visualshapers ezcontents 1.41 vulnerabilities and exploits

(subscribe to this query)

Unknown vulnerability in the server login for VisualShapers ezContents 2.02 and previous versions allows remote malicious users to bypass access restrictions and gain access to restricted functions.

Visualshapers Ezcontents 1.42 Visualshapers Ezcontents 1.43 Visualshapers Ezcontents 2.0 Rc3 Visualshapers Ezcontents 1.44 Visualshapers Ezcontents 1.45 Visualshapers Ezcontents 1.45b Visualshapers Ezcontents 1.40 Visualshapers Ezcontents 1.41 Visualshapers Ezcontents 2.0 Rc1 Visualshapers Ezcontents 2.0 Rc2 Visualshapers Ezcontents 2.0.1 Visualshapers Ezcontents 2.0.2

Multiple PHP remote file inclusion vulnerabilities in ezContents 2.0.2 and previous versions allow remote malicious users to execute arbitrary PHP code from a remote web server, as demonstrated using (1) the GLOBALS[rootdp] parameter to db.php, or (2) the GLOBALS[language_home] p...

Visualshapers Ezcontents 1.44 Visualshapers Ezcontents 1.45 Visualshapers Ezcontents 1.45b Visualshapers Ezcontents 2.0.1 Visualshapers Ezcontents 1.42 Visualshapers Ezcontents 1.43 Visualshapers Ezcontents 2.0 Rc2 Visualshapers Ezcontents 2.0 Rc3 Visualshapers Ezcontents 1.40 Visualshapers Ezcontents 1.41 Visualshapers Ezcontents 2.0.2 Visualshapers Ezcontents 2.0 Rc1

2 EDB exploits

Multiple SQL injection vulnerabilities in ezContents 1.41 and previous versions allow remote malicious users to conduct unauthorized activities.

Visualshapers Ezcontents

Multiple cross-site scripting vulnerabilities in ezContents 1.41 and previous versions allow remote malicious users to execute script and steal cookies via the diary and other capabilities.

Visualshapers Ezcontents

The scripts (1) createdir.php, (2) removedir.php and (3) uploadfile.php for ezContents 1.41 and previous versions do not check credentials, which allows remote malicious users to create or delete directories and upload files via a direct HTTP POST request.

Visualshapers Ezcontents

The VerifyLogin function in ezContents 1.41 and previous versions does not properly halt program execution if a user fails to log in properly, which allows remote malicious users to modify and view restricted information via HTTP POST requests.

Visualshapers Ezcontents

Directory traversal vulnerabilities in ezContents 1.41 and previous versions allow remote malicious users to cause ezContents to (1) create directories using the Maintain Images:Add New:Create Subdirectory item, or (2) list directories using the Maintain Images file listing, via ...

Visualshapers Ezcontents

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook