Runcms Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/runcms/ Sun, 26 Feb 2023 09:11:55 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png Runcms Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/runcms/ 32 32 CVE-2008-7221 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7221/ Sun, 26 Feb 2023 09:11:55 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7221/ Cross-site request forgery (CSRF) vulnerability in RunCMS 1.6.1 allows remote attackers to hijack the authentication of administrators for requests that (1) add new administrators or (2) modify user profiles via a crafted request to system/admin.php.

The post CVE-2008-7221 appeared first on CVE Vulnerability.

]]> Cross-site request forgery (CSRF) vulnerability in RunCMS 1.6.1 allows remote attackers to hijack the authentication of administrators for requests that (1) add new administrators or (2) modify user profiles via a crafted request to system/admin.php.

The post CVE-2008-7221 appeared first on CVE Vulnerability.

]]> CVE-2008-7222 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7222/ Sun, 26 Feb 2023 09:11:55 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7222/ Cross-site scripting (XSS) vulnerability in system/admin.php in RunCMS 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the rank_title parameter in a RankForumAdd action.

The post CVE-2008-7222 appeared first on CVE Vulnerability.

]]> Cross-site scripting (XSS) vulnerability in system/admin.php in RunCMS 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the rank_title parameter in a RankForumAdd action.

The post CVE-2008-7222 appeared first on CVE Vulnerability.

]]> CVE-2008-3354 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-3354/ Sun, 26 Feb 2023 09:09:58 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-3354/ Multiple PHP remote file inclusion vulnerabilities in the Newbb Plus (newbb_plus) module 0.93 in RunCMS 1.6.1 allow remote attackers to execute arbitrary PHP code via a URL in the (1) bbPath[path] parameter to votepolls.php and the (2) bbPath[root_theme] parameter to config.php, different vectors than CVE-2006-0659. NOTE: the provenance of this information is unknown; the details […]

The post CVE-2008-3354 appeared first on CVE Vulnerability.

]]> Multiple PHP remote file inclusion vulnerabilities in the Newbb Plus (newbb_plus) module 0.93 in RunCMS 1.6.1 allow remote attackers to execute arbitrary PHP code via a URL in the (1) bbPath[path] parameter to votepolls.php and the (2) bbPath[root_theme] parameter to config.php, different vectors than CVE-2006-0659. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

The post CVE-2008-3354 appeared first on CVE Vulnerability.

]]> CVE-2008-2084 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-2084/ Sun, 26 Feb 2023 09:09:20 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-2084/ SQL injection vulnerability in topics.php in the MyArticles 0.6 beta-1 module for RunCMS allows remote attackers to execute arbitrary SQL commands via the topic_id parameter in a listarticles action.

The post CVE-2008-2084 appeared first on CVE Vulnerability.

]]> SQL injection vulnerability in topics.php in the MyArticles 0.6 beta-1 module for RunCMS allows remote attackers to execute arbitrary SQL commands via the topic_id parameter in a listarticles action.

The post CVE-2008-2084 appeared first on CVE Vulnerability.

]]> CVE-2008-1551 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-1551/ Sun, 26 Feb 2023 09:09:04 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-1551/ SQL injection vulnerability in viewcat.php in the Photo 3.02 module for RunCMS allows remote attackers to execute arbitrary SQL commands via the cid parameter.

The post CVE-2008-1551 appeared first on CVE Vulnerability.

]]> SQL injection vulnerability in viewcat.php in the Photo 3.02 module for RunCMS allows remote attackers to execute arbitrary SQL commands via the cid parameter.

The post CVE-2008-1551 appeared first on CVE Vulnerability.

]]> CVE-2008-0878 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-0878/ Sun, 26 Feb 2023 09:08:45 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-0878/ SQL injection vulnerability in index.php in the MyAnnonces 1.7 and earlier module for RunCMS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a view action.

The post CVE-2008-0878 appeared first on CVE Vulnerability.

]]> SQL injection vulnerability in index.php in the MyAnnonces 1.7 and earlier module for RunCMS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a view action.

The post CVE-2008-0878 appeared first on CVE Vulnerability.

]]>