phpLiterAdmin 1.0 RC1 - Authentication Bypass

Vulnerability ID: HTB22653 Reference: http://www.htbridge.ch/advisory/authenticationbypassinphpliteradmin.html Product: phpLiterAdmin Vendor: phpLiterAdmin http://code.google.com/p/phpliteradmin/ Vulnerable Version: 1.0 RC1 and probably prior versions Vendor Notification: 13 October 2010...

Novaboard 1.1.4 - Local File Inclusion

Vulnerability ID: HTB22657 Reference: http://www.htbridge.ch/advisory/lfiinnovaboard.html Product: Novaboard Vendor: Novaboard http://www.novaboard.net/ Vulnerable Version: 1.1.4 and probably prior versions Vendor Notification: 13 October 2010 Vulnerability Type: Local File Inclusion Status: Not...

Energine CMS - SQL Injection

Vulnerability ID: HTB22655 Reference: http://www.htbridge.ch/advisory/sqlinjectioninenergine.html Product: Energine Vendor: Energine http://energine.org/ Vulnerable Version: Vendor Notification: 13 October 2010 Vulnerability Type: SQL Injection Status: Not Fixed, Vendor Alerted, Awaiting Vendor...

BlogBird Platform - Multiple Cross-Site Scripting Vulnerabilities

Vulnerability ID: HTB22647 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinblogbird1.html Product: BlogBird Vendor: BlogBird http://www.blogbird.nl/ Vulnerable Version: Current actual version on http://www.blogbird.nl/ Vendor Notification: 13 October 2010 Vulnerability Type: Stored X...

XSS vulnerability in sNews

Vulnerability ID: HTB22638 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinsnews1.html Product: sNews Vendor: sNews Team tp://www.snewscms.com/ Vulnerable Version: 1.7 and probably prior versions Vendor Notification: 05 October 2010 Vulnerability Type: XSS Cross Site Scripting Status...

sNews CMS - Multiple Cross-Site Scripting Vulnerabilities

sNews CMS - Multiple Cross-Site Scripting Vulnerabilities Vulnerability ID: HTB22638 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinsnews1.html Product: sNews Vendor: sNews Team tp://www.snewscms.com/ Vulnerable Version: 1.7 and probably prior versions Vendor Notification: 05 Octobe...

FilterFTP 2.0.3 Directory Traversal

Vulnerability ID: HTB22626 Reference: http://www.htbridge.ch/advisory/directorytraversalvulnerabilityinfilterftp.html Product: FilterFTP Vendor: IN MEDIA KG http://www.in-mediakg.com/software/filterftp/filterftp.shtml Vulnerable Version: 2.0.3 and Probably Prior Versions Vendor Notification: 22...

XSS vulnerability in Elxis CMS

Vulnerability ID: HTB22614 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinelxiscms.html Product: Elxis CMS Vendor: Elxis Team http://www.elxis.org/ Vulnerable Version: 2009.2 electra rev2631 and probably prior versions Vendor Notification: 20 September 2010 Vulnerability Type: XSS...

XSS vulnerability in Elxis CMS polls module

Vulnerability ID: HTB22616 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinelxiscmspollsmodule.html Product: Elxis CMS Vendor: Elxis Team http://www.elxis.org/ Vulnerable Version: 2009.2 electra rev2631 and probably prior versions Vendor Notification: 20 September 2010 Vulnerability...

Hackid

One of the more interesting trends is the way hacking culture is starting to trickle down from the technology cognoscenti to a far broader and equally receptive audience. Hackid is a great example of that. In its first year ever, Hackid is a conference specifically targeted at kids aged 5 to 17...

Jax Calender admin bypass vulnerability

Exploit for php platform in category web applications ======================================= Jax Calender admin bypass vulnerability ======================================= Exploit Title: Jax Calender admin bypass vulnerability Date: 3.10.2010 Author: EraGoN Software Link:...

Pluck 4.6.3 Cross Site Scripting

Vulnerability ID: HTB22610 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinpluck.html Product: Pluck Vendor: Pluck Team http://www.pluck-cms.org Vulnerable Version: 4.6.3 and probably prior versions Vendor Notification: 15 September 2010 Vulnerability Type: XSS Cross Site Scripting...

PdShop Pro Online Store System SQL Injection

----------------------------------------------------------------------------------------- PdShop pro Online Store System. SQL-i Vulnerability -----------------------------------------------------------------------------------------...

e107 v0.7.23 SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================== e107 v0.7.23 SQL Injection Vulnerability ======================================== Product: e107 Website System Vendor: e107 http://www.e107.org/ Vulnerable Version: 0.7.23 and Probably Prior Versions...

BPJewelry Store SQL Injection

----------------------------------------------------------------------------------------- BPJewelry Store SQL-i Vulnerability ----------------------------------------------------------------------------------------- 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /'...

Entrans 0.3.2 Cross Site Scripting / SQL Injection

======================================= Vulnerability ID: HTB22606 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinentrans.html Product: Entrans Vendor: Khader Abbeb N http://sourceforge.net/projects/entrans/ Vulnerable Version: 0.3.2 and Probably Prior Versions Vendor Notification: ...

Car Portal 2.0 - Blind SQL Injection

Car Portal 2.0 - Blind SQL Injection +Title Car Portal v2.0 BLIND SQL Injection Vulnerability +Author RoAdKiLlEr +Contact RoAdKiLlEratKhg-CrewdotWs +Tested on Win Xp Sp 2/3 --------------------------------------------------------------------------- Founded by RoAdKiLlEr Team: Albanian Hacking Cre...

Allpc 2.5 osCommerce - SQL Injection / Cross-Site Scripting

+Title Allpc 2.5 osCommerce SQL-i/XSS Multiple Vulnerabilities +Author RoAdKiLlEr +Contact RoAdKiLlEratKhg-CrewdotWs +Tested on Win Xp Sp 2/3 --------------------------------------------------------------------------- Founded by RoAdKiLlEr Team: Albanian Hacking Crew Version: 2.5 Vendor:...

Joomla Component com_elite_experts SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================================== Joomla Component comeliteexperts SQL Injection Vulnerability ==============================================================...

Joomla Elite Experts SQL Injection

+Title Joomla Component comeliteexperts SQL Injection Vulnerability +Author RoAdKiLlEr +Contact RoAdKiLlEratKhg-CrewdotWs +Tested on Win Xp Sp 2/3 --------------------------------------------------------------------------- Founded by RoAdKiLlEr Team: Albanian Hacking Crew Contact:...