XSS и SQL Injection уязвимости в CMS WebManager-Pro

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting и SQL Injection уязвимостях в CMS WebManager-Pro это украинская коммерческая CMS. XSS WASC-08: http://site/index.php?word=2220onMouseOver=alertdocument.cookie20 SQL Injection Authentication Bypass WASC-19: На странице...

CMS WebManager-Pro 7.4.3 - Cross-Site Scripting SQL Injection

CMS WebManager-Pro 7.4.3 - Cross-Site Scripting SQL Injection source: https://www.securityfocus.com/bid/44591/info CMS WebManager-Pro is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability. Exploiting these issues could allow an attacker to steal cookie-based...

CMS WebManager-Pro 7.4.3 - Cross-Site Scripting / SQL Injection

source: https://www.securityfocus.com/bid/44591/info CMS WebManager-Pro is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modi...

Уязвимости в CMS WebManager-Pro

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Arbitrary File Uploading и Code Execution уязвимостях в CMS WebManager-Pro это украинская коммерческая CMS. Arbitrary File Uploading WASC-42: В админке в разделе "файлы" http://site/admin/files.php возможна загрузка произвольных файлов. Code...

CMS WebManager-Pro SQL Injection

Hello Bugtraq! I want to warn you about SQL Injection and Redirector URL Redirector Abuse vulnerabilities in CMS WebManager-Pro SecurityVulns ID:11108. It's Ukrainian commercial CMS. SQL Injection: http://site/c.php?id=1%20and%20version=5 Redirector:...

CMS WebManager-Pro - c.php SQL Injection

CMS WebManager-Pro - c.php SQL Injection source: https://www.securityfocus.com/bid/42951/info CMS WebManager-Pro is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker t...

Уязвимости в CMS WebManager-Pro

Здравствуйте 3APA3A! Сообщаю вам о найденных мною SQL Injection и Redirector URL Redirector Abuse уязвимостях в CMS WebManager-Pro это украинская коммерческая CMS. SQL Injection: http://site/c.php?id=120and20version=5 Redirector: http://site/c.php?id=1&url=http://websecurity.com.ua Уязвимы две...

CMS WebManager-Pro - 'c.php' SQL Injection

source: https://www.securityfocus.com/bid/42951/info CMS WebManager-Pro is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

CMS WebManager-Pro 7.4.3 SQL Injection

Hello Bugtraq! I want to warn you about SQL Injection vulnerability in CMS WebManager-Pro. SQL Injection: http://site/index.php?contentid=-1%20or%20version=4 Affected software: Vulnerable are CMS WebManager-Pro v.7.4.3 version from FGSStudio and previous versions. Original version of CMS...

SQL Injection уязвимость в CMS WebManager-Pro

Здравствуйте 3APA3A! Сообщаю вам о найденной мною SQL Injection уязвимости в CMS WebManager-Pro. SQL Injection: http://site/index.php?contentid=-120or20version=4 Уязвимы CMS WebManager-Pro v.7.4.3 версия от FGSStudio и предыдущие версии. Оригинальная версия CMS WebManager-Pro неуязвима...

Sql injection

Multiple SQL injection vulnerabilities in index.php in CMS WebManager-Pro allow remote attackers to execute arbitrary SQL commands via the 1 langid and 2 menuid parameters...

CVE-2008-2351

Multiple SQL injection vulnerabilities in index.php in CMS WebManager-Pro allow remote attackers to execute arbitrary SQL commands via the 1 langid and 2 menuid parameters...

CVE-2008-2351

Multiple SQL injection vulnerabilities in index.php in CMS WebManager-Pro allow remote attackers to execute arbitrary SQL commands via the 1 langid and 2 menuid parameters...

CVE-2008-2351

The provided documents confirm CVE-2008-2351 affects CMS WebManager-Pro, where index.php is vulnerable to multiple SQL injection flaws via the language and menu parameters (lang_id and menu_id). This allows remote attackers to craft queries that may alter or reveal database content. The NVD entry...

CVE-2008-2351: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in index.php in CMS WebManager-Pro allow remote attackers to execute arbitrary SQL commands via the 1 langid and 2 menuid parameters...

cmswebman-sql.txt

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.eu CMS Webmanager-pro Remote SQL Injection Vulnerability Script site: http://webmanager-pro.com/ Vuln:...

CMS WebManager-Pro Multiple Remote SQL Injection Vulnerabilities

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.eu CMS Webmanager-pro Remote SQL Injection Vulnerability Script site: http://webmanager-pro.com/...

CMS WebManager-Pro - Multiple SQL Injections

CMS WebManager-Pro - Multiple SQL Injections :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.eu CMS Webmanager-pro Remote SQL Injection Vulnerability Script site:...

CMS WebManager-Pro - Multiple SQL Injections

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.eu CMS Webmanager-pro Remote SQL Injection Vulnerability Script site: http://webmanager-pro.com/ Vuln:...

CMS WebManager-Pro Multiple Remote SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ================================================================ CMS WebManager-Pro Multiple Remote SQL Injection Vulnerabilities ================================================================ :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;...