Directory traversal

Directory traversal vulnerability in showTempFile.php in webEdition CMS before 6.3.9.0 Beta allows remote authenticated users to read arbitrary files via a .. dot dot in the file parameter...

CVE-2014-5258

CVE-2014-5258 affects webEdition CMS (pre-6.3.9.0 Beta) where showTempFile.php is vulnerable to directory traversal via the file parameter. The flaw allows remote authenticated users to read arbitrary server files by crafting ../ sequences. Public sources (HTB HTB23227 advisory and CVE entries) c...

CVE-2014-5258

Directory traversal vulnerability in showTempFile.php in webEdition CMS before 6.3.9.0 Beta allows remote authenticated users to read arbitrary files via a .. dot dot in the file parameter...

Path Traversal in webEdition

Advisory ID: HTB23227 Product: webEdition Vendor: webEdition e.V. Vulnerable Versions: 6.3.8.0 SVN-Revision: 6985 and probably prior Tested Version: 6.3.8.0 SVN-Revision: 6985 Advisory Publication: August 6, 2014 without technical details Vendor Notification: August 6, 2014 Vendor Patch: Septembe...

[RT-SA-2014-005] SQL Injection in webEdition CMS File Browser Installer Script

Advisory: SQL Injection in webEdition CMS File Browser RedTeam Pentesting discovered an SQL injection vulnerability in the file browser component of webEdition CMS during a penetration test. Unauthenticated attackers can get read-only access on the SQL database used by webEdition and read for...

[RT-SA-2014-004] Remote Command Execution in webEdition CMS Installer Script

Advisory: Remote Command Execution in webEdition CMS Installer Script RedTeam Pentesting discovered a remote command execution vulnerability in the installer script of the webEdition CMS during a penetration test. If the installer script is not manually removed after installation, attackers canno...

CVE-2014-2303

Multiple SQL injection vulnerabilities in the file browser component wefs.php in webEdition CMS before 6.2.7-s1.2 and 6.3.x through 6.3.8 before -s1 allow remote attackers to execute arbitrary SQL commands via the 1 table or 2 order parameter...

Sql injection

Multiple SQL injection vulnerabilities in the file browser component wefs.php in webEdition CMS before 6.2.7-s1.2 and 6.3.x through 6.3.8 before -s1 allow remote attackers to execute arbitrary SQL commands via the 1 table or 2 order parameter...

CVE-2014-2303

Multiple SQL injection vulnerabilities in the file browser component wefs.php in webEdition CMS before 6.2.7-s1.2 and 6.3.x through 6.3.8 before -s1 allow remote attackers to execute arbitrary SQL commands via the 1 table or 2 order parameter...

CVE-2014-2303

The CVE-2014-2303 issue affects webEdition CMS, specifically the file browser component we_fs.php. It describes SQL injection via the GET parameters table and order that can be exploited to execute arbitrary SQL, with unauthenticated attackers potentially reading the CMS’s database (including pas...

webEdition CMS 2.8.0.0 Remote Command Execution

Advisory: Remote Command Execution in webEdition CMS Installer Script RedTeam Pentesting discovered a remote command execution vulnerability in the installer script of the webEdition CMS during a penetration test. If the installer script is not manually removed after installation, attackers canno...

webEdition CMS 6.3.8.0 svn6985 SQL Injection

Advisory: SQL Injection in webEdition CMS File Browser RedTeam Pentesting discovered an SQL injection vulnerability in the file browser component of webEdition CMS during a penetration test. Unauthenticated attackers can get read-only access on the SQL database used by webEdition and read for...

webEdition CMS - 'we_fs.php' SQL Injection

source: https://www.securityfocus.com/bid/67689/info webEdition CMS is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit will allow an attacker to compromise the application, access or modify data, or exploit laten...

webEdition CMS - we_fs.php SQL Injection

webEdition CMS - wefs.php SQL Injection source: https://www.securityfocus.com/bid/67689/info webEdition CMS is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit will allow an attacker to compromise the application,...

webEdition CMS Local File Inclusion Vulnerability

Exploit for php platform in category web applications Software: webEdition CMS 6.1.0.2 Vendor: http://www.webedition.org Vuln Type: Local File Inclusion Download link: http://sourceforge.net/projects/webedition/files/webEdition/6.1.0.2/webEdition6102.tar.gz/download Author: eidelweiss contact:...

webEdition CMS Local File Inclusion Vulnerability

No description provided by source. =================================================================== webEdition CMS DOCUMENTROOT Local File Inclusion vulnerability =================================================================== Software: webEdition CMS 6.1.0.2 Vendor:...

webEdition CMS HTML Injection and Local File Include Vulnerabilities

webEdition CMS is prone to multiple HTML-injection vulnerabilities and a local file-include vulnerability. Exploiting these issues could allow an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, steal cookie-based authentication...

webEdition CMS - Local File Inclusion

webEdition CMS - Local File Inclusion =================================================================== webEdition CMS DOCUMENTROOT Local File Inclusion vulnerability =================================================================== Software: webEdition CMS 6.1.0.2 Vendor:...

webEdition CMS 6.1.0.2 - DOCUMENT_ROOT Local File Inclusion

webEdition CMS 6.1.0.2 - DOCUMENTROOT Local File Inclusion source: https://www.securityfocus.com/bid/47065/info webEdition CMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view and execute...

webEdition CMS 6.1.0.2 Local File Inclusion

=================================================================== webEdition CMS DOCUMENTROOT Local File Inclusion vulnerability =================================================================== Software: webEdition CMS 6.1.0.2 Vendor: http://www.webedition.org Vuln Type: Local File Inclusion...