CVE-2007-6367

Multiple cross-site scripting XSS vulnerabilities in the guestbook in SineCMS 2.3.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 username user or 2 comment commento field, different vectors than CVE-2007-2357...

CVE-2007-6366

Multiple SQL injection vulnerabilities in SineCMS 2.3.4 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the id parameter to mods/Calendar/index.php, accessed through a Calendar info action to mods.php; the id parameter to admin/modsadm.php in a 2 Guestbook modifica or 3...

CVE-2007-6367

CVE-2007-6367 describes multiple XSS vulnerabilities in SineCMS 2.3.4 and earlier in the guestbook, exploitable via the username (user) or commento fields. The description specifies different vectors from CVE-2007-2357 but does not provide concrete root-cause code or affected subcomponents beyond...

CVE-2007-6366

CVE-2007-6366 affects SineCMS 2.3.4 and earlier . Multiple SQL injection flaws allow remote attackers to execute arbitrary SQL via: (1) the id parameter to mods/Calendar/index.php (Calendar info action), (2) the id parameter to admin/mods_adm.php for a Guestbook modification action, (3) the id pa...

CVE-2007-6367

Multiple cross-site scripting XSS vulnerabilities in the guestbook in SineCMS 2.3.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 username user or 2 comment commento field, different vectors than CVE-2007-2357...

SineCMS <= 2.3.4 Calendar SQL Injection 'n something else..

--------------------------------------------------------------- / | | / | / |/ | | |/ | | / | | | | | |/ | | // | || | ||| /| / / | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...

sinecms-sql.txt

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- SineCMS...

SineCMS 2.3.4 Calendar Remote SQL Injection Vulnerability

No description provided by source. --------------------------------------------------------------- / | |\\\\ \\\\ / | / |/ | | |/ \\\\ | | | |||| \\\\/\\\\| \\\\/ &n...

SineCMS <= 2.3.4 Calendar Remote SQL Injection Vulnerability

No description provided by source. --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org...

SineCMS 2.3.4 - Calendar SQL Injection

SineCMS 2.3.4 - Calendar SQL Injection --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...

SineCMS 2.3.4 - Calendar SQL Injection

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- SineCMS...

SineCMS <= 2.3.4 Calendar Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================ SineCMS | |||| /| / / --------------------------------------------------------------- SineCMS Off --------------------------------------------------------------- Corrupted...

sinecms-xss.txt

. . . . | . .| . .;/ || Infos --------- Date : 2007-04-26 ISO 8601 Product : SineCms Version : 2.3.4 last, prior versions may also be affected Vendor : http://sourceforge.net/projects/sine - http://www.sinecms.net Vendor Status : 2007-04-26 - Informed! Description : SineCms is a management...

Cross site scripting

Cross-site scripting XSS vulnerability in mods/Core/result.php in SineCms 2.3.4 allows remote attackers to inject arbitrary web script or HTML via the stringa parameter...

CVE-2007-2357

Cross-site scripting XSS vulnerability in mods/Core/result.php in SineCms 2.3.4 allows remote attackers to inject arbitrary web script or HTML via the stringa parameter...

CVE-2007-2357

Cross-site scripting XSS vulnerability in mods/Core/result.php in SineCms 2.3.4 allows remote attackers to inject arbitrary web script or HTML via the stringa parameter...

CVE-2007-2357

The CVE-2007-2357 entry describes a cross-site scripting (XSS) vulnerability in SineCMS 2.3.4, specifically in mods/Core/result.php, exploitable via the stringa parameter. Connected records (e.g., CVE-2007-6367) corroborate XSS in SineCMS 2.3.4 and earlier, via the guestbook fields, but the prima...

SineCMS

. . . . | . .| . .;/ || .| .net | .| "SineCms Version 2.3.4 - Non-Persistent XSS Vulnerability" by Nexus 1 Infos --------- Date : 2007-04-26 ISO 8601 Product : SineCms Version : 2.3.4 last, prior versions may also be affected Vendor : http://sourceforge.net/projects/sine - http://www.sinecms.net...