what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 2 of 2

Files from Josh Foote

Pimcore CMS Build 3450 SQL Injection

Posted Jul 14, 2015

Authored by Josh Foote

Pimcore CMS build 3450 suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection

advisories | CVE-2015-4426

SHA-256 | f7b0a644408b713c75a3b2b6813d047888f1cc7dda004eb2ff27ab376715fb66

Download | Favorite | View

Pimcore CMS Build 3450 Directory Traversal

Posted Jul 14, 2015

Authored by Josh Foote

Pimcore CMS build 3450 suffers from an issues where it is possible for an administrative user with the 'assets' permission to overwrite system configuration files via exploiting a directory traversal vulnerability.

tags | exploit, file inclusion

advisories | CVE-2015-4425

SHA-256 | ab88a54c96cee261f04972545556b484aa577fdfae39c4f1a28989afe29b7997

Download | Favorite | View