Mac OS X : Apple Safari < 6.1.5 / 7.0.5 Multiple Vulnerabilities

The version of Apple Safari installed on the remote Mac OS X host is a version prior to 6.1.5 or 7.0.5. It is, therefore, affected by the following vulnerabilities : - Multiple memory corruption vulnerabilities exist in WebKit that could lead to unexpected program termination or arbitrary code...

Lotus CMS 3.0.3 XSRF / XSS / File Content Disclosure

============================ Vulnerability ID: HTB22888 Reference: http://www.htbridge.ch/advisory/filecontentdisclosureinlotuscms.html Product: LotusCMS Vendor: Arboroia Network http://www.lotuscms.org/ Vulnerable Version: 3.0.3 and probably prior versions Vendor Notification: 01 March 2011...

HTB22888: File Content Disclosure in LotusCMS

Vulnerability ID: HTB22888 Reference: http://www.htbridge.ch/advisory/filecontentdisclosureinlotuscms.html Product: LotusCMS Vendor: Arboroia Network http://www.lotuscms.org/ Vulnerable Version: 3.0.3 and probably prior versions Vendor Notification: 01 March 2011 Vulnerability Type: File Content...

Wordpress GRAND Flash Album Gallery 0.55 Plugin Multiple Vulnerabilities

Exploit for php platform in category web applications Product: GRAND Flash Album Gallery wordpress plugin Vendor: Sergey Pasyuk http://codeasily.com/ Vulnerable Version: 0.55 Vendor Notification: 22 February 2011 Vulnerability Type: SQL Injection Risk level: High Credit: High-Tech Bridge SA -...

HTB22871: File Content Disclosure in GRAND Flash Album Gallery wordpress plugin

Vulnerability ID: HTB22871 Reference: http://www.htbridge.ch/advisory/filecontentdisclosureingrandflashalbumgallerywordpressplugin.html Product: GRAND Flash Album Gallery wordpress plugin Vendor: Sergey Pasyuk http://codeasily.com/ Vulnerable Version: 0.55 Vendor Notification: 22 February 2011...

WordPress Plugin GRAND Flash Album Gallery 0.55 - Multiple Vulnerabilities

Vulnerability ID: HTB22870 Reference: http://www.htbridge.ch/advisory/sqlinjectioningrandflashalbumgalle rywordpressplugin.html Product: GRAND Flash Album Gallery wordpress plugin Vendor: Sergey Pasyuk http://codeasily.com/ Vulnerable Version: 0.55 Vendor Notification: 22 February 2011...

WordPress Plugin GRAND Flash Album Gallery 0.55 - Multiple Vulnerabilities

WordPress Plugin GRAND Flash Album Gallery 0.55 - Multiple Vulnerabilities Vulnerability ID: HTB22870 Reference: http://www.htbridge.ch/advisory/sqlinjectioningrandflashalbumgalle rywordpressplugin.html Product: GRAND Flash Album Gallery wordpress plugin Vendor: Sergey Pasyuk http://codeasily.com...

WordPress GRAND Flash Album Gallery Plugin 0.55 - Multiple Vulnerabilities

There are several vulnerabilities in this WordPress GRAND Flash Album Gallery plugin. First vulnerability is SQL injection that exists because of failure in the "/wp-content/plugins/flash-album-gallery/lib/hitcounter.php" script to properly sanitize user-supplied input in "pid" variable. It allow...

BackWPup WordPress Plugin 1.4.0 File Content Disclosure

============================================= - Release date: Feb 28th, 2010 - Discovered by: Danilo Massa - Severity: High ============================================= I. VULNERABILITY ------------------------- BackWPup Wordpress plugin = 1.4.0 File content disclosure II. BACKGROUND...

HTB22827: File Content Disclosure in Wikipad

Vulnerability ID: HTB22827 Reference: http://www.htbridge.ch/advisory/filecontentdisclosureinwikipad.html Product: Wikipad Vendor: Cherry-Design http://www.cherry-software.spb.ru/ Vulnerable Version: 1.6.0 Vendor Notification: 01 February 2011 Vulnerability Type: File Content Disclosure Risk leve...

HTB22791: File Content Disclosure in Pixelpost

Vulnerability ID: HTB22791 Reference: http://www.htbridge.ch/advisory/filecontentdisclosureinpixelpost.html Product: Pixelpost Vendor: Pixelpost http://www.pixelpost.org/ Vulnerable Version: 1.7.3 Vendor Notification: 11 January 2011 Vulnerability Type: File Content Disclosure Status: Awaiting...

Pixelpost 1.7.3 Cross Site Scripting / Disclosure

================================ Vulnerability ID: HTB22794 Reference: http://www.htbridge.ch/advisory/pathdisclousureinpixelpost.html Product: Pixelpost Vendor: Pixelpost http://www.pixelpost.org/ Vulnerable Version: 1.7.3 Vendor Notification: 11 January 2011 Vulnerability Type: Path disclousure...

File Content Disclosure in TCMS

Vulnerability ID: HTB22579 Reference: http://www.htbridge.ch/advisory/filecontentdisclosureintcms.html Product: TCMS Vendor: Target CMS http://targetcms.com/ Vulnerable Version: 100728 and Probably Prior Versions Vendor Notification: 09 August 2010 Vulnerability Type: File Content Disclosure...

FTPGetter 3.51.0.05 Directory Traversal

Vulnerability ID: HTB22567 Reference: http://www.htbridge.ch/advisory/directorytraversalinftpgetter.html Product: FTPGetter Vendor: FTPGetter Team http://www.ftpgetter.com/ Vulnerable Version: 3.51.0.05 and Probably Prior Versions Vendor Notification: 05 August 2010 Vulnerability Type: File Conte...

AutoFTP Manager 4.31 Directory Traversal

Vulnerability ID: HTB22566 Reference: http://www.htbridge.ch/advisory/directorytraversalinautoftpmanager.html Product: AutoFTP Manager Vendor: DeskShare http://www.deskshare.com/afm.aspx Vulnerable Version: 4.31 and Probably Prior Versions Vendor Notification: 05 August 2010 Vulnerability Type:...

Directory Traversal in FTPGetter

Vulnerability ID: HTB22567 Reference: http://www.htbridge.ch/advisory/directorytraversalinftpgetter.html Product: FTPGetter Vendor: FTPGetter Team http://www.ftpgetter.com/ Vulnerable Version: 3.51.0.05 and Probably Prior Versions Vendor Notification: 05 August 2010 Vulnerability Type: File Conte...

Directory Traversal in 3D FTP Client

Vulnerability ID: HTB22565 Reference: http://www.htbridge.ch/advisory/directorytraversalin3dftpclient.html Product: 3D FTP Client Vendor: SiteDesigner Technologies, Inc. http://3dftp.com/3dftp.htm Vulnerable Version: 9.0 build 2 and Probably Prior Versions Vendor Notification: 05 August 2010...

Directory Traversal in AutoFTP Manager

Vulnerability ID: HTB22566 Reference: http://www.htbridge.ch/advisory/directorytraversalinautoftpmanager.html Product: AutoFTP Manager Vendor: DeskShare http://www.deskshare.com/afm.aspx Vulnerable Version: 4.31 and Probably Prior Versions Vendor Notification: 05 August 2010 Vulnerability Type:...

CVE-2009-1332

The Online Help feature in Sun Java System Directory Server 5.2 and Enterprise Edition 5 allows remote attackers to determine the existence of files and directories, and possibly obtain partial contents of files, via unspecified vectors...

simpgb14602-disclose.txt

netVigilance Security Advisory 65 SimpGB version 1.46.02 File Content Disclosure Vulnerability Description: SimpGB is a guestbook with data stored in MySQL, administration interface and support for multiple languages. Features: Data stored in MySQL, Administration interface, Support for multiple...