73 matches found
ToendaCMS 1.0.0 - FCKeditor Arbitrary File Upload
ToendaCMS 1.0.0 - FCKeditor Arbitrary File Upload !/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; retur...
toendaCMS <= 1.0.0 (FCKeditor) Remote File Upload Exploit
Exploit for unknown platform in category web applications ========================================================= toendaCMS 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15...
toendaCMS <= 1.0.0 (FCKeditor) Remote File Upload Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "ToendaCMS = 1.0.0 Shizouka stable 'FuCKeditor' remote commands execution\n"; echo "by rgod [email protected]\n"; echo "site: http://retrogod.altervista.org\n"; echo "dork: "toendaCMS is Free Software released under th...
ToendaCMS 1.0.0 - 'FCKeditor' Arbitrary File Upload
!/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return $exa."\r\n".$result; $proxyregex =...
Cross site scripting
Cross-site scripting XSS vulnerability in contentfooter.php in toendaCMS 0.7.0 allows remote attackers to inject arbitrary web scripts or HTML via the printurl variable. NOTE: the provenance of this information is unknown; the details are obtained solely from third party sources...
CVE-2006-2799
Cross-site scripting XSS vulnerability in contentfooter.php in toendaCMS 0.7.0 allows remote attackers to inject arbitrary web scripts or HTML via the printurl variable. NOTE: the provenance of this information is unknown; the details are obtained solely from third party sources...
CVE-2006-2799
Cross-site scripting XSS vulnerability in contentfooter.php in toendaCMS 0.7.0 allows remote attackers to inject arbitrary web scripts or HTML via the printurl variable. NOTE: the provenance of this information is unknown; the details are obtained solely from third party sources...
CVE-2006-2799
CVE-2006-2799 describes a Cross-Site Scripting (XSS) vulnerability in toendaCMS 0.7.0, specifically in content_footer.php where the print_url parameter can be exploited to inject arbitrary web scripts or HTML. The vulnerability is exploitable remotely and is categorized with a CVSS v2 base score ...
toendaCMS 0.7.0 Cross Site Scripting
Discovery By: Jokubas.S =================================== Example: http://target/?id=XSS =================================== irc.data.lt offence ===================================...
ToendaCMS 0.7 - index.php Cross-Site Scripting
ToendaCMS 0.7 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/18178/info ToendaCMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...
ToendaCMS 0.7 - 'index.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/18178/info ToendaCMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of ...
CVE-2005-4422
Unrestricted file upload vulnerability in toendaCMS before 0.6.2 Stable allows remote authenticated administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in data/images/albums...
CVE-2005-4422
Unrestricted file upload vulnerability in toendaCMS before 0.6.2 Stable allows remote authenticated administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in data/images/albums...
CVE-2005-4422
CVE-2005-4422 affects toendaCMS prior to 0.6.2 Stable. The vulnerability is an unrestricted file upload that lets remote authenticated administrators execute arbitrary code by uploading a file with an executable extension and then accessing it via a direct request to data/images/albums. The issue...
CVE-2005-4353
SQL injection vulnerability in index.php in toendaCMS 0.6.2.1, when configured to use a SQL database, allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2005-4353
The CVE-2005-4353 entry describes an SQL injection in toendaCMS 0.6.2.1 when configured to use a SQL database. The vulnerability occurs in index.php and allows remote attackers to alter or extract data by injecting arbitrary SQL through the id parameter. Affected product: toendaCMS 0.6.2.1 (SQL-e...
CVE-2005-4353
SQL injection vulnerability in index.php in toendaCMS 0.6.2.1, when configured to use a SQL database, allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2005-4277
Cross-site scripting XSS vulnerability in index.php in toendaCMS before 0.7 Beta allows remote attackers to inject arbitrary web script or HTML via the id parameter...
CVE-2005-4277
Cross-site scripting XSS vulnerability in index.php in toendaCMS before 0.7 Beta allows remote attackers to inject arbitrary web script or HTML via the id parameter...
CVE-2005-4277
CVE-2005-4277 is an XSS vulnerability in toendaCMS prior to 0.7 Beta. The flaw resides in index.php where the id parameter can be manipulated to inject arbitrary script/HTML, enabling remote attackers to execute client-side code. Affected product: toendaCMS (before 0.7 Beta). The provided documen...