EUVD-2007-2532

Malware in sbrugna...

RunCms <= 1.5.2 (debug_show.php) Remote SQL Injection Exploit

No description provided by source. ?php printr' -------------------------------------------------------------------------- RunCms = 1.5.2 /class/debug/debugshow.php sql injection / credentials disclosure exploit by rgod mail: retrog at alice dot it site: http://retrogod.altervista.org dork: Runcm...

CVE-2007-2539

CVE-2007-2539 affects RunCMS 1.5.2 and earlier, where the show_files function leads to information disclosure (revealing file existence and metadata) via unspecified vectors. The available sources describe this as a remote information disclosure vulnerability, but do not provide concrete exploit ...

CVE-2007-2539: Undefined Security Weakness

The showfiles function in RunCms 1.5.2 and earlier allows remote attackers to obtain sensitive information file existence and file metadata via unspecified vectors...

RunCMS 1.5.2 - debug_show.php SQL Injection

RunCMS 1.5.2 - debugshow.php SQL Injection no authentication is performed to run showfiles and showqueries functions, look at this now in /class/debug/debug.php: ... function showqueries$executedqueries, $sorted=0 global $db; $executedqueries = unserializeurldecode$executedqueries; if $sorted == ...