Dorsa Web CMS - Multiple SQL Injection Vulnerabilities

Document Title: =============== Dorsa Web CMS - Multiple SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1807 Release Date: ============= 2016-03-30 Vulnerability Laboratory ID VL-ID: ==================================== 180...

Scarlet Daisy Web CMS Cross Site Scripting

Scarlet Daisy Web CMS / || / / / / /\ /\ \ \ \ | / \ / http://h4x0resec.blogspot.com / \ | \ \ / // / \ / / / / Software info |App. : Scarlet Daisy Web Web Content Management System. |Software: http://www.scarletdaisy.com |Vulnerability Style : Cross Site Scripting |Date : "09.12.2014"...

Social Web CMS 2 'index.php' Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/38329/info Social Web CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of ...

DIY Web CMS Multiple Vulnerabilities

No description provided by source. SQL and XSS in DIY Web CMS found by : p0pc0rn 22/2/2011 web : http://www.mydiyweb.com.my dork : intext:powered by DiyWeb SQL - Microsoft JET Database Engine error ----------------------------------------- http://site.com/template.asp?menuid=SQL...

Joomla component com_universal Remote File Inclusion Vulnerability exploit

No description provided by source. Joomla component comuniversal = Remote File Inclusion Vulnerability exploit +Software: Joomla component comuniversal UWCMS Universal Web CMS +Version: 1.0.0 +License: http://www.gnu.org/copyleft/gpl.html GNU/GPL +Source: http://uwcms.sourceforge.net +CWE ID : 98...

ab web cms 1.35 - Multiple Vulnerabilities

No description provided by source. . . \ \ /| | \ /|| / / /\ \ | | | | \ \ \ | \ \ |/ \ \ | | \ / \ | /| | | Y \ // / | \ | | / \ \ / \ || /\ /| || || / /\ / || ||\ / / / / / / / / . ||/ | .. / | / // / | | \ \ \ | | \ / \ \ / \ \ \ /\ | | /| | / || | \ | | | \ / / | Y Y \ /...

Bigace_2.7.3 CSRF Change Admin Password PoC

No description provided by source. !/usr/bin/python Exploit Title : Bigace2.7.3 CSRF Change admin password POC Software : Bigace 2.7.3 Software link : http://www.bigace.de/download.html Autor : Sweet Email : [email protected] Date : 26/10/2010 Software version : 2.7.3 Software detail: BIGACE -...

K Web CMS 'sayfala.asp' SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/30745/info K Web CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Trawler Web CMS <= 1.8.1 - Multiple Remote File Include Vulnerabilities

No description provided by source. trawler = 1.8.1 Remote File Inclusion Download Source : http://harald-kampen.de/trawler1.8.1.zip Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net exploit;...

N/X - Web CMS (N/X WCMS 4.5) Multiple Vulnerability

No description provided by source. N/X - Web CMS N/X WCMS 4.5 Multiple Vulnerability =================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ /'...

DynMedia Pro Web CMS 4.0 - Local File Disclosure

No description provided by source. |||!===========================================================================! DynMedia Pro Web CMS 4.0 ||Local File Disclosure Exploit| | Author : MbahSemar [email protected] Homepage : http://www.indonesianhacker.or.id | http://suramcrew.org |...

social web cms <= beta 2 - Multiple Vulnerabilities

No description provided by source. Author: cp77fk4r | Empty0pagEShift+2gmail.comhttp://gmail.com/ Software Link: http://www.socialwebcms.com Version: X = Beta 2 Vulnz: Directory Listing http://server/modules/ XSS http://server/index.php?category=%22%3EXSS CSRF -Add friends:...

DBSite wb CMS 'index.php' Multiple Cross Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/39613/info DBSite wb CMS is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script...

BIGACE Web CMS SQL注入和本地文件包含漏洞

Bugtraq ID:66350 BIGACE Web CMS是一款基于WEB的内容管理系统。 BIGACE Web CMS存在SQL注入和文件包含漏洞，允许攻击者利用漏洞获取或操作数据库数据或获取敏感文件内容信息。 0 BIGACE Web CMS 2.7.5 目前没有详细解决方案提供： http://sourceforge.net/projects/bigace/files/bigace2.7.5.zip http://www.example.com/bigace2.7.5/bigaceinstall2.7.5/public/index.php?menu=3LANGUAGE=LFI...

BigACE 2.7.5 - LANGUAGE Directory Traversal

BigACE 2.7.5 - LANGUAGE Directory Traversal source: https://www.securityfocus.com/bid/66350/info BIGACE Web CMS is prone to an SQL-injection vulnerability and a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker can exploit these...

HZChoice CMS SQL Injection

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- In The Name Of God -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= -------------------------------------------------------------------------------- @ HZChoice CMS SQL Vulnerability...

Charles River Web CMS Cross Site Scripting

Exploit Title : Charles-River-Web Cms Cross Site Scripting Vulnerabilitiy Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir & Http://Security7.ir Software Link : http://www.charlesriverweb.com/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server -...

Update: Vulnerability in plugins for Typepad, RapidWeaver, Habari, DasBlo, eZ Publish, EE, Serendipity, Social Web CMS, PHP-Fusion, Magento and Sweetcron

Hello 3APA3A! One update concerning Cross-Site Scripting vulnerability in multiple plugins for different engines in plugins for Typepad, RapidWeaver, Habari, DasBlo, eZ Publish, EE, Serendipity, Social Web CMS, PHP-Fusion, Magento and Sweetcron, which all are ports of WP-Cumulus. Which I wrote...

Vulnerability in plugins for Typepad, RapidWeaver, Habari, DasBlo, eZ Publish, EE, Serendipity, Social Web CMS, PHP-Fusion, Magento and Sweetcron

Hello 3APA3A! I want to warn you about Cross-Site Scripting vulnerability in multiple plugins for different engines it's combinations of my three publications which I've made earlier at my site. In plugins for Typepad, RapidWeaver, Habari, DasBlo, eZ Publish, EE, Serendipity, Social Web CMS,...

WP-Cumulus Variants Cross Site Scripting

Hello list! I want to warn you about Cross-Site Scripting vulnerability in multiple plugins for different engines it's combinations of my two publications which I've made last week at my site. In plugins for RapidWeaver, Habari, DasBlo, eZ Publish, EE, Serendipity, Social Web CMS, PHP-Fusion,...