[SA18749] Clever Copy "ID" Parameter SQL Injection Vulnerability

TITLE: Clever Copy "ID" Parameter SQL Injection Vulnerability SECUNIA ADVISORY ID: SA18749 VERIFY ADVISORY: http://secunia.com/advisories/18749/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: Clever Copy 2.x http://secunia.com/product/5445/ Clever Copy 3.x...

[SA18369] MusicBox SQL Injection Vulnerabilities

TITLE: MusicBox SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA18369 VERIFY ADVISORY: http://secunia.com/advisories/18369/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: MusicBox 2.x http://secunia.com/product/6768/ DESCRIPTION: Medo HaCKer has...

[SA18408] AspTopSites SQL Injection Vulnerabilities

TITLE: AspTopSites SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA18408 VERIFY ADVISORY: http://secunia.com/advisories/18408/ CRITICAL: Moderately critical IMPACT: Security Bypass, Manipulation of data WHERE: From remote SOFTWARE: AspTopSites http://secunia.com/product/6775/ DESCRIPTION:...

[SA18272] VEGO Links Builder "username" SQL Injection Vulnerability

TITLE: VEGO Links Builder "username" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA18272 VERIFY ADVISORY: http://secunia.com/advisories/18272/ CRITICAL: Moderately critical IMPACT: Security Bypass, Manipulation of data WHERE: From remote SOFTWARE: VEGO Links Builder 2.x...

Communique 4 XSS vuln.

Communique 4 XSS vuln. Vuln. discovered by : r0t Date: 23 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/communiqu-4-xss-vuln.html vendor:www.day.com/site/en/index.html affected version: 4 and prior Product Description: Communique 4 is the first native JCR JSR 170 standard complia...

RAMSite R|1 CMS XSS vuln.

RAMSite R|1 CMS XSS vuln. Vuln. discovered by : r0t Date: 21 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/ramsite-r1-cms-xss-vuln.html vendor:http://ramsiter1.imikalsen.com/ affected version:1.0 and prior Product Description: The RAMSite R|1 CMS is an advanced, yet easy to use a...

Redakto WCMS multiple XSS vuln.

Redakto WCMS multiple XSS vuln. Vuln. discovered by : r0t Date: 21 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/redakto-wcms-multiple-xss-vuln.html vendor:http://computeroil.com/ affected version:3.2 and prior Product Description: With our Content Management System Redakto, you...

ProjectApp mutliple XSS vuln.

ProjectApp mutliple XSS vuln. Vuln. discovered by : r0t Date: 21 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/projectapp-mutliple-xss-vuln.html vendor:www.aspapp.com/content.asp?contentid=323 affected version:v3.3 and prior Product Description: ProjectApp is a customizable...

Sitekit CMS multiple XSS vuln.

Sitekit CMS multiple XSS vuln. Vuln. discovered by : r0t Date: 21 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/sitekit-cms-multiple-xss-vuln.html vednor:http://www.sitekit.net/ affected version:v6.6 and prior Product Description: Sitekit CMS v6.6 enables non-technical business...

[SA18122] AbleDesign ReSearch Cross-Site Scripting Vulnerability

TITLE: AbleDesign ReSearch Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA18122 VERIFY ADVISORY: http://secunia.com/advisories/18122/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: AbleDesign ReSearch 2.x http://secunia.com/product/6576/ DESCRIPTION:...

NQcontent V3 XSS vuln.

NQcontent V3 XSS vuln. Vuln. discovered by : r0t Date: 19 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/nqcontent-v3-xss-vuln.html vendor:http://www.nqcontent.com/ affected version:V3 Professional Edition,V3 Enterprise Edition,V3 Comparison Matrix. Product Description: NQcontent ...

[SA18132] ASPBite "strSearch" Cross-Site Scripting Vulnerability

TITLE: ASPBite "strSearch" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA18132 VERIFY ADVISORY: http://secunia.com/advisories/18132/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: ASPBite 8.x http://secunia.com/product/6577/ DESCRIPTION: Preddy has...

Lutece XSS vuln.

Lutece XSS vuln. Vuln. discovered by : r0t Date: 18 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/lutece-xss-vuln.html vendor:http://lutece.paris.fr affected version:1.2.3 and prior Product Description: Lutece is a web portal engine that lets you quickly create internet or intran...

FLIP XSS vuln.

FLIP XSS vuln. Vuln. discovered by : r0t Date: 17 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/flip-xss-vuln.html vendor:http://www.flipdev.org/ affected version: 0.9.0.1029 and prior Product Description: The Free Lanparty Inter-/Intranet Portal contains CMS, Groupware and...

damoon(r) XSS vuln

damoonr XSS vuln Vuln. discovered by : r0t Date: 18 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/damoon-xss-vuln.html vendor:http://www.mindroute.us/?id=2452 affected version: latest Vuln. Description: damoonr contains a flaw that allows a remote cross site scripting attack. Thi...

Hot Banana XSS vuln.

Hot Banana XSS vuln. Vuln. discovered by : r0t Date: 17 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/hot-banana-xss-vuln.html vendor:www.hotbanana.com/products/web-content-management-suite/ affected version: 5.3 and prior Description: Founded in 1999, Hot Banana powers Web sites...

Libertas Enterprise CMS XSS vuln.

Libertas Enterprise CMS XSS vuln. Vuln. discovered by : r0t Date: 18 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/libertas-enterprise-cms-xss-vuln.html vendor:http://www.libertas-solutions.com/ affected version:3.0 and prior Product Description: Libertas Enterprise Content...

AWF (Adaptive Website Framework) vuln.

AWF Adaptive Website Framework vuln. Vuln. discovered by : r0t Date: 17 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/awf-adaptive-website-framework-vuln.html vendor:http://www.awf-cms.org affected version:2.10 and prior Product Description: AWF Adaptive Website Framework by Liqu...

EPiX™ Search query XSS vuln.

EPiX™ Search query XSS vuln. Vuln. discovered by : r0t Date: 17 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/epix-search-query-xss-vuln.html vendor:http://www.go-epix.net/ affected version:3.1.2 and prior Product Description: EPIX is a low cost portal solution with CMS...

Acuity CMS 2.6.x (ASP) XSS vuln.

Acuity CMS 2.6.x ASP XSS vuln. Vuln. discovered by : r0t Date: 17 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/acuity-cms-26x-asp-xss-vuln.html vendor:http://www.acuitycms.com/ affected version:2.6.2 Product Description: Acuity CMS is a highly affordable, very easy to use conten...