TLM CMS 3.1 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/28837/info TLM CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...

Sql injection

Multiple SQL injection vulnerabilities in TLM CMS 3.2 allow remote attackers to execute arbitrary SQL commands via 1 the id parameter to news.php in a lirenews action, 2 the idnews parameter to goodies.php in a lire action, 3 the id parameter to file.php in a voir action, 4 the ID parameter to...

CVE-2007-4808

Multiple SQL injection vulnerabilities in TLM CMS 3.2 allow remote attackers to execute arbitrary SQL commands via 1 the id parameter to news.php in a lirenews action, 2 the idnews parameter to goodies.php in a lire action, 3 the id parameter to file.php in a voir action, 4 the ID parameter to...

CVE-2007-4808

CVE-2007-4808 describes multiple SQL injection vulnerabilities in TLM CMS 3.2 (also affecting 3.1/1.1 via notes) that allow remote attackers to inject arbitrary SQL through six parameters across several scripts (news.php, goodies.php, file.php, affichage.php, mod_forum/afficher.php, mod_forum/mes...

CVE-2007-4808

Multiple SQL injection vulnerabilities in TLM CMS 3.2 allow remote attackers to execute arbitrary SQL commands via 1 the id parameter to news.php in a lirenews action, 2 the idnews parameter to goodies.php in a lire action, 3 the id parameter to file.php in a voir action, 4 the ID parameter to...

TLM CMS SQL注入漏洞

TLM CMS是一款基于PHP的WEB应用程序。 TLM CMS不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL攻击，获得敏感信息或操作数据库。 问题是由于脚本对用户提交的WEB参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，攻击者可以获得敏感信息或操作数据库。 TLM CMS 3.2 目前没有详细解决方案提供： http://tlm.hebserv.fr/home.php...

TLM CMS 3.2 - Multiple SQL Injections

TLM CMS 3.2 - Multiple SQL Injections TLM CMS v3.2 - Multiple Remote SQL Injection Vulnerabilities Vendor : http://tlm.hebserv.fr/ Download : http://tlm.hebserv.fr/modfile/upload/tlmcms32.zip Ditemukan oleh : k1tk4t - k1tk4t4tnewhack.org Lokasi : Indonesia -- newhackdotorg @ irc.dal.net Kutu pada...

TLM CMS 3.2 Multiple Remote SQL Injection Vulnerabilities

No description provided by source. TLM CMS v3.2 - Multiple Remote SQL Injection Vulnerabilities Vendor : http://tlm.hebserv.fr/ Download : http://tlm.hebserv.fr/modfile/upload/tlmcms32.zip Ditemukan oleh : k1tk4t - k1tk4t4tnewhack.org Lokasi : Indonesia -- newhackdotorg @ irc.dal.net Kutu pada...

TLM CMS 3.2 Multiple Remote SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ========================================================= TLM CMS 3.2 Multiple Remote SQL Injection Vulnerabilities ========================================================= TLM CMS v3.2 - Multiple Remote SQL Injection Vulnerabilities Vend...

CVE-2007-0300

PHP remote file inclusion vulnerability in i-accueil.php in TLM CMS 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the chemin parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in i-accueil.php in TLM CMS 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the chemin parameter...

CVE-2007-0300

The CVE-2007-0300 entry documents a PHP remote file inclusion in i-accueil.php of TLM CMS 1.1 and earlier. The underlying issue is that an attacker can cause the CMS to include a PHP file from a URL supplied via the chemin parameter, enabling remote code execution. The affected software is TLM CM...

CVE-2007-0300

PHP remote file inclusion vulnerability in i-accueil.php in TLM CMS 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the chemin parameter...

TLM CMS Chemin参数远程文件包含漏洞

TLM CMS是一款基于PHP的WEB应用程序。 TLM CMS不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'i-accueil.php'脚本对用户提交的'Chemin'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 comscripts.com TLM CMS 1.1 目前没有解决方案提供： http://www.comscripts.com/scripts/php.tlm-cms.2175.html http://www.example.com/i-accueil.php?chemin=EV!L.C0D3.Tx...

TLM CMS <= 1.1 (i-accueil.php chemin) Remote File Include Vulnerability

No description provided by source. /\ Citations Al顴oires v1.1 ========================================================= Published : 2007-01-12 Remote: Yes Site: ftp://ftp1.comscripts.com/PHP/1809citation-11.zip Author: GolDM = Mahmoodali &nb...

TLM CMS <= 1.1 (i-accueil.php chemin) Remote File Include Vulnerability

/ Citations Alatoires v1.1 ========================================================= Published : 2007-01-12 Remote: Yes Site: ftp://ftp1.comscripts.com/PHP/1809citation-11.zip Author: GolDM = Mahmoodali Contact: [email protected] ===================================================== ThanX =All My...

TLM CMS <= 1.1 (i-accueil.php chemin) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ======================================================================= TLM CMS = 1.1 i-accueil.php chemin Remote File Include Vulnerability ======================================================================= /\ Published : 2007-01-12...

TLM CMS 1.1 - i-accueil.php?chemin Remote File Inclusion

TLM CMS 1.1 - i-accueil.php?chemin Remote File Inclusion /\ Citations Aléatoires v1.1 ========================================================= Published : 2007-01-12 Remote: Yes Site: ftp://ftp1.comscripts.com/PHP/1809citation-11.zip Author: GolDM = Mahmoodali Contact: [email protected]...

TLM CMS 1.1 - 'i-accueil.php?chemin' Remote File Inclusion

/\ Citations Aléatoires v1.1 ========================================================= Published : 2007-01-12 Remote: Yes Site: ftp://ftp1.comscripts.com/PHP/1809citation-11.zip Author: GolDM = Mahmoodali Contact: [email protected] ===================================================== ThanX =All My...