Visualshapers Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/visualshapers/ Sun, 26 Feb 2023 09:11:50 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png Visualshapers Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/visualshapers/ 32 32 CVE-2008-7054 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7054/ Sun, 26 Feb 2023 09:11:50 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7054/ Multiple directory traversal vulnerabilities in ezContents 2.0.3 allow remote attackers to include and execute arbitrary local files via the (1) gsLanguage and (2) language_home parameters to modules/diary/showdiary.php; (3) admin_home, (4) gsLanguage, and (5) language_home parameters to modules/diary/showdiarydetail.php; (6) gsLanguage and (7) language_home parameters to modules/diary/submit_diary.php; (8) admin_home parameter to modules/news/news_summary.php; (9) nLink, (10) gsLanguage, and […]

The post CVE-2008-7054 appeared first on CVE Vulnerability.

]]> Multiple directory traversal vulnerabilities in ezContents 2.0.3 allow remote attackers to include and execute arbitrary local files via the (1) gsLanguage and (2) language_home parameters to modules/diary/showdiary.php; (3) admin_home, (4) gsLanguage, and (5) language_home parameters to modules/diary/showdiarydetail.php; (6) gsLanguage and (7) language_home parameters to modules/diary/submit_diary.php; (8) admin_home parameter to modules/news/news_summary.php; (9) nLink, (10) gsLanguage, and (11) language_home parameters to modules/news/inlinenews.php; and possibly other unspecified vectors in (12) diary/showeventlist.php, (13) gallery/showgallery.php, (14) reviews/showreviews.php, (15) gallery/showgallerydetails.php, (16) reviews/showreviewsdetails.php, (17) news/shownewsdetails.php, (18) gallery/submit_gallery.php, (19) guestbook/submit_guestbook.php, (20) reviews/submit_reviews.php, (21) news/submit_news.php, (22) diary/inlineeventlist.php, and (23) news/archivednews_summary.php in modules/, related to the lack of directory traversal protection in modules/moduleSec.php.

The post CVE-2008-7054 appeared first on CVE Vulnerability.

]]> CVE-2008-7055 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7055/ Sun, 26 Feb 2023 09:11:50 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7055/ module.php in ezContents 2.0.3 allows remote attackers to bypass the directory traversal protection mechanism to include and execute arbitrary local files via “….//” (doubled dot dot slash) sequences in the link parameter, which is not properly filtered using the str_replace function.

The post CVE-2008-7055 appeared first on CVE Vulnerability.

]]> module.php in ezContents 2.0.3 allows remote attackers to bypass the directory traversal protection mechanism to include and execute arbitrary local files via “….//” (doubled dot dot slash) sequences in the link parameter, which is not properly filtered using the str_replace function.

The post CVE-2008-7055 appeared first on CVE Vulnerability.

]]> CVE-2008-2135 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-2135/ Sun, 26 Feb 2023 09:09:22 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-2135/ Multiple SQL injection vulnerabilities in VisualShapers ezContents 2.0.0 allow remote attackers to execute arbitrary SQL commands via the (1) contentname parameter to showdetails.php and the (2) article parameter to printer.php.

The post CVE-2008-2135 appeared first on CVE Vulnerability.

]]> Multiple SQL injection vulnerabilities in VisualShapers ezContents 2.0.0 allow remote attackers to execute arbitrary SQL commands via the (1) contentname parameter to showdetails.php and the (2) article parameter to printer.php.

The post CVE-2008-2135 appeared first on CVE Vulnerability.

]]>