote SQL Injection xSoftware : Seditio CMS xVendor : www.neocrome.ne xDate : 17 April 2009 Indonesia xAuthor : OoNBoy xContact : [email protected] xBlog :...

Seditio plug.php pag_sub Parameter SQL Injection

The version of Seditio installed on the remote host fails to sanitize user input to the 'pagsub' parameter of the '/plug.php' script when used in conjunction with the search action before using it in a database query. Provided PHP's 'magicquotesgpc' setting is disabled, an attacker may be able to...

Sql injection

SQL injection vulnerability in plugins/search/search.php in Neocrome Seditio CMS 121 and earlier allows remote attackers to execute arbitrary SQL commands via the pagsub parameter to plug.php...

CVE-2007-6202

SQL injection vulnerability in plugins/search/search.php in Neocrome Seditio CMS 121 and earlier allows remote attackers to execute arbitrary SQL commands via the pagsub parameter to plug.php...

CVE-2007-6202

SQL injection vulnerability in plugins/search/search.php in Neocrome Seditio CMS 121 and earlier allows remote attackers to execute arbitrary SQL commands via the pagsub parameter to plug.php...