phpcms vulnerabilities and exploits

(subscribe to this query)

There is a reflective cross-site scripting (XSS) vulnerability in the PHPCMS V9.6.3 management side....

Phpcms Phpcms 9.6.3

Cross-site scripting (XSS) vulnerability in parser.php in phpCMS 1.2.1 and earlier, with non-stealth and debug modes enabled, allows remote attackers to inject arbitrary web script or HTML via the file parameter....

Phpcms Phpcms 1.1.9 Phpcms Phpcms 1.2 Phpcms Phpcms 1.2.1

parser.php in phpCMS 1.2.1 and earlier, with non-stealth and debug modes enabled, allows remote attackers to gain sensitive information via an invalid file parameter, which reveals the web server's installation path....

Phpcms Phpcms 1.1.9 Phpcms Phpcms 1.2.0 Phpcms Phpcms 1.2.1

Directory traversal vulnerability in class.layout_phpcms.php in phpCMS 1.2.x before 1.2.1pl2 allows remote attackers to read or include arbitrary files, as demonstrated using a .. (dot dot) in the language parameter to parser.php....

Phpcms Phpcms 1.2.1 Phpcms Phpcms 1.2.1 P12 Phpcms Phpcms 1.2.1 Pl1 Phpcms Phpcms 1.2.0

Directory Traversal vulnerability in phpCMS 9.1.13 via the q parameter to public_get_suggest_keyword....

Phpcms Phpcms 9.1.131 Github repository available

SQL Injection vulnerability in phpCMS 2007 SP6 build 0805 via the digg_mod parameter to digg_add.php....

Phpcms Phpcms 2007

PHPCMS 9 allows remote attackers to cause a denial of service (resource consumption) via large font_size, height, and width parameters in an api.php?op=checkcode request....

Phpcms Phpcms 9.0

SQL injection vulnerability in include/admin/model_field.class.php in PHPCMS 2008 V2 allows remote attackers to execute arbitrary SQL commands via the modelid parameter to flash_upload.php....

Phpcms Phpcms 2008 21 EDB exploit available

PHPCMS 9.6.x through 9.6.3 has XSS via the mailbox (aka E-mail) field on the personal information screen....

SQL Injection in phpCMS 2008 sp4 via the genre parameter to yp/job.php....

Phpcms Phpcms 2008

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook