Multiple Vulnerabilities in Theeta CMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Theeta CMS which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting vulnerabilities XSS in Theeta CMS 1.1 The vulnerability exists due to input sanitation error i...

XSS vulnerability in CruxPA

Vulnerability ID: HTB22452 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincruxpa3.html Product: CruxPA Vendor: CruxSoftware Vulnerable Version: 2.00 and Probably Prior Versions Vendor Notification: 21 June 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed, Vendor...

XSS vulnerability in CruxCMS

Vulnerability ID: HTB22445 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincruxcms.html Product: CruxCMS Vendor: CruxSoftware Vulnerable Version: 3.00 and Probably Prior Versions Vendor Notification: 21 June 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed, Vendor...

XSS vulnerability in CruxPA

Vulnerability ID: HTB22451 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincruxpa2.html Product: CruxPA Vendor: CruxSoftware Vulnerable Version: 2.00 and Probably Prior Versions Vendor Notification: 21 June 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed, Vendor...

CruxPA 2.00 Cross Site Scripting

================================================ Vulnerability ID: HTB22452 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincruxpa3.html Product: CruxPA Vendor: CruxSoftware Vulnerable Version: 2.00 and Probably Prior Versions Vendor Notification: 21 June 2010 Vulnerability Type: XSS...

Ecomat CMS Remote SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================= Ecomat CMS Remote SQL Injection Vulnerability ============================================= Product: Ecomat CMS Vendor: Codefabrik GmbH Vulnerable Version: 5.0 and Probably Prior Versions Vendor...

Ecomat CMS - SQL Injection

Vulnerability ID: HTB22390 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinecomatcms.html Product: Ecomat CMS Vendor: Codefabrik GmbH Vulnerable Version: 5.0 and Probably Prior Versions Vendor Notification: 18 May 2010 Vulnerability Type: SQL Injection Status: Not Fixed,...

XSS vulnerability in Scribe CMS

Vulnerability ID: HTB22421 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinscribecms1.html Product: Scribe CMS Vendor: Sigmer Technologies Vulnerable Version: Current at 03.06.2010 and Probably Prior Versions Vendor Notification: 07 June 2010 Vulnerability Type: XSS Cross Site...

synType CMS Cross Site Scripting

Vulnerability ID: HTB22417 Reference: http://www.htbridge.ch/advisory/storedxssvulnerabilityinsyntypecmscommenttextfield.html Product: synType CMS Vendor: MindArray GbR Vulnerable Version: V.0.12.2 and Probably Prior Versions Vendor Notification: 03 June 2010 Vulnerability Type: Stored XSS Cross...

XSS vulnerability in Scribe CMS

Vulnerability ID: HTB22422 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinscribecms2.html Product: Scribe CMS Vendor: Sigmer Technologies Vulnerable Version: Current at 03.06.2010 and Probably Prior Versions Vendor Notification: 07 June 2010 Vulnerability Type: XSS Cross Site...

Scribe CMS Cross Site Scripting

Vulnerability ID: HTB22422 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinscribecms2.html Product: Scribe CMS Vendor: Sigmer Technologies Vulnerable Version: Current at 03.06.2010 and Probably Prior Versions Vendor Notification: 07 June 2010 Vulnerability Type: XSS Cross Site...

Multiple Vulnerabilities in DBHcms

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in DBHcms which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerabilities in DBHcms 1.1 The vulnerability exists due to input sanitation error in the...

SQL injection vulnerability in MODx CMS and Application Framework

Vulnerability ID: HTB22412 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinmodxcmsandapplicationframework.html Product: MODx CMS and Application Framework Vendor: MODx Vulnerable Version: 1.0.3 and Probably Prior Versions Vendor Notification: 28 May 2010 Vulnerability Type:...

SQL injection vulnerability in MODx CMS

Vulnerability ID: HTB22414 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinmodxcms.html Product: MODx CMS and Application Framework Vendor: MODx Vulnerable Version: 1.0.3 and Probably Prior Versions Vendor Notification: 28 May 2010 Vulnerability Type: SQL Injection Status: N...

Cross-site Scripting (XSS) Vulnerability in Limny

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Limny which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Limny The vulnerability exists due to input sanitation error in the " q" parameter in...

SQL Injection Vulnerabilities in Mac's CMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Mac's CMS which could be exploited to perform SQL injection attacks. 1 SQL injection vulnerability in Mac's CMS 1.1 The vulnerability exists due to input sanitation errors in the “commentId” parameter in index.ph...

Sql injection

SQL injection vulnerability in the Shape5 Bridge of Hope template for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an article action to index.php...

CVE-2010-2254

The vulnerability CVE-2010-2254 affects the Shape5 Bridge of Hope template for Joomla! where a SQL injection is possible through the id parameter in an article action to index.php. The underlying issue is improper handling of user-supplied input in the Joomla! template component, enabling a remot...

CuteSITE CMS 1.5.0 SQL Injection

Vulnerability ID: HTB22396 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityincutesitecms.html Product: CuteSITE CMS Vendor: AMT Company Vulnerable Version: 1.5.0 and Probably Prior Versions Vendor Notification: 20 May 2010 Vulnerability Type: SQL Injection Status: Not Fixed,...

CuteSITE CMS 1.5.0 Cross Site Request Forgery

Vulnerability ID: HTB22395 Reference: http://www.htbridge.ch/advisory/xsrfcsrfincutesitecms.html Product: CuteSITE CMS Vendor: AMT Company Vulnerable Version: 1.5.0 and Probably Prior Versions Vendor Notification: 20 May 2010 Vulnerability Type: CSRF Cross-Site Request Forgery Status: Not Fixed,...