website baker website baker vulnerabilities and exploits

(subscribe to this query)

Cross-site scripting (XSS) vulnerability in Website Baker CMS prior to 2.6.4 allows remote malicious users to inject arbitrary web script or HTML via a user display name.

Website Baker Website Baker 2.5.2 Website Baker Website Baker 2.6 Website Baker Website Baker 2.6.1

SQL injection vulnerability in admin/login/index.php in Website Baker 2.6.0 allows remote malicious users to execute arbitrary SQL commands via the username parameter, as used by the user field.

Website Baker Website Baker 2.5.2 Website Baker Website Baker 2.6

1 EDB exploit

SQL injection vulnerability in the is_remembered function in class.login.php in Website Baker 2.6.5 and previous versions allows remote malicious users to execute arbitrary SQL commands via the REMEMBER_KEY cookie parameter. NOTE: some of these details are obtained from third par...

Website Baker Website Baker

Cross-site scripting (XSS) vulnerability in browse.php in Website Baker Project allows remote malicious users to inject arbitrary web script or HTML via the dir parameter.

Website Baker Website Baker

browse.php in Website Baker Project allows remote malicious users to obtain sensitive data via (1) a directory that does not exist in the dir parameter or (2) a direct request to certain php files, which reveal the path in an error message.

Website Baker Website Baker

Website Baker Project does not properly verify the file extensions of uploaded files, which allows remote malicious users to upload and execute arbitrary PHP code.

Website Baker Website Baker

Website Baker 2.8.1 allows remote malicious users to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by admin/media/parameters.php and certain other files. NOTE: this might overlap CVE-2005...

Websitebaker2 Website Baker 2.8.1

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook