CVE-2008-5670

Textpattern (Txp CMS) 4.0.5 is affected by a vulnerability in the password reset workflow: it does not require the old password, enabling a password change after session hijacking. This is documented across multiple sources (NVD/NVD-derived entries). Impact described as allowing remote attackers ...

CVE-2008-5669

index.php in the comments preview section in Textpattern aka Txp CMS 4.0.5 allows remote attackers to cause a denial of service via a long message parameter...

CVE-2008-5668

Multiple cross-site scripting XSS vulnerabilities in Textpattern aka Txp CMS 4.0.5 allow remote attackers to inject arbitrary web script or HTML via 1 the PATHINFO to setup/index.php or 2 the name parameter to index.php in the comments preview section...

CVE-2008-5668

Textpattern (Txp CMS) 4.0.5 is affected by multiple XSS vulnerabilities. The issues allow remote attackers to inject arbitrary scripts or HTML via (1) PATH_INFO to setup/index.php and (2) the name parameter to index.php in the comments preview section. This CVE (CVE-2008-5668) is documented acros...

[DSECRG-08-008] Textpattern 4.0.5 Multiple Security Vulnerabilities

Digital Security Research Group DSecRG Advisory DSECRG-08-008 Application: Txp CMS Versions Affected: 4.0.5 Vendor URL: http://www.textpattern.com Bugs: DOS, multiple XSS, etc. Exploits: YES Reported: 11.01.2008 Vendor response: 14.01.2008 Patch Released: 03.02.2008 Date of Public Advisory:...

DSECRG-08-008.txt

Digital Security Research Group DSecRG Advisory DSECRG-08-008 Application: Txp CMS Versions Affected: 4.0.5 Vendor URL: http://www.textpattern.com Bugs: DOS, multiple XSS, etc. Exploits: YES Reported: 11.01.2008 Vendor response: 14.01.2008 Patch Released: 03.02.2008 Date of Public Advisory:...

CVE-2006-5615

PHP remote file inclusion vulnerability in publish.php in Textpattern 1.19, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the txpcfgtxpath parameter...

CVE-2006-5615

Textpattern 1.19 is affected by a PHP remote file inclusion in publish.php when register_globals is enabled. The issue allows an attacker to execute arbitrary PHP code via a URL supplied in the txpcfg[txpath] parameter, indicating a remote code execution risk due to RFI. The available documents d...

CVE-2006-5615

PHP remote file inclusion vulnerability in publish.php in Textpattern 1.19, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the txpcfgtxpath parameter...

TextPattern <=1.19 Remote File Inclusion Vulnerability

---------------------------------------------------------------------------- TextPattern =g1.19 txpcfgtxpath Remote File Inclusion Vulnerability ---------------------------------------------------------------------------- Author : Zeni Susanto A.K.A Bithedz Date Found : October, 25th 2006 Locatio...

TextPattern-1.19.txt

---------------------------------------------------------------------------- TextPattern =g1.19 txpcfgtxpath Remote File Inclusion Vulnerability ---------------------------------------------------------------------------- Author : Zeni Susanto A.K.A Bithedz Date Found : October, 25th 2006 Locatio...

TextPattern <= 1.19 (publish.php) Remote File Inclusion Vulnerability

No description provided by source. ----------------------------------------------------------------------------br / TextPattern =g1.19 txpcfgtxpath Remote File Inclusion Vulnerabilitybr / ----------------------------------------------------------------------------br / br / Author : Zeni Susanto...

TextPattern 1.19 - publish.php Remote File Inclusion

TextPattern 1.19 - publish.php Remote File Inclusion ---------------------------------------------------------------------------- TextPattern =g1.19 txpcfgtxpath Remote File Inclusion Vulnerability ---------------------------------------------------------------------------- Author : Zeni Susanto...

TextPattern 1.19 - 'publish.php' Remote File Inclusion

---------------------------------------------------------------------------- TextPattern =g1.19 txpcfgtxpath Remote File Inclusion Vulnerability ---------------------------------------------------------------------------- Author : Zeni Susanto A.K.A Bithedz Date Found : October, 25th 2006 Locatio...

TextPattern <= 1.19 (publish.php) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ===================================================================== TextPattern = 1.19 publish.php Remote File Inclusion Vulnerability =====================================================================...