GD Star Rating 1.9.7 Cross Site Scripting / Path Disclosure

===================================== Vulnerability ID: HTB22843 Reference: http://www.htbridge.ch/advisory/pathdisclosureingdstarratingwordpressplugin.html Product: GD Star Rating wordpress plugin Vendor: Milan Petrovic http://www.gdstarrating.com/ Vulnerable Version: 1.9.7 Vendor Notification: ...

CDNVote 0.4.1 SQL Injection

Vulnerability ID: HTB22845 Reference: http://www.htbridge.ch/advisory/sqlinjectionincdnvotewordpressplugin.html Product: cdnvote wordpress plugin Vendor: Nakahira http://www.crossdrive.net/ Vulnerable Version: 0.4.1 Vendor Notification: 08 February 2011 Vulnerability Type: SQL Injection Risk leve...

HTB22841: SQL Injection in Comment Rating wordpress plugin

Vulnerability ID: HTB22841 Reference: http://www.htbridge.ch/advisory/sqlinjectionincommentratingwordpressplugin.html Product: Comment Rating wordpress plugin Vendor: Bob King http://wealthynetizen.com/ Vulnerable Version: 2.9.23 Vendor Notification: 08 February 2011 Vulnerability Type: SQL...

PT-2011-2574 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.35-rc5 Description: The issue is related to the br mdb ip get function in the Linux kernel, which allows remote attackers to cause a denial of service NULL pointer dereference and system crash via an IGMP...

Cross-site Scripting (XSS) Vulnerability in Question and Answer Forum

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Question and Answer Forum WordPress plugin which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Question and Answer Forum The vulnerability exists due to input...

Gollos 2.8 Cross Site Scripting

==================================== Vulnerability ID: HTB22831 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityingollos.html Product: Gollos Vendor: Gollos http://www.gollos.com/ Vulnerable Version: 2.8 and probably prior versions Vendor Notification: 01 February 2011 Vulnerability...

RunCMS 2.2.2 - Multiple Vulnerabilities

RunCMS 2.2.2 - Multiple Vulnerabilities Source: http://packetstormsecurity.org/files/view/98472/runcms-sqlxss.txt ================================ Vulnerability ID: HTB22820 Reference: http://www.htbridge.ch/advisory/sqlinjectioninruncms.html Product: RunCMS Vendor: http://www.runcms.org/...

RunCMS 2.2.2 - Multiple Vulnerabilities

Source: http://packetstormsecurity.org/files/view/98472/runcms-sqlxss.txt ================================ Vulnerability ID: HTB22820 Reference: http://www.htbridge.ch/advisory/sqlinjectioninruncms.html Product: RunCMS Vendor: http://www.runcms.org/ http://www.runcms.org/ Vulnerable Version: 2.2....

Multiple Vulnerabilities in IWantOneButton WordPress Plugin

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in IWantOneButton WordPress Plugin which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerability in IWantOneButton WordPress Plugin The vulnerability...

Multiple Vulnerabilities in Comment Rating

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Comment Rating which could be exploited to perform SQL injection attacks and gain access to sensitive information. 1 SQL injection vulnerabilities in Comment Rating The vulnerability exists due to input sanitatio...

ViArt Shop 4.0.5 Cross Site Scripting

==================================== Vulnerability ID: HTB22814 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinviartshop.html Product: ViArt Shop Vendor: Viart Software http://www.viart.com/ Vulnerable Version: Enterprise v.4.0.5 Vendor Notification: 25 January 2011 Vulnerability...

SQL Injection Vulnerability in cdnvote

High-Tech Bridge SA Security Research Lab has discovered vulnerability in cdnvote WordPress plugin which could be exploited to perform SQL injection attacks. 1 SQL injection vulnerability in cdnvote The vulnerability exists due to input sanitation errors in the "cdnvotepoint" parameter in...

Podcast Generator 1.3 Multiple Vulnerabilities

Exploit for php platform in category web applications ======================================== Vulnerability ID: HTB22801 Reference: http://www.htbridge.ch/advisory/localfileinclusioninpodcastgenerator.html Product: Podcast Generator Vendor: Alberto Betella http://podcastgen.sourceforge.net/...

Podcast Generator 1.3 - Multiple Vulnerabilities

Podcast Generator 1.3 - Multiple Vulnerabilities ======================================== Vulnerability ID: HTB22801 Reference: http://www.htbridge.ch/advisory/localfileinclusioninpodcastgenerator.html Product: Podcast Generator Vendor: Alberto Betella http://podcastgen.sourceforge.net/ Vulnerabl...

Podcast Generator 1.3 - Multiple Vulnerabilities

======================================== Vulnerability ID: HTB22801 Reference: http://www.htbridge.ch/advisory/localfileinclusioninpodcastgenerator.html Product: Podcast Generator Vendor: Alberto Betella http://podcastgen.sourceforge.net/ Vulnerable Version: 1.3 Vendor Notification: 20 January 20...

Redaxscript 0.3.2 Multiple Vulnerabilities

Exploit for php platform in category web applications ================================== Vulnerability ID: HTB22805 Reference: http://www.htbridge.ch/advisory/pathdisclosureinredaxscript.html Product: Redaxscript Vendor: http://redaxscript.com/ http://redaxscript.com/ Vulnerable Version: 0.3.2...

HTB22801: Local File Inclusion in Podcast Generator

Vulnerability ID: HTB22801 Reference: http://www.htbridge.ch/advisory/localfileinclusioninpodcastgenerator.html Product: Podcast Generator Vendor: Alberto Betella http://podcastgen.sourceforge.net/ Vulnerable Version: 1.3 Vendor Notification: 20 January 2011 Vulnerability Type: Local File Inclusi...

Redaxscript 0.3.2 Path Disclosure / SQL Injection

================================== Vulnerability ID: HTB22805 Reference: http://www.htbridge.ch/advisory/pathdisclosureinredaxscript.html Product: Redaxscript Vendor: http://redaxscript.com/ http://redaxscript.com/ Vulnerable Version: 0.3.2 Vendor Notification: 18 January 2011 Vulnerability Type:...

RedaxScript 0.3.2 - Multiple Vulnerabilities

RedaxScript 0.3.2 - Multiple Vulnerabilities ================================== Vulnerability ID: HTB22805 Reference: http://www.htbridge.ch/advisory/pathdisclosureinredaxscript.html Product: Redaxscript Vendor: http://redaxscript.com/ http://redaxscript.com/ Vulnerable Version: 0.3.2 Vendor...

RedaxScript 0.3.2 - Multiple Vulnerabilities

================================== Vulnerability ID: HTB22805 Reference: http://www.htbridge.ch/advisory/pathdisclosureinredaxscript.html Product: Redaxscript Vendor: http://redaxscript.com/ http://redaxscript.com/ Vulnerable Version: 0.3.2 Vendor Notification: 18 January 2011 Vulnerability Type:...