CVE-2007-1872

Cross-site scripting XSS vulnerability in toendaCMS 1.5.3 allows remote attackers to inject arbitrary web script or HTML via the searchword parameter in a search id...

CVE-2007-1872: Cross site scripting in toendaCMS 1.5.3

Cross site scripting in toendaCMS 1.5.3 security advisory References: http://www.toendacms.com/ https://vulners.com/cve/CVE-2007-1872 Description: Cross site scripting describes attacks that allow to insert malicious html or javascript code via get or post forms. This can be used to steal session...

ToendaCMS 1.5.3 - GET POST Forms HTML Injection

ToendaCMS 1.5.3 - GET POST Forms HTML Injection source: https://www.securityfocus.com/bid/23453/info ToendaCMS is prone to an HTML-injection scripting vulnerability because the application fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code would execute in the...

ToendaCMS 1.5.3 - GET / POST Forms HTML Injection

source: https://www.securityfocus.com/bid/23453/info ToendaCMS is prone to an HTML-injection scripting vulnerability because the application fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code would execute in the context of the affected site, potentially allowi...

CVE-2007-1872.txt

Cross site scripting in toendaCMS 1.5.3 security advisory References: http://www.toendacms.com/ http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1872 Description: Cross site scripting describes attacks that allow to insert malicious html or javascript code via get or post forms. This can be...

ToendaCMS 1.0.4 - Media.php Directory Traversal

ToendaCMS 1.0.4 - Media.php Directory Traversal source: https://www.securityfocus.com/bid/20170/info toendaCMS is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow an attacker to access sensitive...

ToendaCMS 1.0.4 - 'Media.php' Directory Traversal

source: https://www.securityfocus.com/bid/20170/info toendaCMS is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow an attacker to access sensitive information that could aid in further attacks. Version...

ToendaCMS 0.x/1.0.x - Remote File Inclusion

source: https://www.securityfocus.com/bid/19806/info ToendaCMS is prone a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the conte...

ToendaCMS 0.x1.0.x - Remote File Inclusion

ToendaCMS 0.x1.0.x - Remote File Inclusion source: https://www.securityfocus.com/bid/19806/info ToendaCMS is prone a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing...

Submit ( ToendaCMS<= ( Remote File Include Vulnerabilities )

PerSiaNFoX DigitaL SecuritY TeaM ToendaCMS= Remote File Include Vulnerabilities Script.............. : toendaCMS Discovered By.... : Root3rH3ll Location .......... : Iran Class.............. : Remote Original Advisory : http://Www.PersainFox.com We ArE : Root3rH3LL , Arash.RJ Spical TNX HB Team ,...

toendaCMS103.txt

Iranians Are The Bests ToendaCMS Descriptions Script.............. : ToendaCMS Discovered By.... : YouYou Risk : High Class.............. : Remote Special Thanx To All Aria-Security's Administrators ----------------------------------------------------------------------------------- Source :...

CVE-2006-4349

PHP remote file inclusion vulnerability in ToendaCMS 1.0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the tcmsadministersite parameter to an unspecified script, probably index.php. NOTE: this issue has been disputed by a third party, who states that...

CVE-2006-4349

ToendaCMS 1.0.3 and earlier is affected by a PHP remote file inclusion vulnerability. The issue allows a remote attacker to execute arbitrary PHP code by supplying a URL in the tcms_administer_site parameter to an unspecified script, probably index.php. Some sources dispute that tcms_administer_s...

CVE-2006-4349

PHP remote file inclusion vulnerability in ToendaCMS 1.0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the tcmsadministersite parameter to an unspecified script, probably index.php. NOTE: this issue has been disputed by a third party, who states that...

ToendaCMS 0.x1.0.x - TCMS_Administer Remote File Inclusion

ToendaCMS 0.x1.0.x - TCMSAdminister Remote File Inclusion source: https://www.securityfocus.com/bid/19626/info ToendaCMS is prone a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file...

ToendaCMS <= 1.0.3 -(tcms_administer_site) Remote File Include

Iranians Are The Bests ToendaCMS = 1.0.3 -tcmsadministersite Remote File Include Descriptions Script.............. : ToendaCMS Discovered By.... : YouYou Risk : High Class.............. : Remote Special Thanx To All Aria-Security's Administrators...

ToendaCMS 0.x/1.0.x - 'TCMS_Administer' Remote File Inclusion

source: https://www.securityfocus.com/bid/19626/info ToendaCMS is prone a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the conte...

CVE-2006-4016

Cross-site scripting XSS vulnerability in /toendaCMS in toendaCMS stable 1.0.3 and earlier, and unstable 1.1 and earlier, allows remote attackers to inject arbitrary web script or HTML via the s parameter...

CVE-2006-4016

The CVE-2006-4016 entry concerns a Cross-site Scripting (XSS) flaw in toendaCMS. Affected software: toendaCMS stable versions 1.0.3 and earlier, and unstable 1.1 and earlier. The vulnerability occurs in the s parameter of the /toendaCMS endpoint, allowing remote attackers to inject arbitrary web ...

CVE-2006-4016

Cross-site scripting XSS vulnerability in /toendaCMS in toendaCMS stable 1.0.3 and earlier, and unstable 1.1 and earlier, allows remote attackers to inject arbitrary web script or HTML via the s parameter...