CMS WebManager-Pro SQL Injection

Hello Bugtraq! I want to warn you about SQL Injection and Redirector URL Redirector Abuse vulnerabilities in CMS WebManager-Pro SecurityVulns ID:11108. It's Ukrainian commercial CMS. SQL Injection: http://site/c.php?id=1%20and%20version=5 Redirector:...

Уязвимости в CMS WebManager-Pro

Здравствуйте 3APA3A! Сообщаю вам о найденных мною SQL Injection и Redirector URL Redirector Abuse уязвимостях в CMS WebManager-Pro это украинская коммерческая CMS. SQL Injection: http://site/c.php?id=120and20version=5 Redirector: http://site/c.php?id=1&url=http://websecurity.com.ua Уязвимы две...

CMS WebManager-Pro - 'c.php' SQL Injection

source: https://www.securityfocus.com/bid/42951/info CMS WebManager-Pro is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

CMS WebManager-Pro - c.php SQL Injection

CMS WebManager-Pro - c.php SQL Injection source: https://www.securityfocus.com/bid/42951/info CMS WebManager-Pro is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker t...

CMS WebManager-Pro 7.4.3 SQL Injection

Hello Bugtraq! I want to warn you about SQL Injection vulnerability in CMS WebManager-Pro. SQL Injection: http://site/index.php?contentid=-1%20or%20version=4 Affected software: Vulnerable are CMS WebManager-Pro v.7.4.3 version from FGSStudio and previous versions. Original version of CMS...

SQL Injection уязвимость в CMS WebManager-Pro

Здравствуйте 3APA3A! Сообщаю вам о найденной мною SQL Injection уязвимости в CMS WebManager-Pro. SQL Injection: http://site/index.php?contentid=-120or20version=4 Уязвимы CMS WebManager-Pro v.7.4.3 версия от FGSStudio и предыдущие версии. Оригинальная версия CMS WebManager-Pro неуязвима...

WebManager <= 1.3.6 XSS Vulnerabilities

Exploit for php platform in category web applications ======================================= WebManager Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 1 0 I'm TheExploited member from...

Spectrum Software WebManager CMS - pojam Cross-Site Scripting

Spectrum Software WebManager CMS - pojam Cross-Site Scripting source: https://www.securityfocus.com/bid/38573/info Spectrum Software WebManager CMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage thi...

Spectrum Software WebManager CMS - 'pojam' Cross-Site Scripting

source: https://www.securityfocus.com/bid/38573/info Spectrum Software WebManager CMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Spectrum Software WebManager CMS Cross Site Scripting

.:. Author : [email protected] .:. Contact: [email protected], [email protected] .:. Home : www.evilzone.org .:. Script : Spectrum Software WebManager CMS .:. Info link: http://www.spectrum.hr/proizvodi/webmanager-cms/default.aspx .:. Bug Type : Cross-site scripting XSS === Exploit ===...

Spectrum Software WebManager CMS Xss Vulnerability

Exploit for unknown platform in category web applications ================================================== Spectrum Software WebManager CMS Xss Vulnerability ================================================== .:. Script : Spectrum Software WebManager CMS .:. Info link:...

CVE-2008-6300

Galatolo WebManager 1.3a allows remote attackers to bypass authentication and gain administrative access by setting the 1 gwmuser and 2 gwmpass cookies to admin. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Authentication flaw

Galatolo WebManager 1.3a allows remote attackers to bypass authentication and gain administrative access by setting the 1 gwmuser and 2 gwmpass cookies to admin. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6300

Galatolo WebManager 1.3a is affected by an authentication bypass vulnerability. CVE-2008-6300 allows remote attackers to gain administrative access by setting the gwm_user and gwm_pass cookies to admin. Root cause described as cookie-based auth bypass; no explicit exploit code or in-the-wild deta...

CVE-2008-6300

Galatolo WebManager 1.3a allows remote attackers to bypass authentication and gain administrative access by setting the 1 gwmuser and 2 gwmpass cookies to admin. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6300: Improper Authentication

Galatolo WebManager 1.3a allows remote attackers to bypass authentication and gain administrative access by setting the 1 gwmuser and 2 gwmpass cookies to admin. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6248

Cross-site scripting XSS vulnerability in all.php in Galatolo WebManager 1.3a and earlier allows remote attackers to inject arbitrary web script or HTML via the tag parameter...

CVE-2008-6249

SQL injection vulnerability in plugins/users/index.php in Galatolo WebManager 1.3a and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in all.php in Galatolo WebManager 1.3a and earlier allows remote attackers to inject arbitrary web script or HTML via the tag parameter...

Sql injection

SQL injection vulnerability in plugins/users/index.php in Galatolo WebManager 1.3a and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...