Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the cpass functionality in an admin action in index.php in XCMS allows remote attackers to change arbitrary passwords via certain password and rpassword parameters, possibly related to timestamp values...

CVE-2007-5060

Cross-site request forgery CSRF vulnerability in the cpass functionality in an admin action in index.php in XCMS allows remote attackers to change arbitrary passwords via certain password and rpassword parameters, possibly related to timestamp values...

CVE-2007-5060

CVE-2007-5060 describes a CSRF vulnerability in XCMS within the admin action for index.php, affecting the cpass functionality. It allows remote attackers to change arbitrary passwords by submitting certain password_ and rpassword_ parameters, possibly related to timestamp values. The issue stems ...

CVE-2007-5060

Cross-site request forgery CSRF vulnerability in the cpass functionality in an admin action in index.php in XCMS allows remote attackers to change arbitrary passwords via certain password and rpassword parameters, possibly related to timestamp values...

xcms all version arbitrary code execution

!-- - Name : XCMS Arbitrary Command Execution Vulnerability - - Download : http://www.xcms.it/index.php?lng=it&mod=download&pg=indice&c=2 - - Author : x0kster - - Email : x0ksterATgmailDOTcom - - Date : 20-09-2007 - -- html head title-XCMS Arbitrary Command Execution Vuln by x0kster -/title /head...

XCMS 1.11.7 - Password Arbitrary PHP Code Execution

XCMS 1.11.7 - Password Arbitrary PHP Code Execution source: https://www.securityfocus.com/bid/25771/info Xcms is prone to a vulnerability that lets attackers execute arbitrary PHP code because the application fails to properly sanitize user-supplied input. An attacker can exploit this issue to...

XCMS 1.1/1.7 - 'Password' Arbitrary PHP Code Execution

source: https://www.securityfocus.com/bid/25771/info Xcms is prone to a vulnerability that lets attackers execute arbitrary PHP code because the application fails to properly sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary malicious PHP code in the context of...

Directory traversal

Multiple directory traversal vulnerabilities in Module/Galerie.php in XCMS 1.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 Ent or 2 Lang parameter...

CVE-2007-3523

Multiple directory traversal vulnerabilities in Module/Galerie.php in XCMS 1.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 Ent or 2 Lang parameter...

CVE-2007-3523

Multiple directory traversal vulnerabilities in Module/Galerie.php in XCMS 1.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 Ent or 2 Lang parameter...

CVE-2007-3523

CVE-2007-3523 affects XCMS 1.1 in the Module/Galerie.php file, allowing directory traversal to include and execute arbitrary local files via a .. in the Ent or Lang parameter. This is a remote code exposure/fileread issue (no details on patches in the provided docs). The vulnerability enables an ...

XCMS 1.1 (Galerie.php) Local File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== XCMS 1.1 Galerie.php Local File Inclusion Vulnerabilities =========================================================== Author:: BlackNDoor Homepage:: www.learntohell.net Script::...

XCMS 1.1 (Galerie.php) Local File Inclusion Vulnerabilities

No description provided by source. Author:: BlackNDoor | [email protected] Homepage:: www.learntohell.net Script:: XCMS : CMS Version:: 1.1 Type:: Remote Directory Listing & Local File Include Source:: http://groupeclan.free.fr/XCMS.zip Bug:: - Files: /Module/Galerie.php.php - vulncode:...

XCMS 1.1 - 'Galerie.php' Local File Inclusion

Author:: BlackNDoor | [email protected] Homepage:: www.learntohell.net Script:: XCMS : CMS Version:: 1.1 Type:: Remote Directory Listing & Local File Include Source:: http://groupeclan.free.fr/XCMS.zip Bug:: - Files: /Module/Galerie.php.php - vulncode: if!isset$GET'Lang' $Lang="fr"; else...