CVE-2015-0918

Cross-site scripting XSS vulnerability in the administrative backend in Sefrengo before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the searchterm parameter to backend/main.php...

EUVD-2015-1563

Malware in sbrugna...

EUVD-2015-0927

Malware in sbrugna...

EUVD-2015-0926

Malware in sbrugna...

EUVD-2015-5069

Malware in sbrugna...

CVE-2015-0919

Multiple SQL injection vulnerabilities in the administrative backend in Sefrengo before 1.6.1 allow remote administrators to execute arbitrary SQL commands via the 1 idcat or 2 idclient parameter to backend/main.php...

Sefrengo SQL Injection Vulnerability

Sefrengo is an open source web content management system CMS based on PHP and MySql. The system supports WYSIWYG editors, image uploads and more. A SQL injection vulnerability exists in versions of Sefrengo prior to 1.6.5 beta2. A remote attacker can exploit this vulnerability to execute arbitrar...

CVE-2015-5052

SQL injection vulnerability in Sefrengo before 1.6.5 beta2...

CVE-2015-5052

SQL injection vulnerability in Sefrengo before 1.6.5 beta2...

Sql injection

SQL injection vulnerability in Sefrengo before 1.6.5 beta2...

CVE-2015-5052

The connected sources confirm a SQL injection vulnerability in Sefrengo prior to version 1.6.5 beta2. The flaw affects the web CMS (PHP/MySQL) and, if exploitable, allows an attacker to execute arbitrary SQL commands remotely, with the impact described as affecting confidentiality, integrity, and...

CVE-2015-5052

SQL injection vulnerability in Sefrengo before 1.6.5 beta2...

Multiple SQL Injection Vulnerabilities in Sefrengo CMS

Sefrengo CMS is a content management system. Sefrengo CMS has multiple SQL injection vulnerabilities that could be exploited by remote attackers to submit specially crafted SQL queries to manipulate or obtain database data...

CVE-2015-1428

Multiple SQL injection vulnerabilities in Sefrengo before 1.6.2 allow 1 remote attackers to execute arbitrary SQL commands via the sefrengo cookie in a login to backend/main.php or 2 remote authenticated users to execute arbitrary SQL commands via the valueid parameter in a savevalue action to...

Sql injection

Multiple SQL injection vulnerabilities in Sefrengo before 1.6.2 allow 1 remote attackers to execute arbitrary SQL commands via the sefrengo cookie in a login to backend/main.php or 2 remote authenticated users to execute arbitrary SQL commands via the valueid parameter in a savevalue action to...

CVE-2015-1428

Sefrengo CMS (before 1.6.2) has multiple SQL injection vulnerabilities. Exploitable via cookies (sefrengo cookie during login to backend/main.php) or via value_id in a save_value action to backend/main.php; vulnerable code paths include /backend/external/phplib/ct_sql.inc and /backend/inc/class.v...

CVE-2015-1428

Multiple SQL injection vulnerabilities in Sefrengo before 1.6.2 allow 1 remote attackers to execute arbitrary SQL commands via the sefrengo cookie in a login to backend/main.php or 2 remote authenticated users to execute arbitrary SQL commands via the valueid parameter in a savevalue action to...

Sefrengo CMS 1.6.1 - Multiple SQL Injection Vulnerabilities

Sefrengo CMS version 1.6.1 suffers from multiple remote SQL injection vulnerabilities. Exploit Title: Sefrengo CMS v1.6.1 - Multiple SQL Injection Vulnerabilities Google Dork: N/A Date: 01/26/2015 Exploit Author: Nguyen Hung Tuan email protected & ITAS Team www.itas.vn Vendor Homepage:...

Sefrengo CMS 1.6.1 - Multiple SQL Injections

Sefrengo CMS 1.6.1 - Multiple SQL Injections Exploit Title: Sefrengo CMS v1.6.1 - Multiple SQL Injection Vulnerabilities Google Dork: N/A Date: 01/26/2015 Exploit Author: Nguyen Hung Tuan [email protected] & ITAS Team www.itas.vn Vendor Homepage: http://www.sefrengo.org/ Software Link:...

Sefrengo CMS 1.6.1 - Multiple SQL Injections

Exploit Title: Sefrengo CMS v1.6.1 - Multiple SQL Injection Vulnerabilities Google Dork: N/A Date: 01/26/2015 Exploit Author: Nguyen Hung Tuan [email protected] & ITAS Team www.itas.vn Vendor Homepage: http://www.sefrengo.org/ Software Link: http://forum.sefrengo.org/index.php?showtopic=3368...