EUVD-2008-5679

Malware in sbrugna...

EUVD-2008-5468

Malware in sbrugna...

SlimCMS 0.1 - Cross-Site Request Forgery (Change Admin Password)

SlimCMS 0.1 - Cross-Site Request Forgery Change Admin Password input type="hidden" name="theme" value=...

SlimCMS <= 1.0.0 (redirect.php) Privilege Escalation Exploit

No description provided by source. !/usr/bin/php -q ?php / SlimCMS = 1.0.0 Privilege Escalation Exploit Discovered By StAkeR aka athos - StAkeRathotmaildotit Discovered On 11/10/2008 http://downloads.sourceforge.net/slimcms/SlimCMS-1.0.0.tgz?modtime=1217343227&bigmirror=0 / errorreporting0; $host...

SlimCMS <= 1.0.0 (edit.php) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl =starting -------------------------------------------------------- SlimCMS = 1.0.0 edit.php Remote SQL Injection Exploit -------------------------------------------------------- by athos - stakerathotmaildotit download on sourceforge File edit.php...

CVE-2008-5708

redirect.php in SlimCMS 1.0.0 does not require authentication, which allows remote attackers to create administrative users by using the newusername and newpassword parameters and setting the newisadmin parameter to 1...

Authentication flaw

redirect.php in SlimCMS 1.0.0 does not require authentication, which allows remote attackers to create administrative users by using the newusername and newpassword parameters and setting the newisadmin parameter to 1...

CVE-2008-5708

redirect.php in SlimCMS 1.0.0 does not require authentication, which allows remote attackers to create administrative users by using the newusername and newpassword parameters and setting the newisadmin parameter to 1...

CVE-2008-5708

The CVE-2008-5708 entry concerns SlimCMS 1.0.0, where redirect.php fails to require authentication, enabling an unauthenticated remote attacker to create administrative users by supplying newusername and newpassword with newisadmin=1. Root cause is an authentication bypass in the redirect.php flo...

Sql injection

SQL injection vulnerability in edit.php in SlimCMS 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the pageID parameter...

CVE-2008-5491

SQL injection vulnerability in edit.php in SlimCMS 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the pageID parameter...

CVE-2008-5491

CVE-2008-5491 describes a SQL injection vulnerability in SlimCMS, affecting version 1.0.0 and earlier. The flaw is in edit.php and is exploitable via the pageID parameter, allowing remote attackers to execute arbitrary SQL commands. The core impact is partial confidentiality and integrity comprom...

CVE-2008-5491

SQL injection vulnerability in edit.php in SlimCMS 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the pageID parameter...

slimcms-sql.txt

!/usr/bin/perl =starting -------------------------------------------------------- SlimCMS 2 114. $query = "UPDATE pages SET title = '".$POST'pageTitle'."', content = '". striptagsstripslashes$POST'cmsText',$allowedTags."' WHERE ID = ".$GET'pageID'; 115. mysqlquery$query; 116. //$successfulyUpdate...

SlimCMS <= 1.0.0 (edit.php) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================== SlimCMS 2 114. $query = "UPDATE pages SET title = '".$POST'pageTitle'."', content = '". striptagsstripslashes$POST'cmsText',$allowedTags."' WHERE ID = ".$GET'pageID'; 115...

SlimCMS 1.0.0 - edit.php SQL Injection

SlimCMS 1.0.0 - edit.php SQL Injection !/usr/bin/perl =starting -------------------------------------------------------- SlimCMS 2 114. $query = "UPDATE pages SET title = '".$POST'pageTitle'."', content = '". striptagsstripslashes$POST'cmsText',$allowedTags."' WHERE ID = ".$GET'pageID'; 115...

SlimCMS 1.0.0 - &#039;edit.php&#039; SQL Injection

!/usr/bin/perl =starting -------------------------------------------------------- SlimCMS 2 114. $query = "UPDATE pages SET title = '".$POST'pageTitle'."', content = '". striptagsstripslashes$POST'cmsText',$allowedTags."' WHERE ID = ".$GET'pageID'; 115. mysqlquery$query; 116. //$successfulyUpdate...

SlimCMS &lt;= 1.0.0 (redirect.php) Privilege Escalation Exploit

No description provided by source. !/usr/bin/php -q ?php / SlimCMS = 1.0.0 Privilege Escalation Exploit Discovered By StAkeR aka athos - StAkeRathotmaildotit Discovered On 11/10/2008 http://downloads.sourceforge.net/slimcms/SlimCMS-1.0.0.tgz?modtime=1217343227&bigmirror=0 / errorreporting0; $host...

slimcms-escalate.txt

!/usr/bin/php -q...

SlimCMS 1.0.0 - redirect.php Privilege Escalation

SlimCMS 1.0.0 - redirect.php Privilege Escalation !/usr/bin/php -q milw0rm.com 2008-10-10...