RSS   Podatności dla 'Cms system'   RSS

2006-01-13
 
CVE-2006-0203

CWE-20
 
 
membership.asp in Mini-Nuke CMS System 1.8.2 and earlier does not verify the old password when changing a password, which allows remote attackers to change the passwords of other members via a lostpassnew action with a modified x parameter.

 
 
CVE-2006-0199

CWE-89
 
 
SQL injection vulnerability in news.asp in Mini-Nuke CMS System 1.8.2 and earlier allows remote attackers to execute arbitrary SQL commands via the hid parameter.

 

 >>> Vendor: Mini-nuke 3 Produkty
Cms system
Mini-nuke cms
Mini-nuke

Copyright 2024, cxsecurity.com

 

Back to Top