EUVD-2008-2965

Malware in sbrugna...

EUVD-2008-2966

Malware in sbrugna...

TinX CMS 3.5 'rss.php' SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/34021/info TinX CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

tinx cms 1.1 (lfi/xss) Multiple Vulnerabilities

No description provided by source...

TinX CMS rss.php模块SQL注入漏洞

BUGTRAQ ID: 34021 CVECAN ID: CVE-2009-0825 TinX/cms是使用PHP/MySQL编写的开源内容管理系统。 TinX的CMS rss.php模块中没有正确地验证传送给id参数的用户输入，远程攻击者可以通过提交恶意请求执行SQL注入攻击。 TinX/cms 3.x 厂商补丁： TinX/cms -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://sourceforge.net/project/shownotes.php?groupid=133415&releaseid=658540...

TinX CMS 'rss.php' SQL Injection Vulnerability

TinX CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying...

Sql injection

SQL injection vulnerability in system/rss.php in TinX/cms 3.x before 3.5.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-0825

SQL injection vulnerability in system/rss.php in TinX/cms 3.x before 3.5.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-0825

SQL injection vulnerability in system/rss.php in TinX/cms 3.x before 3.5.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

[Positive Technologies SA:2009-13] TinX CMS 3.x SQL Injection Vulnerability

---------------------------------------------------------------------- PT-2009-13 Positive Technologies Security Advisory TinX CMS SQL Injection vulnerability ---------------------------------------------------------------------- --- Affected Software TinX CMS Versions 3.x prior to 3.5.1 Product...

TinXCMS 3.5 - rss.php SQL Injection

TinXCMS 3.5 - rss.php SQL Injection source: https://www.securityfocus.com/bid/34021/info TinX CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise th...

TinXCMS 3.5 - 'rss.php' SQL Injection

source: https://www.securityfocus.com/bid/34021/info TinX CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data...

TinX CMS SQL Injection

---------------------------------------------------------------------- PT-2009-13 Positive Technologies Security Advisory TinX CMS SQL Injection vulnerability ---------------------------------------------------------------------- --- Affected Software TinX CMS Versions 3.x prior to 3.5.1 Product...

PT-2009-13: TinX CMS SQL Injection Vulnerability

TinX CMS is a content management system CMS software, usually implemented as a Web application, for creating and managing HTML content. It is used to manage and control a large, dynamic collection of Web material HTML documents and their associated images. Vulnerability Description Positive...

Directory traversal

Multiple directory traversal vulnerabilities in TinX/cms 1.1, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 language parameter to a includeme.php, b admin/ajax.php, and c...

CVE-2008-2975

Cross-site scripting XSS vulnerability in admin/objects/objimage.php in TinX/cms 1.1 allows remote attackers to inject arbitrary web script or HTML via the language parameter...

CVE-2008-2976

Multiple directory traversal vulnerabilities in TinX/cms 1.1, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 language parameter to a includeme.php, b admin/ajax.php, and c...

Cross site scripting

Cross-site scripting XSS vulnerability in admin/objects/objimage.php in TinX/cms 1.1 allows remote attackers to inject arbitrary web script or HTML via the language parameter...

CVE-2008-2976

Multiple directory traversal vulnerabilities in TinX/cms 1.1, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 language parameter to a includeme.php, b admin/ajax.php, and c...

CVE-2008-2976

TinX/cms 1.1 is affected by multiple directory traversal vulnerabilities. When register_globals is enabled, remote attackers can cause local file inclusion via directory traversal sequences in the language parameter to include_me.php, admin/ajax.php, and admin/objects/catalog.ajaxhandler.php, and...