ZeusCMS 0.2 - Database Backup Dump Local File Inclusion

ZeusCMS 0.2 - Database Backup Dump Local File Inclusion ============================================================================== » Note : Tribute to the martyrs of Gaza . ============================================================================== » ZeusCMS v0.2 DBD/LFI Multiple...

Sql injection

SQL injection vulnerability in security.php in ZeusCMS 0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header...

CVE-2007-6622

SQL injection vulnerability in security.php in ZeusCMS 0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header...

CVE-2007-6623

Absolute path traversal vulnerability in ZeusCMS 0.3 and earlier might allow remote attackers to list arbitrary directories via a full pathname in the dir parameter...

Path traversal

Absolute path traversal vulnerability in ZeusCMS 0.3 and earlier might allow remote attackers to list arbitrary directories via a full pathname in the dir parameter...

CVE-2007-6622

ZeusCMS 0.3 and earlier is affected by an SQL injection in security.php that can be triggered via the Referer HTTP header, allowing remote attackers to manipulate SQL queries and potentially access or modify data. The issue is described consistently across CVE-2007-6622 records; exploitation deta...

CVE-2007-6623

CVE-2007-6623 describes an absolute path traversal vulnerability in ZeusCMS 0.3 and earlier. The issue allows remote attackers to list arbitrary directories by supplying a full pathname in the dir parameter. This is a server-side path disclosure risk that could enable traversal beyond intended di...

CVE-2007-6622

SQL injection vulnerability in security.php in ZeusCMS 0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header...

CVE-2007-6623

Absolute path traversal vulnerability in ZeusCMS 0.3 and earlier might allow remote attackers to list arbitrary directories via a full pathname in the dir parameter...

ZeusCMS SQL注入漏洞

BUGTRAQ ID: 27058 CNCAN ID:CNCAN-2008010206 ZeusCMS是一款基于PHP的WEB应用程序。 ZeusCMS不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息或操作数据库。 问题是由于脚本对用户提交的WEB参数处理缺少充分过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 ZeusCMS 0.3 厂商解决方案 ---------- 目前没有解决方案提供： http://zeuscms.gr/...

zeuscms-blindsql.txt

query"SELECT FROM $table WHERE url like '%$ref%' AND status='BLOCKED'"; numRows0 137. return true; 138. 139. else 140. return false; 141. 142. else 143. return false; 144. an attacker can inject sql code through http referer header, that isn't properly checked... Possible bug fix in /index.php :...

ZeusCMS <= 0.3 Remote Blind SQL Injection Exploit

No description provided by source. ? / ------------------------------------------------- ZeusCMS = 0.3 Remote Blind SQL Injection Exploit ------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....: http://www.zeuscms.gr/ details..: works with...

ZeusCMS 0.3 - Blind SQL Injection

query"SELECT FROM $table WHERE url like '%$ref%' AND status='BLOCKED'"; numRows0 137. return true; 138. 139. else 140. return false; 141. 142. else 143. return false; 144. an attacker can inject sql code through http referer header, that isn't properly checked... Possible bug fix in /index.php :...

ZeusCMS 0.3 - Blind SQL Injection

ZeusCMS 0.3 - Blind SQL Injection query"SELECT FROM $table WHERE url like '%$ref%' AND status='BLOCKED'"; numRows0 137. return true; 138. 139. else 140. return false; 141. 142. else 143. return false; 144. an attacker can inject sql code through http referer header, that isn't properly checked...

ZeusCMS <= 0.3 Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================= ZeusCMS query"SELECT FROM $table WHERE url like '%$ref%' AND status='BLOCKED'"; numRows0 137. return true; 138. 139. else 140. return false; 141. 142. else 143. return false; 144. an attack...