Vulnerability Report on AWCM 2.2

Vulnerability Report AWCM 2.2 CVE-Candidate-ID: CVE-2012-2437, CVE-2012-2438 Issue: Access Control Bug in AWCM 2.2, Anyone can build the cookie and inserts DB records. Author: Sooel Son sonpostman at gmail dot com Source Code: http://sourceforge.net/projects/awcm/ 1. Details: CVE-2012-2437 Withou...

Code injection

Pebble before 2.6.4 allows remote attackers to trigger loss of blog-entry viewability via a crafted comment...

CVE-2012-4022

CVE-2012-4022 affects Pebble prior to 2.6.4. A specially crafted comment can cause arbitrary blog entries to become unviewable due to an issue in comment processing. The impact is loss of blog-entry viewability, with no explicit exploitation details provided in the documents. Remediation recommen...

PT-2012-5149

Name of the Vulnerable Software and Affected Versions Pebble versions prior to 2.6.4 Description The issue allows remote attackers to trigger loss of blog-entry viewability via a crafted comment. Recommendations For versions prior to 2.6.4, update to version 2.6.4 or later to resolve the issue...

CVE-2012-4022: Undefined Security Weakness

Pebble before 2.6.4 allows remote attackers to trigger loss of blog-entry viewability via a crafted comment...

Report Details Coca-Cola Cyber Attack That Never was Disclosed

In an exclusive report, Bloomberg News outlines a month-long, systematic attack on Cola-Cola’s computer systems that may have influenced the failed $2.4 billion acquisition of a Chinese juice company. The FBI knew about it. Coca-Cola knew about it. But shareholders were kept in the dark. The Coke...

Multi-Page Comment System CSRF/XSS Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Pebble vulnerability where entries may become unviewable

Overview Pebble contains a vulnerability where blog entries may become unviewable due to a specially crafted comment being posted. Pebble is an open source weblog system. Pebble contains an issue in the processing of comments that are posted on blog entries, which may lead to a vulnerability wher...

Movable Type Pro 5.13en Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Source URL: http://www.cloudscan.me/2012/10/cve-2012-1503-movable-type-pro-513en.html Keywords: CVE-2012-1503, Movable Type Pro 5.13en, Stored XSS, JavaScript Injection, Vendor Unresponsive, Full Disclosure Introduction Movable Type MT started as on...

Cross site scripting

Cross-site scripting XSS vulnerability in videocomments.php in Online Subtitles Workshop before 2.0 rev 131 allows remote attackers to inject arbitrary web script or HTML via the comment parameter...

CVE-2011-5185

Cross-site scripting XSS vulnerability in videocomments.php in Online Subtitles Workshop before 2.0 rev 131 allows remote attackers to inject arbitrary web script or HTML via the comment parameter...

PT-2012-2162

Name of the Vulnerable Software and Affected Versions Online Subtitles Workshop versions prior to 2.0 rev 131 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the comment parameter i...

CVE-2011-5185: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in videocomments.php in Online Subtitles Workshop before 2.0 rev 131 allows remote attackers to inject arbitrary web script or HTML via the comment parameter...

CVE-2012-4890

Multiple cross-site scripting XSS vulnerabilities in FlatnuX CMS 2011 08.09.2 and earlier allow remote attackers to inject arbitrary web script or HTML via a 1 comment to the news, 2 title to the news, or 3 the folder names in a gallery...

CVE-2012-4890

Multiple cross-site scripting XSS vulnerabilities in FlatnuX CMS 2011 08.09.2 and earlier allow remote attackers to inject arbitrary web script or HTML via a 1 comment to the news, 2 title to the news, or 3 the folder names in a gallery...

CVE-2012-4890: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in FlatnuX CMS 2011 08.09.2 and earlier allow remote attackers to inject arbitrary web script or HTML via a 1 comment to the news, 2 title to the news, or 3 the folder names in a gallery...

PT-2012-1882

Name of the Vulnerable Software and Affected Versions WikkaWiki versions 1.3.1 through 1.3.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the default comment display parameter in an update action in the actions/usersettings/usersettings.php...

BlueCMS - PHP local portal system 0day large collection of-vulnerability warning-the black bar safety net

Bluecms is from a company tutorial to see the cms, and then thought, since there, used to do tutorials, I'll dig this set of cms vulnerabilities, I did not dig deep end, also failed to adhere to the code to see finished. It has been found that a lot of problems. Can actually get a shell on it. !...

JJDD. COM to bypass permission verification any comment-vulnerability warning-the black bar safety net

http://jjdd.com/ for the heat of the people you want to reply to a comment, etc. are in need of red beans, and red beans to purchase. Now you can directly use this interface to bypass the front Desk permission to verify...

CVE-2012-4052: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Jease before 2.9, when creating a comment, allow remote attackers to inject arbitrary web script or HTML via the 1 author, 2 subject, or 3 comment parameter...