Amaxus vuln.

Amaxus vuln. Vuln. discovered by : r0t Date: 17 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/amaxus-vuln.html vendor:http://www.boxuk.com/ affected version: 3 and prior About Amaxus Amaxus is Box UK's XML Content Management System, currently delivering hundreds of thousands of...

Acuity CMS 2.6.x (ASP) XSS vuln.

Acuity CMS 2.6.x ASP XSS vuln. Vuln. discovered by : r0t Date: 17 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/acuity-cms-26x-asp-xss-vuln.html vendor:http://www.acuitycms.com/ affected version:2.6.2 Product Description: Acuity CMS is a highly affordable, very easy to use conten...

AtlantForum XSS vuln.

AtlantForum XSS vuln. Vuln. discovered by : r0t Date: 15 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/atlantforum-xss-vuln.html vendor:www.atlantpro.com/atlfm.html affected version:4.02 and prior, also AtlantForum Lite and AtlantForum Pro can have same vuln. Product Description:...

paFileDB Extreme Edition SQL inj

paFileDB Extreme Edition SQL inj Vuln. discovered by : r0t Date: 16 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/pafiledb-extreme-edition-sql-inj.html vendor:http://pafiledb.byethost15.com/ affected version:RC 5 and prior Product Description: The core of this script is based on...

DCForum XSS vuln.

DCForum XSS vuln. Vuln. discovered by : r0t Date: 15 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/dcforum-xss-vuln.html vendor:www.dcscripts.com/dcforum.shtml affected version: 6.25 and prior Product Description: DCForum a complete bulletin board system from DCScripts. Its main...

Link Up Gold vuln.

Link Up Gold vuln. Vuln. dicovered by : r0t Date: 13 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/link-up-gold-vuln.html vendor:http://www.phpwebscripts.com/linkupgold/ affected version:2.5 and prior Product Description: An unique script for running your own linksite/search...

WikkaWiki XSS vuln.

WikkaWiki XSS vuln. Vuln. dicovered by : r0t Date: 14 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/wikkawiki-xss-vuln.html vendor:http://wikka.jsnx.com/ affected version:1.1.6.0 and prior Product Description: WikkaWiki is a lightweight and flexible wiki engine allowing easy...

DreamPoll SQL inj.

DreamPoll SQL inj. Vuln. dicovered by : r0t Date: 14 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/dreampoll-sql-inj.html vendor:http://dreamlevels.com/dreampoll.php affected version: 3.0 final and prior Product Description: DreamPoll is an enhanced version of Advanced Poll Build...

Ideal BB.NET 1.3 XSS vuln

Ideal BB.NET 1.3 XSS vuln Vuln. dicovered by : r0t Date: 6 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/ideal-bbnet-13-xss-vuln.html vendor:www.idealscience.com/site/products/idealbb.net.aspx affected version: 1.3 and prior Product Description: It is a powerful bulletin board...

Magic List pro 2.5 SQL inj. vuln.

Magic List pro 2.5 SQL inj. vuln. Vuln. dicovered by : r0t Date: 6 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/magic-list-pro-25-sql-inj-vuln.html vendor:www.cfmagic.com/products/magiclistpro.cfm affected version:2.5 Product Description: Magic List Pro is our full-featured opt-...

1- Search XSS vuln.

1- Search XSS vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/1-search-xss-vuln.html vendor:http://www.1-script.com/1search/ affected version:1.80 and prior Product Description: An advanced site search script written with search engines...

Cars Portal v1.x SQL injection.

Cars Portal v1.x SQL injection. Vuln. dicovered by : r0t Date: 5 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/cars-portal-v1x-sql-injection.html vendor:http://software.getcar.biz/ affected version:v1.1 and prior Product Description: Cars Portal is a software solution for running...

Solupress News XSS vuln

Solupress News XSS vuln Vuln. dicovered by : r0t Date: 3 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/solupress-news-xss-vuln.html Vendor:http://www.inspironetworks.com/solupress/solupressnews.html affected version:1.0 and prior Product Description: Solupress News is a...

88Script's Event Calendar v2.0 SQL inj. vuln.

88Script's Event Calendar v2.0 SQL inj. vuln. Vuln. dicovered by : r0t Date: 29 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/88scripts-event-calendar-v20-sql-inj.html Vendor:http://www.88scripts.com/ affected version: v2.0 and prior Product Description: A simple yet elegant even...

Zainu 2.x SQL inj. vuln.

Zainu 2.x SQL inj. vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/zainu-2x-sql-inj-vuln.html Vendor:http://www.zainu.com affected version: 2.x and prior Product Description: Zainu lets you create and maintain professional music videos websit...

WSN Forum "id" SQL Injection Vulnerability

WSN Forum "id" SQL Injection Vulnerability Vuln. dicovered by : r0t Orginal advisory:http://pridels.blogspot.com/2005/11/wsn-forum-id-sql-injection.html Vendor:http://www.wsnforum.com/ affected version:1.21 and maybe prior versions. Vuln Description: Input passed to the "id" parameter in...

[SA16726] Unclassified NewsBoard "Description" Script Insertion Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

[SA16511] AreaEdit SpellChecker Plugin Code Execution Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

[SA16459] ECW-Shop SQL Injection and Cross-Site Scripting Vulnerabilities

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

[SA16333] Jax Calendar Cross-Site Scripting Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...