[MajorSecurity #25] Advanced Guestbook 2.4 for phpBB - Multiple XSS and SQL-Injection Vulnerabilities

MajorSecurity 25 Advanced Guestbook 2.4 for phpBB - Multiple XSS and SQL-Injection Vulnerabilities ---------------------------------------------------------------------------------------- Software: Advanced Guestbook for phpBB Version: 2.4 Type: Cross site scripting + SQL Injection Made public:...

[MajorSecurity #23] BLOG:CMS <= 4.0.0j - XSS and cookie disclosure

MajorSecurity 23 BLOG:CMS = 4.0.0j - XSS and cookie disclosure ------------------------------------------------------------------- Software: BLOG:CMS Version: 4.0.0j Type: Cross site scripting Made public: July, 22th 2006 Vendor: F-ART AGENCY, Ltd. - Radek Hulбn Page: http://blogcms.com/ Credits:...

[SA20583] Cabacos Web CMS "suchtext" Parameter Cross-Site Scripting

---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...

FreeBSD : phpldapadmin -- XSS and Script Insertion vulnerabilities (6d78202e-e2f9-11da-8674-00123ffe8333)

Secunia reports : phpLDAPadmin have some vulnerabilities, which can be exploited by malicious users to conduct script insertion attacks and by malicious people to conduct cross-site scripting attacks. 1 Some input isn't properly sanitised before being returned to the user. This can be exploited t...

[SA20030] MultiCalendars "calsids" Parameter SQL Injection Vulnerability

TITLE: MultiCalendars "calsids" Parameter SQL Injection Vulnerability SECUNIA ADVISORY ID: SA20030 VERIFY ADVISORY: http://secunia.com/advisories/20030/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: MultiCalendars 3.x http://secunia.com/product/9842/...

[SA19913] phpkb Knowledge Base "searchkeyword" Cross-Site Scripting

TITLE: phpkb Knowledge Base "searchkeyword" Cross-Site Scripting SECUNIA ADVISORY ID: SA19913 VERIFY ADVISORY: http://secunia.com/advisories/19913/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: phpkb Knowledge Base 1.x http://secunia.com/product/9697/...

Pinnacle Cart XSS

Pinnacle Cart XSS Vuln. discovered by : r0t Date: 30 april 2006 vendorlink:http://www.pinnaclecart.com/ affected versions:3.33 and prior orginal advisory:http://pridels.blogspot.com/2006/04/pinnacle-cart-xss.html Vuln. Description: Pinnacle Cart contains a flaw that allows a remote cross site...

Kmail <=2.3 vuln.

Kmail =2.3 vuln. Vulnerability discovered by : r0t Date: 28 april 2006 vendorlink:www.webofall.com/displaynews.php?id=4 affected versions:2.3 and prior orginal advisory:http://pridels.blogspot.com/2006/04/kmail-23-vuln.html Vuln. Description: 1. Multiple Cross-Site Scripting attack vulnerabilitie...

Open WebMail <=2.51 XSS vuln.

Open WebMail =2.51 XSS vuln. Vulnerability discovered by : r0t Date: 27 april 2006 vendorlink:http://openwebmail.org/ affected versions:2.51 and prior orginal advisory: http://pridels.blogspot.com/2006/04/open-webmail-251-xss-vuln.html Vuln. Description: Open WebMail contains a flaw that allows a...

phpldapadmin -- Cross-Site Scripting and Script Insertion vulnerabilities

Secunia reports: phpLDAPadmin have some vulnerabilities, which can be exploited by malicious users to conduct script insertion attacks and by malicious people to conduct cross-site scripting attacks. 1 Some input isn't properly sanitised before being returned to the user. This can be exploited to...

Portal Pack 6 XSS vuln.

Portal Pack 6 XSS vuln. Vuln. discovered by : r0t Date: 20 april 2006 vendor:www.kcscripts.com/scripts/portal-pack.htm affected versions:6.0 and prior orginal advisoy: http://pridels.blogspot.com/2006/04/portal-pack-6-xss-vuln.html Vuln. Description: Portal Pack contains a flaws that allows a...

[SA19697] warforge.NEWS Multiple Vulnerabilities

TITLE: warforge.NEWS Multiple Vulnerabilities SECUNIA ADVISORY ID: SA19697 VERIFY ADVISORY: http://secunia.com/advisories/19697/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote REVISION: 1.1 originally posted 2006-04-19 SOFTWARE: warforge.NEWS 1...

[SA19602] XBrite Members "id" SQL Injection Vulnerability

TITLE: XBrite Members "id" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA19602 VERIFY ADVISORY: http://secunia.com/advisories/19602/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: XBrite Members 1.x http://secunia.com/product/9242/ DESCRIPTION: snatch...

[SA19512] gtd-php Cross-Site Scripting and Script Insertion Vulnerabilities

TITLE: gtd-php Cross-Site Scripting and Script Insertion Vulnerabilities SECUNIA ADVISORY ID: SA19512 VERIFY ADVISORY: http://secunia.com/advisories/19512/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: gtd-php 0.x http://secunia.com/product/9122/...

SiteSearch Indexer 3.5 XSS vuln.

SiteSearch Indexer 3.5 XSS vuln. Vuln. discovered by : r0t Date: 31 march 2006 vendor:www.marcreed.com/projects/searchindexer/tutorial/ affected versions: 3.5 and prior orginal advisory: http://pridels.blogspot.com/2006/03/sitesearch-indexer-35-xss-vuln.html Vuln. description SiteSearch Indexer...

[SA19448] VBook Multiple Vulnerabilities

TITLE: VBook Multiple Vulnerabilities SECUNIA ADVISORY ID: SA19448 VERIFY ADVISORY: http://secunia.com/advisories/19448/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data, System access WHERE: From remote SOFTWARE: VBook 2.x http://secunia.com/product/9051/...

ActiveCampaign SupportTrio 2.5 vuln.

ActiveCampaign SupportTrio 2.5 vuln. Vuln. discovered by : r0t Date: 28 march 2006 vendor:http://www.activecampaign.com/ affected versions: 2.50.2 orginal advisory:http://pridels.blogspot.com/2006/03/activecampaign-supporttrio-25-vuln.html Vuln. description: ActiveCampaign SupportTrio contains a...

Helm Web Hosting Control Panel XSS vuln.

Helm Web Hosting Control Panel XSS vuln. Vuln. discovered by : r0t Date: 27 march 2006 vendor:http://www.webhostautomation.com/ affected versions:3.2.10 and prior orginal advisory: http://pridels.blogspot.com/2006/03/helm-web-hosting-control-panel-xss.html Vuln. description: Helm Web Hosting...

[SA19397] uniForum "websecadmin.aspx" Cross-Site Scripting

TITLE: uniForum "websecadmin.aspx" Cross-Site Scripting SECUNIA ADVISORY ID: SA19397 VERIFY ADVISORY: http://secunia.com/advisories/19397/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: uniForum 4.x http://secunia.com/product/8960/ DESCRIPTION: r0t has reported ...

SweetSuite.NET - ssCMS 2.1.x XSS vuln.

SweetSuite.NET - ssCMS 2.1.x XSS vuln. Vuln. discovered by : r0t Date: 25 march 2006 vendor: www.sweetsuite.net/ssCMSMain.aspx affected versions: 2.1.0 and prior orginal advisory: http://pridels.blogspot.com/2006/03/sweetsuitenet-sscms-21x-xss-vuln.html Vuln. Description: ssCMS contains a flaw th...