Dolphin 7.0.4 Cross Site Scripting

------------------------------------------------------------------------ Software................Dolphin 7.0.4 Vulnerability...........Reflected Cross-site Scripting Download................http://www.boonex.com/dolphin/ Release Date............2/10/2011 Tested On...............Windows Vista +...

HTB22822: XSS vulnerability in RunCMS

Vulnerability ID: HTB22822 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinruncms.html Product: RunCMS Vendor: http://www.runcms.org/ http://www.runcms.org/ Vulnerable Version: 2.2.2 Vendor Notification: 27 January 2011 Vulnerability Type: XSS Cross Site Scripting Risk level: Medium...

HTB22819: XSS vulnerability in WebAsyst Shop-Script

Vulnerability ID: HTB22819 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinwebasystshopscript1.html Product: WebAsyst Shop-Script Vendor: WebAsyst, LLC http://www.shop-script.ru/ Vulnerable Version: Current version 2011.01.23 shop-script.ru/demo/ Vendor Notification: 25 January 2011...

dotProject 2.1.5 Cross Site Scripting

------------------------------------------------------------------------ Software................dotProject 2.1.5 Vulnerability...........Reflected Cross-site Scripting Download................http://sourceforge.net/projects/dotproject/ Release Date............2/2/2011 Tested...

HTB22802: XSS in Podcast Generator

Vulnerability ID: HTB22802 Reference: http://www.htbridge.ch/advisory/xssinpodcastgenerator.html Product: Podcast Generator Vendor: Alberto Betella http://podcastgen.sourceforge.net/ Vulnerable Version: 1.3 Vendor Notification: 20 January 2011 Vulnerability Type: XSS Cross Site Scripting Risk...

Moodle 2.0.1 Cross Site Scripting

------------------------------------------------------------------------ Software................Moodle 2.0.1 Vulnerability...........Reflected Cross-site Scripting Download................http://moodle.org/ Release Date............1/27/2011 Tested On...............Windows Vista + XAMPP...

WordPress Audio 0.5.1 Cross Site Scripting

------------------------------------------------------------------------ Software................WordPress Audio 0.5.1 Vulnerability...........Reflected Cross-site Scripting Download................http://www.wordpress-plugin.org/tag/audio-0-5-1/ Release Date............1/23/2011 Tested...

WordPress RSS Feed Reader For WordPress 0.1 Cross Site Scripting

------------------------------------------------------------------------ Software................WordPress RSS Feed Reader for WordPress 0.1 Vulnerability...........Reflected Cross-site Scripting Download................http://pleer.co.uk/wordpress/plugins/rss-feed-reader Release...

WordPress BezahlCode-Generator 1.0 Cross Site Scripting

------------------------------------------------------------------------ Software................WordPress BezahlCode-Generator 1.0 Vulnerability...........Reflected Cross-site Scripting Download................http://www.bezahlcode.de/ Release Date............1/24/2011 Tested...

WordPress Conduit Banner 0.2 Cross Site Scripting

------------------------------------------------------------------------ Software................WordPress Conduit Banner Plugin 0.2 Vulnerability...........Reflected Cross-site Scripting Download................http://www.conduit.com/widget Release Date............1/24/2011 Tested...

WordPress oQey-Gallery 0.2 Cross Site Scripting

------------------------------------------------------------------------ Software................WordPress oQey-Gallery 0.2 Vulnerability...........Reflected Cross-site Scripting Download................http://oqeysites.com/ Release Date............1/24/2011 Tested On...............Windows 7 +...

XSS vulnerability in VaM Shop

Vulnerability ID: HTB22781 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinvamshop2.html Product: VaM Shop Vendor: Vamsoft http://vamshop.ru/ Vulnerable Version: 1.6 and Probably Prior Versions Vendor Notification: 28 December 2010 Vulnerability Type: XSS Cross Site Scripting Status:...

vam shop 1.6 - Multiple Vulnerabilities

vam shop 1.6 - Multiple Vulnerabilities Vulnerability ID: HTB22780 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinvamshop.html Product: VaM Shop Vendor: Vamsoft http://vamshop.ru/ Vulnerable Version: 1.6 and Probably Prior Versions Vendor Notification: 28 December 2010 Vulnerability Type:...

XSS vulnerability in WonderCMS

Vulnerability ID: HTB22759 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinwondercms.html Product: WonderCMS Vendor: Robert Isoski http://krneky.com/en/wondercms Vulnerable Version: 0.3.3 and probably prior versions Vendor Notification: 21 December 2010 Vulnerability Type: XSS Cross...

Injader CMS Multiple Vulnerabilities

Exploit for php platform in category web applications Vulnerability ID: HTB22745 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityininjadercms1.html Product: Injader CMS Vendor: http://www.injader.com/ http://www.injader.com/ Vulnerable Version: 2.4.4 Vendor Notification: 07 December 20...

Habari Blog - Multiple Vulnerabilities

Habari Blog - Multiple Vulnerabilities Vulnerability ID: HTB22732 Reference: http://www.htbridge.ch/advisory/pathdisclosureinhabari.html Product: Habari Vendor: Habari http://habariproject.org/en/ Vulnerable Version: 0.6.5 Vendor Notification: 02 December 2010 Vulnerability Type: Path disclosure...

html-edit CMS - Multiple Vulnerabilities

html-edit CMS - Multiple Vulnerabilities Vulnerability ID: HTB22734 Reference: http://www.htbridge.ch/advisory/sqlinjectioninhtmleditcms.html Product: HTML-EDIT CMS Vendor: html-edit web services http://www.html-edit.org/ Vulnerable Version: 3.1.8 Vendor Notification: 02 December 2010 Vulnerabili...

BEdita 3.0.1.2550 Cross Site Request Forgery

Vulnerability ID: HTB22729 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinbedita.html Product: BEdita Vendor: Chialab & ChannelWeb http://www.bedita.com/ Vulnerable Version: 3.0.1.2550 "betula" and probably prior versions Vendor Notification: 30 November 2010 Vulnerability Type: CSRF...

Cross Site Scripting vulnerability in Diferior

Vulnerability ID: HTB22722 Reference: http://www.htbridge.ch/advisory/crosssitescriptingvulnerabilityindiferior.html Product: Diferior Vendor: Povilas Musteikis http://www.diferior.com/ Vulnerable Version: 8.03 and probably prior versions Vendor Notification: 25 November 2010 Vulnerability Type:...

Design/Logic Flaw

Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, when the XMLHttpRequestSpy module in the Firebug add-on is used, does not properly handle interaction between the XMLHttpRequestSpy object and chrome privileged objects, which allows remote attackers to execute...