Shell create & command execution in JAF CMS

Vulnerability ID: HTB22665 Reference: http://www.htbridge.ch/advisory/shellcreatecommandexecutioninjafcms.html Product: JAF CMS Vendor: JAF CMS http://jaf-cms.sourceforge.net/ Vulnerable Version: 4.0 RC2 Vendor Notification: 21 October 2010 Vulnerability Type: Shell create command execution Statu...

JAF CMS 4.0 rc2 - Multiple Vulnerabilities

JAF CMS 4.0 rc2 - Multiple Vulnerabilities Vulnerability ID: HTB22665 Reference: http://www.htbridge.ch/advisory/shellcreatecommandexecutioninjafcms.html Product: JAF CMS Vendor: JAF CMS http://jaf-cms.sourceforge.net/ Vulnerable Version: 4.0 RC2 Vendor Notification: 21 October 2010 Vulnerability...

Kandidat CMS 1.4.2 Stored Cross Site Scripting Vulnerability

Exploit for php platform in category web applications ============================================================ Kandidat CMS 1.4.2 Stored Cross Site Scripting Vulnerability ============================================================ Product: Kandidat CMS Vendor: Kan-Studio...

MemHT Portal 4.0.1 Stored Cross Site Scripting Vulnerability

Exploit for php platform in category web applications ============================================================ MemHT Portal 4.0.1 Stored Cross Site Scripting Vulnerability ============================================================ Product: MemHT Portal Vendor: Miltenovik Manojlo...

Kandidat CMS 1.4.2 - Persistent Cross-Site Scripting

Kandidat CMS 1.4.2 - Persistent Cross-Site Scripting Vulnerability ID: HTB22648 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinkandidatcms.html Product: Kandidat CMS Vendor: Kan-Studio http://www.kan-studio.ru/ Vulnerable Version: 1.4.2 and probably prior versions Vendor Notificatio...

MemHT Portal 4.0.1 - Persistent Cross-Site Scripting

MemHT Portal 4.0.1 - Persistent Cross-Site Scripting Vulnerability ID: HTB22662 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinmemhtportal.html Product: MemHT Portal Vendor: Miltenovik Manojlo http://www.memht.com/ Vulnerable Version: 4.0.1 and probably prior versions Vendor...

XSS vulnerability in Kandidat CMS

Vulnerability ID: HTB22649 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinkandidatcms1.html Product: Kandidat CMS Vendor: Kan-Studio http://www.kan-studio.ru/ Vulnerable Version: 1.4.2 and probably prior versions Vendor Notification: 19 October 2010 Vulnerability Type: XSS Cross Sit...

Energine CMS SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================== Energine CMS SQL Injection Vulnerability ======================================== Reference: http://www.htbridge.ch/advisory/sqlinjectioninenergine.html Product: Energine Vendor: Energine...

SQL injection in Energine

Vulnerability ID: HTB22655 Reference: http://www.htbridge.ch/advisory/sqlinjectioninenergine.html Product: Energine Vendor: Energine http://energine.org/ Vulnerable Version: Vendor Notification: 13 October 2010 Vulnerability Type: SQL Injection Status: Not Fixed, Vendor Alerted, Awaiting Vendor...

MyBB v1.6 Full Path Disclosure Vulnerability

Exploit for php platform in category web applications ============================================ MyBB v1.6 Full Path Disclosure Vulnerability ============================================ Reference: http://www.htbridge.ch/advisory/pathdisclosureinmybb.html Product: MyBB Vendor: MyBB...

BloofoxCMS Registration Plugin SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================== BloofoxCMS Registration Plugin SQL Injection Vulnerability ========================================================== Reference:...

SQL injection in DBHcms

Vulnerability ID: HTB22651 Reference: http://www.htbridge.ch/advisory/sqlinjectionindbhcms.html Product: DBHcms Vendor: drbenhur.com http://www.drbenhur.com/ Vulnerable Version: 1.1.4 and probably prior versions Vendor Notification: 13 October 2010 Vulnerability Type: SQL Injection Status: Not...

XSS vulnerability in Zomplog

Vulnerability ID: HTB22642 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinzomplog.html Product: Zomplog Vendor: Gerben Schmidt http://www.zomp.nl/zomplog/ Vulnerable Version: 3.9 and probably prior versions Vendor Notification: 13 October 2010 Vulnerability Type: XSS Cross Site...

XSS vulnerability in BlogBird platform

Vulnerability ID: HTB22647 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinblogbird1.html Product: BlogBird Vendor: BlogBird http://www.blogbird.nl/ Vulnerable Version: Current actual version on http://www.blogbird.nl/ Vendor Notification: 13 October 2010 Vulnerability Type: Stored X...

Zomplog 3.9 Cross Site Request Forgery / Cross Site Scripting

============================================== Vulnerability ID: HTB22643 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinzomplog1.html Product: Zomplog Vendor: Gerben Schmidt http://www.zomp.nl/zomplog/ Vulnerable Version: 3.9 and probably prior versions Vendor Notification: 13...

Novaboard 1.1.4 Local File Inclusion

Vulnerability ID: HTB22657 Reference: http://www.htbridge.ch/advisory/lfiinnovaboard.html Product: Novaboard Vendor: Novaboard http://www.novaboard.net/ Vulnerable Version: 1.1.4 and probably prior versions Vendor Notification: 13 October 2010 Vulnerability Type: Local File Inclusion Status: Not...

BloofoxCMS 0.3.5 - Information Disclosure

BloofoxCMS 0.3.5 - Information Disclosure Vulnerability ID: HTB22660 Reference: http://www.htbridge.ch/advisory/informationdisclosureinbloofoxcms1.html Product: BloofoxCMS Vendor: bloofox.com http://bloofox.com/ Vulnerable Version: 0.3.5 and probably prior versions Vendor Notification: 13 October...

Novaboard 1.1.4 - Local File Inclusion

Vulnerability ID: HTB22657 Reference: http://www.htbridge.ch/advisory/lfiinnovaboard.html Product: Novaboard Vendor: Novaboard http://www.novaboard.net/ Vulnerable Version: 1.1.4 and probably prior versions Vendor Notification: 13 October 2010 Vulnerability Type: Local File Inclusion Status: Not...

Novaboard 1.1.4 - Local File Inclusion

Novaboard 1.1.4 - Local File Inclusion Vulnerability ID: HTB22657 Reference: http://www.htbridge.ch/advisory/lfiinnovaboard.html Product: Novaboard Vendor: Novaboard http://www.novaboard.net/ Vulnerable Version: 1.1.4 and probably prior versions Vendor Notification: 13 October 2010 Vulnerability...

Energine CMS - SQL Injection

Vulnerability ID: HTB22655 Reference: http://www.htbridge.ch/advisory/sqlinjectioninenergine.html Product: Energine Vendor: Energine http://energine.org/ Vulnerable Version: Vendor Notification: 13 October 2010 Vulnerability Type: SQL Injection Status: Not Fixed, Vendor Alerted, Awaiting Vendor...