Micro CMS v1.0.1 - Persistent Cross Site Scripting Vulnerability

Document Title: =============== Micro CMS v1.0.1 - Persistent Cross Site Scripting Vulnerability Release Date: ============= 2011-07-12 Vulnerability Laboratory ID VL-ID: ==================================== 152 Product & Service Introduction: =============================== Parallels Plesk Panel...

Collabtive Management v0.61 - Multiple Web Vulnerabilities

Document Title: =============== Collabtive Management v0.61 - Multiple Web Vulnerabilities Release Date: ============= 2011-07-10 Vulnerability Laboratory ID VL-ID: ==================================== 136 Product & Service Introduction: =============================== Unlimited projects,...

Collabtive Management v0.61 - Multiple Web Vulnerabilities

Document Title: =============== Collabtive Management v0.61 - Multiple Web Vulnerabilities Release Date: ============= 2011-07-10 Vulnerability Laboratory ID VL-ID: ==================================== 136 Product & Service Introduction: =============================== Unlimited projects,...

Tempus Media 1.0.0 Cross Site Scripting

Exploit Title: TempusMedia index.php Cross-site scripting Vulnerability Date: 2011-07-08 Author: Net.Edit0r Software Link: http://www.tempusmedia.com/ Version : 1.0.0 Tested on: ubuntu 11.04 CVE : - -----------------------------------------------------------------------------------------...

Avaya IP Office Manager TFTP Server Directory Traversal Vulnerability

Exploit for hardware platform in category remote exploits Title : Avaya IP Office Manager TFTP Server Directory Traversal Vulnerability Author : Veerendra G.G from SecPod Technologies www.secpod.com Vendor : http://www.avaya.com/usa/product/ip-office Advisory :...

WordPress 3.1.3 SQL Injection Vulnerabilities

No description provided by source. SEC Consult Vulnerability Lab Security Advisory 20110701-0 ======================================================================= title: Multiple SQL Injection Vulnerabilities product: WordPress vulnerable version: 3.1.3/3.2-RC1 and probably earlier versions...

HTC HD2 Mobile Phone - LockScreen Keyboard Bypass

Document Title: =============== HTC HD2 Mobile Phone - LockScreen Keyboard Bypass References: =========== View: http://www.youtube.com/watch?v=84Lf27GrLa4 Download: http://www.vulnerability-lab.com/resources/videos/214.flv Release Date: ============= 2011-06-30 Vulnerability Laboratory ID VL-ID:...

HTC HD2 Mobile Phone - LockScreen Keyboard Bypass

Document Title: =============== HTC HD2 Mobile Phone - LockScreen Keyboard Bypass References: =========== View: http://www.youtube.com/watch?v=84Lf27GrLa4 Download: http://www.vulnerability-lab.com/resources/videos/214.flv Release Date: ============= 2011-06-30 Vulnerability Laboratory ID VL-ID:...

Yahoo Mail - Cross Site Scripting & Webfilter Bypass

Document Title: =============== Yahoo Mail - Cross Site Scripting & Webfilter Bypass Release Date: ============= 2011-06-29 Vulnerability Laboratory ID VL-ID: ==================================== 130 Product & Service Introduction: =============================== Enjoy tons of features and fun wa...

FanUpdate 3.0 Cross Site Scripting

Vulnerability ID: HTB23017 Reference: http://www.htbridge.ch/advisory/xssinfanupdate.html Product: FanUpdate Vendor: fanupdate.co.uk http://fanupdate.co.uk/ Vulnerable Version: 3.0 and probably prior Tested on: 3.0 Vendor Notification: 01 June 2011 Vulnerability Type: XSS Cross Site Scripting Ris...

Google Picasa v3.5 - Local Buffer Overflow Vulnerability

Document Title: =============== Google Picasa v3.5 - Local Buffer Overflow Vulnerability References Source: ==================== OSVDB-ID: 63817 http://osvdb.org/show/osvdb/63817 EDB-ID: 10489 http://www.exploit-db.com/exploits/10489/ Release Date: ============= 2011-06-17 Vulnerability Laborator...

Oracle HTTP Server XSS Header Injection

Exploit for multiple platform in category web applications Attack Pattern ID : CAPEC-86 CWE ID : CI-79 OWASP IDs : A1-Injections, A2-Cross Site Scripting XSS CVE ID : not yet Related CVEs : CVE-2006-3918, CVE-2007-0275 A.K.A : Unfiltered Header Injection Product Type : Application Vendor : Oracle...

Parallels Plesk v9.0.2b - Cross Site Scripting Vulnerability

Document Title: =============== Parallels Plesk v9.0.2b - Cross Site Scripting Vulnerability Release Date: ============= 2011-06-12 Vulnerability Laboratory ID VL-ID: ==================================== 153 Product & Service Introduction: =============================== Parallels Plesk Panel ist...

cPanel WHM v11.24.7.x - Multiple Cross Site Vulnerabilities

Document Title: =============== cPanel WHM v11.24.7.x - Multiple Cross Site Vulnerabilities Release Date: ============= 2011-06-07 Vulnerability Laboratory ID VL-ID: ==================================== 48 Product & Service Introduction: =============================== cPanel provides an intuitiv...

HTB22987: Multiple XSS in phpScheduleIt

Vulnerability ID: HTB22987 Reference: http://www.htbridge.ch/advisory/multiplexssinphpscheduleit.html Product: phpScheduleIt Vendor: php.brickhost.com Vulnerable Version: 1.2.12 Vendor Notification: 05 May 2011 Vulnerability Type: XSS Cross Site Scripting Risk level: Medium Credit: High-Tech Brid...

ExtCalendar 2.0b2 (cal_search.php) SQL Injection Vulnerability

Exploit for php platform in category web applications Product: ExtCalendar 2 Vendor: http://sourceforge.net/projects/extcal/ Vulnerable Version: 2.0b2 Vendor Notification: 05 May 2011 Vulnerability Type: SQL Injection Risk level: Medium Credit: High-Tech Bridge SA Security Research Lab...

Cross-Site Scripting and Open Redirection vulnerability in extension phpMyAdmin (phpmyadmin)

It has been discovered that the extension phpMyAdmin phpmyadmin is vulnerable to Cross-Site Scripting and Open Redirection. Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 4.10.3 and below Vulnerability Type:...

Cisco Unified Operations Manager Multiple Vulnerabilities

No description provided by source. Sense of Security - Security Advisory - SOS-11-006 Release Date. 18-May-2011 Last Update. - Vendor Notification Date. 28-Feb-2011 Product. Cisco Unified Operations Manager Common Services Framework Help Servlet Common Services Device Center CiscoWorks Homepage...

Cisco Unified Operations Manager XSS / SQL Injection / Directory Traversal

Sense of Security - Security Advisory - SOS-11-006 Release Date. 18-May-2011 Last Update. - Vendor Notification Date. 28-Feb-2011 Product. Cisco Unified Operations Manager Common Services Framework Help Servlet Common Services Device Center CiscoWorks Homepage Note: All of the above products are...

Vmware vSphere Management Assistant (vMA) Privilege Escalation

======================================================================= Vmware vSphere Management Assistant vMA - Local Privilege Escalation ======================================================================= Affected Software : Vmware vSphere Management Assistant vMA Severity : Medium...