Umbraco CMS version 8.2.2 suffers from cross site request forgery vulnerabilities.
d01b5a5f3c58a2fb42e85e7b0b6cdc7a
Jaow CMS version 2.3 suffers from a cross site request forgery vulnerability.
dabd1421fcb3ca159e17ef15fc8766cb
7sepehr CMS 2012 suffers from multiple remote SQL injection vulnerabilities.
6cb89f416651b15dc8d093c2ffae401d
CakePHP and Squiz CMS suffer from XXE injection vulnerabilities.
e9d645f7feaeb645de0c7ea09235c318
This is a blind SQL injection exploit written in AutoIt3 that takes advantage of MagyCMS version 2.0.1121 BETA.
521e03cb3a43607104936fc6c337ebe2
Arasism (IR) CMS suffers from a remote shell upload vulnerability.
55d128b75a7ea4e83f0a322f960a96dd
Sananet CMS suffers from a remote SQL injection vulnerability. Note that this finding houses site-specific data.
0fef8fd3b213159f6713d0dd522d6b8b
YourOnlineAgents CMS suffers from a cross site scripting vulnerability. Note that this finding houses site-specific data.
dcc5ba1061a0e5748c998d22d73bbd01
Inoutmail Webmail CMS 2012 suffers from a cross site scripting vulnerability.
5c79be60f8d9872fca01f04dc56ca0d5
PolarisCMS suffers from a cross site scripting issue when input passed to the function 'WebForm_OnSubmit()' via the URL to blog.aspx is not properly sanitized before being returned to the user.
443876595a11f84cd9dcb1db80796c53
GetSimple CMS version 3.1.2 suffers from local file inclusion and path disclosure vulnerabilities.
2d89ad0b6d54e41f7f2dfc4b34ea7990
Openconstructor CMS version 3.12.0 suffers from multiple remote SQL injection vulnerabilities.
de0326992ad57574a5c1f75c90173467
Openconstructor CMS version 3.12.0 suffers from a stored cross site scripting vulnerability in data/hybrid/i_hybrid.php.
c1645f55ece01be153ce7a604f3f7909
Openconstructor CMS version 3.12.0 suffers from multiple stored cross site scripting vulnerabilities.
574900417518e1419bfd74c533394bda
Openconstructor CMS version 3.12.0 suffers from multiple reflective cross site scripting vulnerabilities.
96e7c5e89c0df7b120b3c2a4da2f4c54
Turtle CMS version 1 remote SQL injection exploit written in PHP.
a6aeb08a83c842195f0d23acfdece596
Elefant CMS version 1.2.0 suffers from a cross site scripting vulnerability.
584104abe7b7f43d78d64ca8ff97ad56
ocPortal CMS versions 7.1.5 and below are vulnerable to open URL redirection.
7a621a9b271953e210df9470cbd70e72
Jrobalian CMS suffers from a remote SQL injection vulnerability.
911b5bd346c7ae0950ffbcdb93469665
Pligg CMS versions 0.9 BETA and 1.1.1 suffer from a remote command execution vulnerability.
5d97795a0f15d0f985e6dc5877fb9520
Shahumyanmedia CMS 2010 suffers from an authentication bypass vulnerability. Proof of concept code included.
6311c88c2e0143753db8de288fb93f98
Secunia Security Advisory - A security issue has been discovered in easyCMSlite, which can be exploited by malicious people to disclose sensitive information.
3b4427cd59ea24ba4a506d5626f337db
easyCMSlite version 1.0.9 suffers from a remote database information disclosure vulnerability.
69bc0185623324bc9c61b90a862e633e
PBBoard CMS version 2.1.4 suffers from cross site request forgery and cross site scripting vulnerabilities.
cd0745196b1f1e682aad0a9fee06682b
Lepton CMS version 1.2.0 suffers from multiple cross site scripting vulnerabilities.
9bdf64439afa082e5f33ca74d91feb5a
Secunia Security Advisory - Sammy Forgit has discovered a vulnerability in Rama Zeiten CMS, which can be exploited by malicious people to disclose sensitive information.
41a3ca95d507edf36a7f98e3e57d1246