30 matches found
EUVD-2012-1791
Malware in sbrugna...
EUVD-2012-1790
Malware in sbrugna...
EUVD-2012-1991
Malware in sbrugna...
EUVD-2012-1441
Malware in sbrugna...
SocialCMS1.0.2 - Multiple CSRF Vulnerabilities
No description provided by source. !--- Title: socialcms1.0.2 Multiple CSRF Vulnerabilities Author: vir0e5 a.k.a banditc0de [email protected] Date: Wed 20 april 2011 11:18:22 AM Vendor: www.socialcms.com Download: http://sourceforge.net/projects/socialcms/ --- !-- Create Admin User -- body...
SocialCMS 1.0.2 - CSRF Vulnerability
No description provided by source. +-------------------------------------------------------------------------+ Exploit Title : Socialcms CSRF Vulnerability Date : 16-02-2012 Author : Ivano Binetti http://ivanobinetti.com Vendor site : http://socialcms.com Software link :...
CVE-2012-1416
Multiple cross-site request forgery CSRF vulnerabilities in SocialCMS 1.0.2 allow remote attackers to hijack the authentication of administrators for requests that 1 add administrator accounts via a membernew action to myadmin/admin1members.php or 2 modify the default site title via a save action...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in SocialCMS 1.0.2 allow remote attackers to hijack the authentication of administrators for requests that 1 add administrator accounts via a membernew action to myadmin/admin1members.php or 2 modify the default site title via a save action...
CVE-2012-1416
Multiple cross-site request forgery CSRF vulnerabilities in SocialCMS 1.0.2 allow remote attackers to hijack the authentication of administrators for requests that 1 add administrator accounts via a membernew action to myadmin/admin1members.php or 2 modify the default site title via a save action...
CVE-2012-1416
The CVE-2012-1416 entry concerns CSRF flaws in SocialCMS 1.0.2 that allow an attacker to hijack administrator sessions by triggering (1) member_new to create admin accounts or (2) saving a new site title via admin interfaces. Affected software: SocialCMS 1.0.2; impact described as unauthorized ad...
SocialCMS Arbitrary File Upload Vulnerability
Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...
CVE-2012-1982
CVE-2012-1982 describes a cross-site scripting (XSS) vulnerability in SocialCMS 1.0.2 and earlier. The flaw is in the file my_admin/admin1_list_pages.php where an attacker with authenticated access can inject arbitrary web script or HTML via the TR_title parameter in an edit action. Affected soft...
SocialCMS 1.0.2 Cross Site Scripting
+------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : SocialCMS = 1.0.2 XSS Persistent and Reflected Vulnerabilities Date : 30-03-2012 Author : Ivano Binetti http://www.ivanobinetti.com Vendor site :...
SocialCMS <= 1.0.2 XSS (Persistent and Reflected) Vulnerabilities
Exploit for php platform in category web applications +------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : SocialCMS = 1.0.2 XSS Persistent and Reflected Vulnerabilities Date : 30-03-2012 Author :...
CVE-2012-1781
Multiple cross-site scripting XSS vulnerabilities in ajax/commentajax.php in SocialCMS 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the 1 TREFemailaddress or 2 TRname parameters...
CVE-2012-1780
SQL injection vulnerability in search.php in SocialCMS 1.0.5 allows remote attackers to execute arbitrary SQL commands via the category parameter...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in ajax/commentajax.php in SocialCMS 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the 1 TREFemailaddress or 2 TRname parameters...
Sql injection
SQL injection vulnerability in search.php in SocialCMS 1.0.5 allows remote attackers to execute arbitrary SQL commands via the category parameter...
CVE-2012-1780
CVE-2012-1780 is a SQL injection vulnerability in SocialCMS 1.0.5, triggered through the category parameter in search.php. The vulnerability allows remote attackers to execute arbitrary SQL commands. The cited sources confirm the affected component and the injection vector, with no publicly docum...
CVE-2012-1781
Multiple cross-site scripting XSS vulnerabilities in ajax/commentajax.php in SocialCMS 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the 1 TREFemailaddress or 2 TRname parameters...