34 matches found
EUVD-2012-1991
Malware in sbrugna...
EUVD-2012-1790
Malware in sbrugna...
EUVD-2012-1441
Malware in sbrugna...
EUVD-2012-1791
Malware in sbrugna...
SocialCMS 1.0.2 - CSRF Vulnerability
No description provided by source. +-------------------------------------------------------------------------+ Exploit Title : Socialcms CSRF Vulnerability Date : 16-02-2012 Author : Ivano Binetti http://ivanobinetti.com Vendor site : http://socialcms.com Software link :...
SocialCMS1.0.2 - Multiple CSRF Vulnerabilities
No description provided by source. !--- Title: socialcms1.0.2 Multiple CSRF Vulnerabilities Author: vir0e5 a.k.a banditc0de [email protected] Date: Wed 20 april 2011 11:18:22 AM Vendor: www.socialcms.com Download: http://sourceforge.net/projects/socialcms/ --- !-- Create Admin User -- body...
CVE-2012-1416
Multiple cross-site request forgery CSRF vulnerabilities in SocialCMS 1.0.2 allow remote attackers to hijack the authentication of administrators for requests that 1 add administrator accounts via a membernew action to myadmin/admin1members.php or 2 modify the default site title via a save action...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in SocialCMS 1.0.2 allow remote attackers to hijack the authentication of administrators for requests that 1 add administrator accounts via a membernew action to myadmin/admin1members.php or 2 modify the default site title via a save action...
CVE-2012-1416
The CVE-2012-1416 entry concerns CSRF flaws in SocialCMS 1.0.2 that allow an attacker to hijack administrator sessions by triggering (1) member_new to create admin accounts or (2) saving a new site title via admin interfaces. Affected software: SocialCMS 1.0.2; impact described as unauthorized ad...
CVE-2012-1416
Multiple cross-site request forgery CSRF vulnerabilities in SocialCMS 1.0.2 allow remote attackers to hijack the authentication of administrators for requests that 1 add administrator accounts via a membernew action to myadmin/admin1members.php or 2 modify the default site title via a save action...
CVE-2012-1416: Cross-Site Request Forgery (CSRF)
Multiple cross-site request forgery CSRF vulnerabilities in SocialCMS 1.0.2 allow remote attackers to hijack the authentication of administrators for requests that 1 add administrator accounts via a membernew action to myadmin/admin1members.php or 2 modify the default site title via a save action...
SocialCMS Arbitrary File Upload Vulnerability
Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...
CVE-2012-1982
CVE-2012-1982 describes a cross-site scripting (XSS) vulnerability in SocialCMS 1.0.2 and earlier. The flaw is in the file my_admin/admin1_list_pages.php where an attacker with authenticated access can inject arbitrary web script or HTML via the TR_title parameter in an edit action. Affected soft...
CVE-2012-1982: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in myadmin/admin1listpages.php in SocialCMS 1.0.2 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the TRtitle parameter in an edit action...
SocialCMS 1.0.2 Cross Site Scripting
+------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : SocialCMS = 1.0.2 XSS Persistent and Reflected Vulnerabilities Date : 30-03-2012 Author : Ivano Binetti http://www.ivanobinetti.com Vendor site :...
SocialCMS <= 1.0.2 XSS (Persistent and Reflected) Vulnerabilities
Exploit for php platform in category web applications +------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : SocialCMS = 1.0.2 XSS Persistent and Reflected Vulnerabilities Date : 30-03-2012 Author :...
CVE-2012-1780
SQL injection vulnerability in search.php in SocialCMS 1.0.5 allows remote attackers to execute arbitrary SQL commands via the category parameter...
CVE-2012-1781
Multiple cross-site scripting XSS vulnerabilities in ajax/commentajax.php in SocialCMS 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the 1 TREFemailaddress or 2 TRname parameters...
Sql injection
SQL injection vulnerability in search.php in SocialCMS 1.0.5 allows remote attackers to execute arbitrary SQL commands via the category parameter...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in ajax/commentajax.php in SocialCMS 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the 1 TREFemailaddress or 2 TRname parameters...