ExtCalendar 2.0b2 (cal_search.php) SQL Injection Vulnerability

Exploit for php platform in category web applications Product: ExtCalendar 2 Vendor: http://sourceforge.net/projects/extcal/ Vulnerable Version: 2.0b2 Vendor Notification: 05 May 2011 Vulnerability Type: SQL Injection Risk level: Medium Credit: High-Tech Bridge SA Security Research Lab...

Cross-site Request Forgery in e107

High-Tech Bridge SA Security Research Lab has discovered vulnerabilities in e107 which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in e107 The vulnerability exists due to insufficient verification of the request origin in...

Extcalendar 2.0b2 - 'cal_search.php' SQL Injection

Vulnerability ID: HTB22986 Reference: http://www.htbridge.ch/advisory/sqlinjectioninextcalendar2.html Product: ExtCalendar 2 Vendor: http://sourceforge.net/projects/extcal/ Vulnerable Version: 2.0b2 Vendor Notification: 05 May 2011 Vulnerability Type: SQL Injection Risk level: Medium Credit:...

Cross-site Scripting Vulnerabilities in N-13 News

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in N-13 News, which can be exploited to perform cross-site scripting attacks. 1 Cross-site scripting vulnerabilities in N-13 News 1.1 Input passed via the GET "id" parameter to index.php is not properly sanitised...

Multiple Vulnerabilities in LoudBlog

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in LoudBlog which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerability in LoudBlog The vulnerability exists due to input sanitation error in the "id"...

Zend Zend Server Java Bridge Remote Code Execution

Zend Server is a complete, enterprise-ready Web Application Server for running and managing PHP applications. An internal component, the Zend Java Bridge, provides PHP developers with a way to use existing Java code and build PHP applications that use Java code. A remote code execution...

HTB22973: XSS in AJAX Calendar

Vulnerability ID: HTB22973 Reference: http://www.htbridge.ch/advisory/xssinajaxcalendar.html Product: AJAX Calendar Vendor: OpenCrypt http://www.opencrypt.com Vulnerable Version: 1.0 Vendor Notification: 21 April 2011 Vulnerability Type: XSS Cross Site Scripting Status: Fixed by Vendor Risk level...

Ajax Calendar 1.0 Cross Site Scripting

Vulnerability ID: HTB22973 Reference: http://www.htbridge.ch/advisory/xssinajaxcalendar.html Product: AJAX Calendar Vendor: OpenCrypt http://www.opencrypt.com Vulnerable Version: 1.0 Vendor Notification: 21 April 2011 Vulnerability Type: XSS Cross Site Scripting Status: Fixed by Vendor Risk level...

YaPiG 0.95 Cross Site Scripting

Vulnerability ID: HTB22962 Reference: http://www.htbridge.ch/advisory/multiplexssinyapig.html Product: YaPiG Yet Another PHP Image Gallery Vendor: http://yapig.sourceforge.net/ http://yapig.sourceforge.net/ Vulnerable Version: 0.95 Vendor Notification: 19 April 2011 Vulnerability Type: XSS Cross...

Tor 0.2.2.25-alpha released - To Toggle, or not to Toggle & The End of Torbutton!

Tor 0.2.2.25-alpha released - To Toggle, or not to Toggle & The End of Torbutton! Tor 0.2.2.25-alpha fixes many bugs: hidden service clients are more robust, routers no longer overreport their bandwidth, Win7 should crash a little less, and NEWNYM as used by Vidalia's "new identity" buttonnow...

Cross-site Request Forgery (CSRF) Vulnerabilities in Argyle Social

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Argyle Social which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF vulnerabilities in Argyle Social 1.1 The vulnerability exists due to insufficient validation...

WP Photo Album WordPress Plugin 1.5.1 Cross Site Scripting

Vulnerability ID: HTB22961 Reference: http://www.htbridge.ch/advisory/xssinwpphotoalbumwordpressplugin.html Product: WP Photo Album wordpress plugin Vendor: Rubin J. Kaplan http://me.mywebsight.ws/ Vulnerable Version: 1.5.1 Vendor Notification: 14 April 2011 Vulnerability Type: XSS Cross Site...

Cross-site Scripting (XSS) Vulnerabilities in Calendarix

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Calendarix which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerabilities in Calendarix 1.1 The vulnerability exists due to input sanitation errors in URL in...

Multiple Vulnerabilities in poMMo

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in poMMo which could be exploited to perform cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerabilities in poMMo 1.1 The vulnerability exists due to input sanitation erro...

Max's PHP Photo Album 2008-04-01 Cross Site Scripting

Vulnerability ID: HTB22953 Reference: http://www.htbridge.ch/advisory/xssinmaxsphpphotoalbum.html Product: Max's PHP Photo Album Vendor: http://www.phpf1.com http://www.phpf1.com Vulnerable Version: 2008-04-01 Vendor Notification: 12 April 2011 Vulnerability Type: XSS Cross Site Scripting Risk...

Ajax Category Dropdown Wordpress Plugin 0.1.5 Multiple Vulnerabilities

Exploit for php platform in category web applications Product: Ajax Category Dropdown wordpress plugin Vendor: http://www.dyasonhat.com/ http://www.dyasonhat.com/ Vulnerable Version: 0.1.5 Vendor Notification: 07 April 2011 Vulnerability Type: SQL Injection Risk level: High Credit: High-Tech Brid...

4images 1.7.9 Multiple Vulnerabilities

Exploit for php platform in category web applications Product: 4images Vendor: http://www.4homepages.de/ http://www.4homepages.de/ Vulnerable Version: 1.7.9 Vendor Notification: 07 April 2011 Vulnerability Type: SQL Injection Status: Fixed by Vendor Risk level: Medium Credit: High-Tech Bridge SA...

WordPress Plugin Ajax Category Dropdown 0.1.5 - Multiple Vulnerabilities

WordPress Plugin Ajax Category Dropdown 0.1.5 - Multiple Vulnerabilities ============================= Vulnerability ID: HTB22946 Reference: http://www.htbridge.ch/advisory/multiplesqlinjectioninajaxcategorydropdownwordpressplugin.html Product: Ajax Category Dropdown wordpress plugin Vendor:...

WordPress Plugin Ajax Category Dropdown 0.1.5 - Multiple Vulnerabilities

============================= Vulnerability ID: HTB22946 Reference: http://www.htbridge.ch/advisory/multiplesqlinjectioninajaxcategorydropdownwordpressplugin.html Product: Ajax Category Dropdown wordpress plugin Vendor: http://www.dyasonhat.com/ http://www.dyasonhat.com/ Vulnerable Version: 0.1.5...

HTB22947: XSS in Ajax Category Dropdown wordpress plugin

Vulnerability ID: HTB22947 Reference: http://www.htbridge.ch/advisory/xssinajaxcategorydropdownwordpressplugin.html Product: Ajax Category Dropdown wordpress plugin Vendor: http://www.dyasonhat.com/ http://www.dyasonhat.com/ Vulnerable Version: 0.1.5 Vendor Notification: 07 April 2011 Vulnerabili...