basic-cms basic-cms vulnerabilities and exploits

(subscribe to this query)

Multiple PHP remote file inclusion vulnerabilities in SweetRice 0.5.4, 0.5.3, and previous versions allow remote malicious users to execute arbitrary PHP code via a URL in the root_dir parameter to (1) _plugin/subscriber/inc/post.php and (2) as/lib/news_modify.php.

Basic-cms Sweetrice Basic-cms Sweetrice 0.5.3 Basic-cms Sweetrice 0.4.0 Basic-cms Sweetrice 0.3.1 Basic-cms Sweetrice 0.5.2 Basic-cms Sweetrice 0.5.1 Basic-cms Sweetrice 0.3.0 Basic-cms Sweetrice 0.2.1 Basic-cms Sweetrice 0.5.0 Basic-cms Sweetrice 0.4.4 Basic-cms Sweetrice 0.2.0 Basic-cms Sweetrice 0.4.2 Basic-cms Sweetrice 0.4.1

1 EDB exploit

Directory traversal vulnerability in as/lib/plugins.php in SweetRice 0.5.3 and previous versions allows remote malicious users to include and execute arbitrary local files via .. (dot dot) in the plugin parameter.

Basic-cms Sweetrice Basic-cms Sweetrice 0.5.2 Basic-cms Sweetrice 0.4.4 Basic-cms Sweetrice 0.4.2 Basic-cms Sweetrice 0.4.1 Basic-cms Sweetrice 0.3.0 Basic-cms Sweetrice 0.2.0 Basic-cms Sweetrice 0.4.0 Basic-cms Sweetrice 0.2.1

1 EDB exploit

Cross-site scripting (XSS) vulnerability in pages/index.php in BASIC-CMS allows remote malicious users to inject arbitrary web script or HTML via the nav_id parameter.

Basic-cms Basic-cms

1 EDB exploit

SQL injection vulnerability in pages/index.php in BASIC-CMS allows remote malicious users to execute arbitrary SQL commands via the page_id parameter.

Basic-cms Basic-cms

1 EDB exploit

Cross-site scripting (XSS) vulnerability in as/index.php in SweetRice CMS prior to 0.6.7.1 allows remote malicious users to inject arbitrary web script or HTML via a top_height cookie.

Basic-cms Sweetrice 0.6.7.1

The password-reset feature in as/index.php in SweetRice CMS prior to 0.6.7.1 allows remote malicious users to modify the administrator's password by specifying the administrator's e-mail address in the email parameter.

Basic-cms Sweetrice 0.6.7.1

1 EDB exploit

Multiple SQL injection vulnerabilities in index.php in SweetRice CMS prior to 0.6.7.1 allow remote malicious users to execute arbitrary SQL commands via (1) the file_name parameter in an attachment action, (2) the post parameter in a show_comment action, (3) the sys-name paramete...

Basic-cms Sweetrice 0.6.7.1

1 EDB exploit

SweetRice 0.7.1 allows remote malicious users to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by _plugin/tiny_mce/plugins/advimage/images.php.

Basic-cms Sweetrice 0.7.1

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook