CVE-2012-1780

CVE-2012-1780 is a SQL injection vulnerability in SocialCMS 1.0.5, triggered through the category parameter in search.php. The vulnerability allows remote attackers to execute arbitrary SQL commands. The cited sources confirm the affected component and the injection vector, with no publicly docum...

CVE-2012-1781

CVE-2012-1781 affects SocialCMS 1.0.5. The vulnerability is multiple cross-site scripting (XSS) in ajax/commentajax.php, exploitable via the parameters TREF_email_address and TR_name , enabling remote attackers to inject arbitrary web script or HTML. The provided sources confirm the affected comp...

SocialCMS Cross Site Scripting / SQL Injection

Exploit Title: SocialCMS SQL Injection and XSS Vulnerability Date: 2012 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability Web Site: www.eyupcelik.com.tr ISSUE SQL Injection and XSS can be done using the POST method. Vulnerable Page: ajax/commentajax.php SQL Injecti...

SocialCMS 1.0.2 - Cross-Site Request Forgery

SocialCMS 1.0.2 - Cross-Site Request Forgery +-------------------------------------------------------------------------+ Exploit Title : Socialcms CSRF Vulnerability Date : 16-02-2012 Author : Ivano Binetti http://ivanobinetti.com Vendor site : http://socialcms.com Software link :...

SocialCMS 1.0.2 - Cross-Site Request Forgery

+-------------------------------------------------------------------------+ Exploit Title : Socialcms CSRF Vulnerability Date : 16-02-2012 Author : Ivano Binetti http://ivanobinetti.com Vendor site : http://socialcms.com Software link :...

SocialCMS CSRF Vulnerability

Exploit for php platform in category web applications +-------------------------------------------------------------------------+ Exploit Title : Socialcms CSRF Vulnerability Date : 16-02-2012 Author : Ivano Binetti http://ivanobinetti.com Vendor site : http://socialcms.com Software link :...

SocialCMS1.0.2 Multiple CSRF Vulnerabilities

Exploit for php platform in category web applications Date: Wed 20 april 2011 11:18:22 AM Vendor: www.socialcms.com Download: http://sourceforge.net/projects/socialcms/ --- input type="hidden" name="TRconfigurationvalue" value="HA...

Social CMS 1.0.2 Cross Site Request Forgery

Date: Wed 20 april 2011 11:18:22 AM Vendor: www.socialcms.com Download: http://sourceforge.net/projects/socialcms/ --- input type="hidden" name="INconfigurat...

SocialCMS 1.0.2 - Multiple Cross-Site Request Forgery Vulnerabilities

SocialCMS 1.0.2 - Multiple Cross-Site Request Forgery Vulnerabilities Date: Wed 20 april 2011 11:18:22 AM Vendor: www.socialcms.com Download: http://sourceforge.net/projects/socialcms/ --- input type="hidden" name="configurationdescription" val...

SocialCMS 1.0.2 - Multiple Cross-Site Request Forgery Vulnerabilities

Date: Wed 20 april 2011 11:18:22 AM Vendor: www.socialcms.com Download: http://sourceforge.net/projects/socialcms/ --- input type="hidden" name="INconfigurationpriorit...