24 matches found
EUVD-2010-2327
Malware in sbrugna...
EUVD-2010-2326
Malware in sbrugna...
EUVD-2007-3129
Malware in sbrugna...
CVE-2010-2316
Multiple cross-site scripting XSS vulnerabilities in default.asp in WmsCms 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 search, 2 sbr, 3 p, and 4 sbl parameters, different vectors than CVE-2007-3137...
CVE-2010-2317
Multiple SQL injection vulnerabilities in WmsCms 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 search, 2 sbr, 3 pid, 4 sbl, and 5 FilePath parameters to default.asp; and the 6 sbr, 7 pr, and 8 psPrice parameters to printpage.asp...
WMSCMS 2.0 - Multiple Cross Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/24365/info WmsCMS is prone to multiple cross-site scripting vulnerabilities because it fails to adequately sanitize user-supplied input data before rendering it in a user's browser. Attackers could exploit these issues to...
WmsCMS - XSS, SQL injection vulnerability
No description provided by source. Title: XSS, SQL injection vulnerability in WmsCMS EDB-ID: CVE: OSVDB-ID: Author: Ariko-Security Published: 2010-06-05 ============ Ariko-Security - Advisory 1/6/2010 ============= XSS, SQL injection vulnerability in WMSCMS 2007 Secunia Advisory SA25583 only XSS ...
CVE-2010-2317
Multiple SQL injection vulnerabilities in WmsCms 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 search, 2 sbr, 3 pid, 4 sbl, and 5 FilePath parameters to default.asp; and the 6 sbr, 7 pr, and 8 psPrice parameters to printpage.asp...
Sql injection
Multiple SQL injection vulnerabilities in WmsCms 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 search, 2 sbr, 3 pid, 4 sbl, and 5 FilePath parameters to default.asp; and the 6 sbr, 7 pr, and 8 psPrice parameters to printpage.asp...
CVE-2010-2317
CVE-2010-2317 concerns multiple SQL injection vulnerabilities in WmsCms 2.0 and earlier. The flaws allow remote attackers to inject arbitrary SQL through specific parameters: default.asp: (1) search, (2) sbr, (3) pid, (4) sbl, (5) FilePath; and printpage.asp: (6) sbr, (7) pr, (8) psPrice. The des...
CVE-2010-2317
Multiple SQL injection vulnerabilities in WmsCms 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 search, 2 sbr, 3 pid, 4 sbl, and 5 FilePath parameters to default.asp; and the 6 sbr, 7 pr, and 8 psPrice parameters to printpage.asp...
CVE-2010-2316
Multiple cross-site scripting XSS vulnerabilities in default.asp in WmsCms 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 search, 2 sbr, 3 p, and 4 sbl parameters, different vectors than CVE-2007-3137...
CVE-2010-2316
CVE-2010-2316 describes multiple cross-site scripting (XSS) vulnerabilities in WmsCms 2.0 and earlier, affecting default.asp and related endpoints. The issue allows remote attackers to inject arbitrary web script or HTML via the (1) search, (2) sbr, (3) p, and (4) sbl parameters, with vectors dif...
WMSCMS Cross Site Scripting / SQL Injection
Title: XSS, SQL injection vulnerability in WmsCMS EDB-ID: CVE: OSVDB-ID: Author: Ariko-Security Published: 2010-06-05 ============ Ariko-Security - Advisory 1/6/2010 ============= XSS, SQL injection vulnerability in WMSCMS 2007 Secunia Advisory SA25583 only XSS 3 params Vendor's Description of...
WmsCMS XSS / SQL Injection Vulnerability
Exploit for php platform in category web applications ======================================== WmsCMS XSS / SQL Injection Vulnerability ======================================== XSS, SQL injection vulnerability in WMSCMS 2007 Secunia Advisory SA25583 only XSS 3 params Vendor's Description of...
WmsCMS - Cross-Site Scripting SQL Injection
WmsCMS - Cross-Site Scripting SQL Injection Title: XSS, SQL injection vulnerability in WmsCMS EDB-ID: CVE: OSVDB-ID: Author: Ariko-Security Published: 2010-06-05 ============ Ariko-Security - Advisory 1/6/2010 ============= XSS, SQL injection vulnerability in WMSCMS 2007 Secunia Advisory SA25583...
WmsCMS - Cross-Site Scripting / SQL Injection
Title: XSS, SQL injection vulnerability in WmsCMS EDB-ID: CVE: OSVDB-ID: Author: Ariko-Security Published: 2010-06-05 ============ Ariko-Security - Advisory 1/6/2010 ============= XSS, SQL injection vulnerability in WMSCMS 2007 Secunia Advisory SA25583 only XSS 3 params Vendor's Description of...
WmsCMS < = 2.0 Multiple XSS Vulnerabilities
Application: WmsCMS Vendors Url: http://www.web-master.biz Bug Type: Multiple URL Handling Remote Cross-Site Scripting Vulnerabilities Exploitation: Remote Severity: Less Critical Solution Status: Unpatched Introduction: WmsCMS is a web-based CMS system Google Dork: "Powered by WMS-CMS" Affected...
wmscms-xss.txt
Application: WmsCMS Vendors Url: http://www.web-master.biz Bug Type: Multiple URL Handling Remote Cross-Site Scripting Vulnerabilities Exploitation: Remote Severity: Less Critical Solution Status: Unpatched Introduction: WmsCMS is a web-based CMS system Google Dork: "Powered by WMS-CMS" Affected...
CVE-2007-3137
Multiple cross-site scripting XSS vulnerabilities in 4print.asp in WmsCMS 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 sbl, 2 sbr, or 3 search parameter. NOTE: the original disclosure claims the pageid parameter in index.php is affected, but this is...