HTB22917: XSS vulnerabilities in phpCollab

Vulnerability ID: HTB22917 Reference: http://www.htbridge.ch/advisory/xssvulnerabilitiesinphpcollab.html Product: phpCollab Vendor: phpCollab Team http://www.php-collab.org/ Vulnerable Version: 2.5 and probably prior versions Vendor Notification: 24 March 2011 Vulnerability Type: Stored XSS Cross...

eyeOS 2.3 Cross Site Scripting

------------------------------------------------------------------------ Software................eyeOS 2.3 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://www.eyeos.org/ Discovery Date..........4/3/2011 Tested...

WordPress Placester 0.1.0 Cross Site Scripting

------------------------------------------------------------------------ Software................WordPress Placester 0.1.0 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://www.wordpress-plugin.org/plugin/placester-plugin/...

LiveStreet 0.4.2 Cross Site Scripting

------------------------------------------------------------------------ Software................LiveStreet 0.4.2 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://livestreetcms.com/ Discovery Date..........4/3/2011 Tested...

Claroline 1.10 - Persistent Cross-Site Scripting

------------------------------------------------------------------------ Software................Claroline 1.10 Vulnerability...........Persistent Cross-site Scripting Threat Level............Moderate 2/5 Download................http://www.claroline.net/ Disclosure Date.........4/6/2011 Tested...

Claroline 1.10 - Persistent Cross-Site Scripting

Claroline 1.10 - Persistent Cross-Site Scripting ------------------------------------------------------------------------ Software................Claroline 1.10 Vulnerability...........Persistent Cross-site Scripting Threat Level............Moderate 2/5...

osCSS2 2.1.0 RC12 Cross Site Scripting

------------------------------------------------------------------------ Software................osCSS2 2.1.0 RC12 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://www.oscss.org/ Disclosure Date.........4/6/2011 Tested...

Web Edition 6.1.0.2 Cross Site Scripting

------------------------------------------------------------------------ Software................Web Edition 6.1.0.2 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://www.webedition.org Vendor Contact Date.....3/13/2011 Disclosur...

ClanSphere 2010.3 / CKEditor Cross Site Scripting

------------------------------------------------------------------------ Software................ClanSphere 2010.3 / CKEditor Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://www.csphere.eu/ Vendor Contact Date.....3/10/2011...

Collabtive 0.6.5 Cross Site Scripting

------------------------------------------------------------------------ Software................Collabtive 0.6.5 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://collabtive.o-dyn.de/ Vendor Contact Date.....3/10/2011 Disclosure...

OpenCollab 1.4.3 Cross Site Scripting

------------------------------------------------------------------------ Software................OpenCollab 1.4.3 Vulnerability...........Persistent Cross-site Scripting Threat Level............Moderate 2/5 Download................http://www.opencollab.de/ Vendor Contact Date.....3/10/2011...

b2evolution 4.0.3 Persistent XSS Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------ Software................b2evolution 4.0.3 Vulnerability...........Persistent Cross-site Scripting Threat Level............Moderate 2/5...

WikiWig 5.01 Cross Site Scripting

------------------------------------------------------------------------ Software................WikiWig 5.01 Vulnerability...........Persistent/Reflected Cross-site Scripting Threat Level............Moderate 2/5 Download................http://wikiwig.sourceforge.net/ Disclosure...

b2evolution 4.0.3 Cross Site Scripting

------------------------------------------------------------------------ Software................b2evolution 4.0.3 Vulnerability...........Persistent Cross-site Scripting Threat Level............Moderate 2/5 Download................http://b2evolution.net/ Vendor Contact Date.....3/15/2011...

b2evolution 4.0.3 - Persistent Cross-Site Scripting

Source: http://packetstormsecurity.org/files/view/99362/b2evolution403-xss.txt ------------------------------------------------------------------------ Software................b2evolution 4.0.3 Vulnerability...........Persistent Cross-site Scripting Threat Level............Moderate 2/5...

PhotoSmash 1.0.1 Cross Site Scripting

Vulnerability ID: HTB22867 Reference: http://www.htbridge.ch/advisory/xssinphotosmashwordpressplugin.html Product: PhotoSmash wordpress plugin Vendor: Byron Bennett http://smashly.net/ Vulnerable Version: 1.0.1 Vendor Notification: 22 February 2011 Vulnerability Type: XSS Cross Site Scripting...

Interleave 5.5.0.2 Cross Site Scripting

------------------------------------------------------------------------ Software................Interleave 5.5.0.2 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://www.interleave.nl/en/ Release Date............3/3/2011 Tested...

WordPress ComicPress Manager 1.4.9.9 Cross Site Scripting

------------------------------------------------------------------------ Software................WordPress ComicPress Manager 1.4.9.9 Vulnerability...........Reflected Cross-site Scripting Download................http://comicpress.org/forum/ Release Date............2/23/2011 Tested...

WordPress Local Market Explorer 3.1.1 Cross Site Scripting

------------------------------------------------------------------------ Software................WordPress Local Market Explorer 3.1.1 Vulnerability...........Reflected Cross-site Scripting Download................http://wordpress.org/extend/plugins/local-market-explorer/ Release...

WordPress YT-Audio 1.7 Cross Site Scripting

------------------------------------------------------------------------ Software................WordPress YT-Audio 1.7 Vulnerability...........Reflected Cross-site Scripting Download................http://www.erik-rasmussen.com/blog/2007/09/25/yt-audio-audio-hosting-from-youtube-in-wordpress/...