exploits , vulnerabilities , articles , TGS Content Management Multiple Input Validation Vulnerabilities

Title	TGS Content Management Multiple Input Validation Vulnerabilities
Published	2009-08-13-12:00AM
Updated	2009-09-15-11:21PM
Class	Input Validation Error
CVE	CVE-2009-2929 E-2009-2928
Remote	Yes
Local	No
Credit	[]ViZiOn
Vulnerable	TGS Content Management TGS Content Management 0
Not Vulnerable
Code	An attacker can exploit these issues via a browser. To exploit a cross-site scripting issue, the attacker must entice an unsuspecting victim to follow a malicious URI.The following example URIs are available:http://www.example.com/cms/index.php?tgs_language_id=[SQL Injection] http://www.example.com/cms/index.php?tpl_dir=[SQL Injection] http://www.example.com/cms/index.php?referer=[SQL Injection] http://www.example.com/cms/index.php?user-agent=[SQL Injection] http://www.example.com/cms/index.php?site=[SQL Injection] http://www.example.com/cms/index.php?option=[SQL Injection] http://www.example.com/cms/index.php?db_optimization=[SQL Injection] http://www.example.com/cms/index.php?owner=[SQL Injection] http://www.example.com/cms/index.php?admin_email=[SQL Injection] http://www.example.com/cms/index.php?default_language=[SQL Injection] http://www.example.com/cms/index.php?db_host=[SQL Injection] http://www.example.com/cms/frontpage_ception.php?cmd=[Blind SQL] http://www.example.com/cms/frontpage_ception.php?s_dir=[Blind SQL] http://www.example.com/cms/frontpage_ception.php?minutes=[Blind SQL] http://www.example.com/cms/frontpage_ception.php?s_mask=[Blind SQL] http://www.example.com/cms/frontpage_ception.php?test3_mp=[Blind SQL] http://www.example.com/cms/frontpage_ception.php?test15_file1=[Blind SQL] http://www.example.com/cms/frontpage_ception.php?submit=[Blind SQL] http://www.example.com/cms/frontpage_ception.php?brute_method=[Blind SQL] http://www.example.com/cms/frontpage_ception.php?ftp_server_port=[Blind SQL] http://www.example.com/cms/frontpage_ception.php?userfile14=[Blind SQL] http://www.example.com/cms/frontpage_ception.php?subj=[Blind SQL] http://www.example.com/cms/frontpage_ception.php?mysql_l=[Blind SQL] http://www.example.com/cms/frontpage_ception.php?action=[Blind SQL http://www.example.com/cms/frontpage_ception.php?userfile1=[Blind SQL] http://www.example.com/cms/index.php (site=admin) http://www.example.com/cms/admin.php http://www.example.com/cms/index.php (site=admin) http://www.example.com/cms/login.php?previous_page=[XSS]
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-09 Adobe Flash Player and AIR Data Injection Remote Code Execution Vulnerability
2009-12-09 Adobe Flash Player ActiveX Control Information Disclosure Vulnerability
2009-12-09 Adobe Flash Player and AIR Multiple Unspecified Remote Code Execution Vulnerabilities
2009-12-09 HP OpenView Network Node Manager Multiple Remote Code Execution Vulnerabilities
2009-12-09 Shibboleth Redirection URL HTML Injection Vulnerability
2009-12-09 VLC Media Player RTSP Remote Buffer Overflow Vulnerability
2009-12-09 Polipo Malformed HTTP GET Request Memory Corruption Vulnerability
2009-12-09 PhpShop Cross-Site Scripting and SQL Injection Vulnerabilities
2009-12-09 GNU GRUB Local Authentication Bypass Vulnerability
2009-12-09 NTP mode 7 MODE_PRIVATE Packet Remote Denial of Service Vulnerability