plume-cms plume cms 1.0.3 vulnerabilities and exploits

(subscribe to this query)

Cross-site scripting (XSS) vulnerability in Plume prior to 1.2.3 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.

Plume-cms Plume Cms 1.2 Plume-cms Plume Cms 1.0.6 Plume-cms Plume Cms Plume-cms Plume Cms 1.0.4 Plume-cms Plume Cms 1.0.3 Plume-cms Plume Cms 1.0.2 Plume-cms Plume Cms 1.2.1 Plume-cms Plume Cms 1.1.3 Plume-cms Plume Cms 1.0.5

Multiple cross-site scripting (XSS) vulnerabilities in Plume CMS 1.2.4 and previous versions allow remote malicious users to inject arbitrary web script or HTML via (1) the u_email parameter (aka Authors Email field) to manager/users.php, (2) the u_realname parameter (aka Authors...

Plume-cms Plume Cms 1.2.1 Plume-cms Plume Cms 1.2 Plume-cms Plume Cms 1.1.3 Plume-cms Plume Cms 1.0.6 Plume-cms Plume Cms 1.0.5 Plume-cms Plume Cms Plume-cms Plume Cms 1.0.4 Plume-cms Plume Cms 1.0.3 Plume-cms Plume Cms 1.2.3 Plume-cms Plume Cms 1.2.2 Plume-cms Plume Cms 1.0.2

1 EDB exploit

Cross-site request forgery (CSRF) vulnerability in manager/news.php in Plume CMS 1.2.4 and previous versions allows remote malicious users to hijack the authentication of administrators for requests that create News pages via a publish action.

Plume-cms Plume Cms 1.2 Plume-cms Plume Cms 1.1.3 Plume-cms Plume Cms 1.2.2 Plume-cms Plume Cms 1.2.1 Plume-cms Plume Cms 1.0.5 Plume-cms Plume Cms Plume-cms Plume Cms 1.2.3 Plume-cms Plume Cms 1.0.3 Plume-cms Plume Cms 1.0.6 Plume-cms Plume Cms 1.0.2 Plume-cms Plume Cms 1.0.4

1 EDB exploit

PHP remote file inclusion vulnerability in manager/frontinc/prepend.php for Plume 1.0.3 allows remote malicious users to execute arbitrary code via a URL in the _PX_config[manager_path] parameter. NOTE: this is a different executable and affected version than CVE-2006-0725.

Plume-cms Plume Cms 1.0.3

1 EDB exploit

PHP remote file inclusion vulnerability in prepend.php in Plume CMS 1.0.2, when register_globals is enabled, allows remote malicious users to include arbitrary files via a URL in the _PX_config[manager_path] parameter. NOTE: this is a different executable and affected version tha...

Plume-cms Plume Cms 1.0.2

1 EDB exploit

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook