e107 0.7.23 SQL Injection

=============================================== Vulnerability ID: HTB22603 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityine1071.html Product: e107 Website System Vendor: e107 http://www.e107.org/ Vulnerable Version: 0.7.23 and Probably Prior Versions Vendor Notification: 03...

XSS vulnerability in AChecker

Vulnerability ID: HTB22601 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinachecker.html Product: AChecker Vendor: Inclusive Design Institute http://www.atutor.ca/ Vulnerable Version: 1.0 Vendor Notification: 01 September 2010 Vulnerability Type: XSS Cross Site Scripting Status: Fixe...

SantaFox 2.02 Cross Site Request Forgery / Cross Site Scripting

======================================= Vulnerability ID: HTB22593 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinsantafoxsearchmodule.html Product: SantaFox Vendor: artprom http://www.santafox.ru/ Vulnerable Version: 2.02 and Probably Prior Versions Vendor Notification: 23 August...

AChecker 1.0 Cross Site Scripting

Vulnerability ID: HTB22601 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinachecker.html Product: AChecker Vendor: Inclusive Design Institute http://www.atutor.ca/ Vulnerable Version: 1.0 Vendor Notification: 01 September 2010 Vulnerability Type: XSS Cross Site Scripting Status: Fixe...

Cross-site Scripting (XSS) Vulnerability in Pluck

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Pluck which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Pluck The vulnerability exists due to input sanitation error in the "cont1" parameter in...

Multiple Vulnerabilities in Entrans

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Entrans which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerability in Entrans: CVE-2010-4932 The vulnerability exists due to input sanitation erro...

Fedora 13 : kernel-2.6.34.6-54.fc13 (2010-14235)

This update solves many of the problems with the previous 2.6.34 kernel, in addition to providing some security fixes. There are still unfixed suspend/resume bugs in this release, but a large number have been fixed -- enough to make it worth releasing this kernel now instead of waiting for more...

Java Bridge 5.5 Directory Traversal

/Title: PHP/Java Bridge 5.5 Date : Sep 6, 2010 Author: Saxtor Location: South America Guyana Email: [email protected] Category:: Web Applications Verison: 5.5 suffers a directory traversal vulnerability. This vulnerability could allow attackers to read arbitrary files =...

Java Bridge v. 5.5 Directory Traversal Vulnerability

Exploit for php platform in category web applications ==================================================== Java Bridge v. 5.5 Directory Traversal Vulnerability ==================================================== /Title: PHP/Java Bridge 5.5 Date : Sep 6, 2010 Author: Saxtor Location: South Americ...

java Bridge 5.5 - Directory Traversal

java Bridge 5.5 - Directory Traversal /Title: PHP/Java Bridge 5.5 Date : Sep 6, 2010 Author: Saxtor Location: South America Guyana Email: [email protected] Category:: Web Applications Verison: 5.5 suffers a directory traversal vulnerability. This vulnerability could allow attackers to read...

java Bridge 5.5 - Directory Traversal

/Title: PHP/Java Bridge 5.5 Date : Sep 6, 2010 Author: Saxtor Location: South America Guyana Email: [email protected] Category:: Web Applications Verison: 5.5 suffers a directory traversal vulnerability. This vulnerability could allow attackers to read arbitrary files =...

XSS vulnerability in ArtGK CMS

Vulnerability ID: HTB22588 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinartgkcms1.html Product: ArtGK CMS Vendor: ArtGK http://artgk-cms.ru/ Vulnerable Version: 2009-08-28 16:00:00 and Probably Prior Versions Vendor Notification: 18 August 2010 Vulnerability Type: XSS Cross Site...

Rumba CMS 2.4 Cross Site Scripting

================================== Vulnerability ID: HTB22591 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinrumbacms.html Product: Rumba CMS Vendor: Rumba Netware Ltd. http://rumbacms.com Vulnerable Version: 2.4 and Probably Prior Versions Vendor Notification: 18 August 2010...

Auto CMS 1.6 Cross Site Scripting

Vulnerability ID: HTB22564 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinautocms.html Product: Auto CMS Vendor: Roberto Aleman http://ventics.com/autocms/ Vulnerable Version: 1.6 and Probably Prior Versions Vendor Notification: 09 August 2010 Vulnerability Type: XSS Cross Site...

Webmatic 3.0.5 Cross Site Request Forgery / Cross Site Scripting

==================================== Vulnerability ID: HTB22568 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinwebmatic.html Product: Webmatic Vendor: Valarsoft http://www.valarsoft.com/ Vulnerable Version: 3.0.5 and Probably Prior Versions Vendor Notification: 09 August 2010...

MAXdev 1.0.83 Cross Site Scripting

Vulnerability ID: HTB22563 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinmaxdev.html Product: MAXdev Vendor: MAXdev http://www.maxdev.it/ Vulnerable Version: 1.0.83 and Probably Prior Versions Vendor Notification: 05 August 2010 Vulnerability Type: XSS Cross Site Scripting Status:...

Multiple Vulnerabilities in SantaFox

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in SantaFox which could be exploited to perform cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerability in SantaFox: CVE-2010-3463 The vulnerability exists due to input...

Cross-site Request Forgery (CSRF) Vulnerabilities in Amiro.CMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Amiro.CMS which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in Amiro.CMS 1.1 The vulnerability exists due to insufficient validation of the request origin i...

XSS vulnerability in CMS Source

Vulnerability ID: HTB22551 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincmssource2.html Product: CMS Source Vendor: Proud Daddy Web Design http://www.prouddaddy.net/ Vulnerable Version: Current at 28.07.2010 and Probably Prior Versions Vendor Notification: 28 July 2010 Vulnerabili...

Edit-X CMS Cross Site Scripting

Vulnerability ID: HTB22542 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityineditxcms.html Product: Edit-X CMS Vendor: Edit-X, Inc. http://www.edit-x.com/ Vulnerable Version: Current at 27.07.2010 and Probably Prior Versions Vendor Notification: 27 July 2010 Vulnerability Type: XSS Cro...