Multiple vulnerabilities in OpenCMS

Multiple access control and input validation vulnerabilities in OpenCMS Open Source Website Content Management System 0. ORIGINAL ADVISORY http://o0o.nu/meder/OpenCMSmultiplevulnerabilities.txt I. BACKGROUND OpenCms is a professional level Open Source Website Content Management System. OpenCms...

Update Protection against Geeklog Remote Code Execution Vulnerability

Geeklog is a PHP/MySQL based application for managing dynamic web content. Geeklog CMS fails to validate multiple file extensions, potentially allowing a remote attacker to upload malicious script code, which will be executed in the context of the webserver process...

mvnForum activatemember Multiple Parameter XSS

The remote host is running mvnForum, an open source, forum application based on Java J2EE. The version of mvnForum installed on the remote host fails to sanitize user-supplied input to the 'activatecode' and 'member' parameters of the 'activatemember' script before using it to generate dynamic we...

"View Image" local resource linking (Windows) — Mozilla

Normally Mozilla-based clients prevent web content from linking to local files but Eric Foley reports a partial bypass of this restriction by using Windows filename syntax on a Windows computer rather than a file:/// URL as the SRC= attribute. The image will not be loaded on the web page--it will...

[KAPDA::#43] - phpwcms multiple vulnerabilities

Vendor: http://www.phpwcms.de Bugs: Path Disclosure, XSS, Local File Inclusion, Remote Code Execution Vulnerable Version: phpwcms 1.2.5-DEV prior versions also maybe affected Exploitation: Remote with browser Description: -------------------- phpwcms is a web content management system optimized f...

VSR Advisory: WebSense content filter bypass when deployed in conjunction with Cisco filtering devices

Cisco Response ============== This is Cisco PSIRT's response to the statements made by George Gal in his advisory: WebSense Content Filter Bypass in conjunction with Cisco PIX in packet filter mode, posted on May 08, 2006. The original email/advisory is available at...

ContentBoxx Login.php Cross-Site Scripting

Website : http://www.contentboxx.info/en/ Author : Botan Description: Web Content Management ContentBoxX is a professional software upon which the production of editorial systems, used in the maintenance of Internet and Intranet offers, are based. ContentBoxX is suited for use in demanding Web...

SAXoPRESS pbcs.dll url Parameter Traversal Arbitrary File Access

The remote host is running SAXoPRESS or Publicus, web content management systems commonly used by newspapers. The installation of SAXoPRESS / Publicus on the remote host fails to validate user input to the 'url' parameter of the 'apps/pbcs.dll' script. An attacker can exploit this issue to access...

CVE-2005-4364

Cross-site scripting XSS vulnerability in index.cfm in Hot Banana Web Content Management Suite 5.3 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter...

CVE-2005-4364

Cross-site scripting XSS vulnerability in index.cfm in Hot Banana Web Content Management Suite 5.3 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter...

CVE-2005-4364

The CVE-2005-4364 entry describes a Cross-site scripting (XSS) vulnerability in the Hot Banana Web Content Management Suite 5.3, specifically in index.cfm where the keywords parameter can be exploited to inject arbitrary web script or HTML. The accompanying data indicates an impact on confidentia...

NQcontent V3 XSS vuln.

NQcontent V3 XSS vuln. Vuln. discovered by : r0t Date: 19 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/nqcontent-v3-xss-vuln.html vendor:http://www.nqcontent.com/ affected version:V3 Professional Edition,V3 Enterprise Edition,V3 Comparison Matrix. Product Description: NQcontent ...

Hot Banana Web Content Management Suite 5.3 - Cross-Site Scripting

Hot Banana Web Content Management Suite 5.3 - Cross-Site Scripting source: https://www.securityfocus.com/bid/15948/info Web Content Management Suite is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An...

Hot Banana Web Content Management Suite 5.3 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/15948/info Web Content Management Suite is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute...

Hot Banana XSS vuln.

Hot Banana XSS vuln. Vuln. discovered by : r0t Date: 17 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/hot-banana-xss-vuln.html vendor:www.hotbanana.com/products/web-content-management-suite/ affected version: 5.3 and prior Description: Founded in 1999, Hot Banana powers Web sites...

Baseline CMS vuln.

Baseline CMS vuln. Vuln. discovered by : r0t Date: 17 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/baseline-cms-vuln.html vendor:http://www.nma.ca/ affected version: 1.95 and prior Product Description: Baseline CMS is a powerful, web-based content management system that gives yo...

WebCalendar 1.0.1 - Layers_Toggle.php HTTP Response Splitting

WebCalendar 1.0.1 - LayersToggle.php HTTP Response Splitting source: https://www.securityfocus.com/bid/15673/info WebCalendar is prone to an HTTP response-splitting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. A remote attacker may...

WebCalendar 1.0.1 - 'Layers_Toggle.php' HTTP Response Splitting

source: https://www.securityfocus.com/bid/15673/info WebCalendar is prone to an HTTP response-splitting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. A remote attacker may exploit this vulnerability to influence or misrepresent how web...

CVE-2005-3348

HTTP response splitting vulnerability in index.php in phpSysInfo 2.4 and earlier, as used in phpgroupware 0.9.16 and earlier, and egroupware before 1.0.0.009, allows remote attackers to spoof web content and poison web caches via CRLF sequences in the charset parameter...

CVE-2005-3348

HTTP response splitting vulnerability in index.php in phpSysInfo 2.4 and earlier, as used in phpgroupware 0.9.16 and earlier, and egroupware before 1.0.0.009, allows remote attackers to spoof web content and poison web caches via CRLF sequences in the charset parameter...