exploits , vulnerabilities , articles , TGS Content Management Multiple Input Validation Vulnerabilities

Title	TGS Content Management Multiple Input Validation Vulnerabilities
Published	2009-08-13-12:00AM
Updated	2009-09-15-11:21PM
Class	Input Validation Error
CVE	CVE-2009-2929 E-2009-2928
Remote	Yes
Local	No
Credit	[]ViZiOn
Vulnerable	TGS Content Management TGS Content Management 0
Not Vulnerable
Code	An attacker can exploit these issues via a browser. To exploit a cross-site scripting issue, the attacker must entice an unsuspecting victim to follow a malicious URI.The following example URIs are available:http://www.example.com/cms/index.php?tgs_language_id=[SQL Injection] http://www.example.com/cms/index.php?tpl_dir=[SQL Injection] http://www.example.com/cms/index.php?referer=[SQL Injection] http://www.example.com/cms/index.php?user-agent=[SQL Injection] http://www.example.com/cms/index.php?site=[SQL Injection] http://www.example.com/cms/index.php?option=[SQL Injection] http://www.example.com/cms/index.php?db_optimization=[SQL Injection] http://www.example.com/cms/index.php?owner=[SQL Injection] http://www.example.com/cms/index.php?admin_email=[SQL Injection] http://www.example.com/cms/index.php?default_language=[SQL Injection] http://www.example.com/cms/index.php?db_host=[SQL Injection] http://www.example.com/cms/frontpage_ception.php?cmd=[Blind SQL] http://www.example.com/cms/frontpage_ception.php?s_dir=[Blind SQL] http://www.example.com/cms/frontpage_ception.php?minutes=[Blind SQL] http://www.example.com/cms/frontpage_ception.php?s_mask=[Blind SQL] http://www.example.com/cms/frontpage_ception.php?test3_mp=[Blind SQL] http://www.example.com/cms/frontpage_ception.php?test15_file1=[Blind SQL] http://www.example.com/cms/frontpage_ception.php?submit=[Blind SQL] http://www.example.com/cms/frontpage_ception.php?brute_method=[Blind SQL] http://www.example.com/cms/frontpage_ception.php?ftp_server_port=[Blind SQL] http://www.example.com/cms/frontpage_ception.php?userfile14=[Blind SQL] http://www.example.com/cms/frontpage_ception.php?subj=[Blind SQL] http://www.example.com/cms/frontpage_ception.php?mysql_l=[Blind SQL] http://www.example.com/cms/frontpage_ception.php?action=[Blind SQL http://www.example.com/cms/frontpage_ception.php?userfile1=[Blind SQL] http://www.example.com/cms/index.php (site=admin) http://www.example.com/cms/admin.php http://www.example.com/cms/index.php (site=admin) http://www.example.com/cms/login.php?previous_page=[XSS]
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-14 MySQL Multiple Remote Denial Of Service Vulnerabilities
2009-12-14 Digital Scribe Multiple SQL Injection Vulnerabilities
2009-12-14 Microsoft WordPad and Office Text Converters Word 97 File Parsing Memory Corruption Vulnerability
2009-12-14 Microsoft Protected Extensible Authentication Protocol Memory Corruption Vulnerability
2009-12-14 WebKit Web Inspector Cross Site Scripting Vulnerability
2009-12-11 Symantec Veritas VRTSweb Incoming Data Remote Code Execution Vulnerability
2009-12-11 HP OpenView Network Node Manager Perl CGI Executables Remote Code Execution Vulnerability
2009-12-11 HP OpenView Network Node Manager Unspecified Stack Buffer Overflow Vulnerability
2009-12-11 Joomla! JS Jobs Component Multiple SQL Injection Vulnerabilities
2009-12-11 RT Session Fixation Vulnerability