HTB22913: Multiple CSRF (Cross-Site Request Forgery) in UseBB

Vulnerability ID: HTB22913 Reference: http://www.htbridge.ch/advisory/multiplecsrfcrosssiterequestforgeryinusebb.html Product: UseBB Vendor: UseBB http://www.usebb.net/ Vulnerable Version: 1.0.11 Vendor Notification: 22 March 2011 Vulnerability Type: CSRF Cross-Site Request Forgery Risk level: Lo...

HTB22912: Multiple SQL Injections in Eleanor CMS

Vulnerability ID: HTB22912 Reference: http://www.htbridge.ch/advisory/multiplesqlinjectionsineleanorcms.html Product: Eleanor CMS Vendor: Eleanor CMS http://eleanor-cms.ru/ Vulnerable Version: rc5 Vendor Notification: 22 March 2011 Vulnerability Type: SQL Injection Status: Fixed by Vendor Risk...

WordPress AdWizz 1.0 Cross Site Scripting

------------------------------------------------------------------------ Software................WordPress AdWizz 1.0 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://wordpress.org/extend/plugins/ad-wizz/ Discovery...

WordPress WP Custom Pages 0.5.0.1 Local File Inclusion

------------------------------------------------------------------------ Software................WordPress WP Custom Pages 0.5.0.1 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://wordpress.org/extend/plugins/wp-custom-pages/ Discove...

Feng Office 1.7.3.3 CSRF Vulnerability

Exploit for php platform in category web applications Product: Feng Office Vendor: Secure Data SRL http://www.fengoffice.com/ Vulnerable Version: 1.7.3.3 and probably prior versions Vendor Notification: 17 March 2011 Vulnerability Type: CSRF Cross-Site Request Forgery Risk level: Low Credit:...

InTerra Blog Machine 1.84 XSS Vulnerability

Exploit for php platform in category web applications Product: InTerra Blog Machine Vendor: InTerra Blog Machine Team http://code.google.com/p/interra/ Vulnerable Version: 1.84 and probably prior versions Vendor Notification: 31 March 2011 Vulnerability Type: Stored XSS Cross Site Scripting Risk...

InTerra Blog Machine 1.84 - Cross-Site Scripting

InTerra Blog Machine 1.84 - Cross-Site Scripting Vulnerability ID: HTB22931 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityininterrablogmachin e.html Product: InTerra Blog Machine Vendor: InTerra Blog Machine Team http://code.google.com/p/interra/ Vulnerable Version: 1.84 and probably...

Feng Office 1.7.3.3 - Cross-Site Request Forgery

Vulnerability ID: HTB22910 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinfengoffice.html Product: Feng Office Vendor: Secure Data SRL http://www.fengoffice.com/ Vulnerable Version: 1.7.3.3 and probably prior versions Vendor Notification: 17 March 2011 Vulnerability Type: CSRF Cross-Site...

HTB22906: XSS vulnerabilities in Collabtive

Vulnerability ID: HTB22906 Reference: http://www.htbridge.ch/advisory/xssvulnerabilitiesincollabtive.html Product: Collabtive Vendor: Open Dynamics http://collabtive.o-dyn.de/ Vulnerable Version: 0.6.5 and probably prior versions Vendor Notification: 17 March 2011 Vulnerability Type: XSS Risk...

HTB22931: XSS vulnerability in InTerra Blog Machine

Vulnerability ID: HTB22931 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityininterrablogmachine.html Product: InTerra Blog Machine Vendor: InTerra Blog Machine Team http://code.google.com/p/interra/ Vulnerable Version: 1.84 and probably prior versions Vendor Notification: 31 March 2011...

Feng Office 1.7.3.3 Cross Site Request Forgery

Vulnerability ID: HTB22910 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinfengoffice.html Product: Feng Office Vendor: Secure Data SRL http://www.fengoffice.com/ Vulnerable Version: 1.7.3.3 and probably prior versions Vendor Notification: 17 March 2011 Vulnerability Type: CSRF Cross-Site...

Ays Blog v1.6 => Remote File Update Vulnerability

Exploit for php platform in category web applications Ays Blog v1.6 = Remote File Update Vulnerability ----------------------------------------------------------- I KnocKout MEMBER FROM Inj3ct0r Team 1337 DAY .. My + Author : KnocKout Contact : email protected E-Mail : email protected HomePage :...

Media Player Classic Home Cinema 1.5.0.2827 - '.avi' Denial of Service (PoC)

done by BraniX www.hackers.org.pl found: 2011.03.29 published: 2011.03.29 tested on: Windows XP SP3 Home Edition App: Media Player Classic - Home Cinema 1.5.0.2827 App Url: http://mpc-hc.sourceforge.net/download-media-player-classic-hc.html mpc-hc.exe MD5: fef81badedc176bef15bdd5d7ea2b476 DoS is...

HTB22903: XSS in Spitfire CMS

Vulnerability ID: HTB22903 Reference: http://www.htbridge.ch/advisory/xssinspitfirecms.html Product: Spitfire CMS Vendor: Spitfire http://spitfire.clausmuus.de/ Vulnerable Version: 1.0.436 Vendor Notification: 15 March 2011 Vulnerability Type: XSS Risk level: Medium Credit: High-Tech Bridge SA -...

HTB22904: Path disclosure in bbPress

Vulnerability ID: HTB22904 Reference: http://www.htbridge.ch/advisory/pathdisclosureinbbpress.html Product: bbPress Vendor: http://bbpress.org http://bbpress.org Vulnerable Version: 1.0.3 Vendor Notification: 15 March 2011 Vulnerability Type: Path disclosure Risk level: Low Credit: High-Tech Brid...

Spitfire CMS 1.0.436 Cross Site Scripting

Vulnerability ID: HTB22903 Reference: http://www.htbridge.ch/advisory/xssinspitfirecms.html Product: Spitfire CMS Vendor: Spitfire http://spitfire.clausmuus.de/ Vulnerable Version: 1.0.436 Vendor Notification: 15 March 2011 Vulnerability Type: XSS Risk level: Medium Credit: High-Tech Bridge SA -...

Winamp 5.61 - AVI Denial of Service (PoC)

Winamp 5.61 - AVI Denial of Service PoC done by BraniX www.hackers.org.pl found: 2011.03.27 published: 2011.03.29 tested on: Windows XP SP3 Home Edition tested on: Windows XP SP3 Professional Edition App: Winamp 5.61 App Url: http://www.winamp.com inavi.dll MD5: b8cf29733b11cb79fe47cde5127f8b70...

Winamp 5.61 - AVI Denial of Service (PoC)

done by BraniX www.hackers.org.pl found: 2011.03.27 published: 2011.03.29 tested on: Windows XP SP3 Home Edition tested on: Windows XP SP3 Professional Edition App: Winamp 5.61 App Url: http://www.winamp.com inavi.dll MD5: b8cf29733b11cb79fe47cde5127f8b70 winamp.exe MD5:...

osCSS2 2.1.0 RC12 Local File Inclusion

------------------------------------------------------------------------ Software................osCSS2 2.1.0 RC12 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.oscss.org/ Disclosure Date.........4/6/2011 Tested...

Andys PHP KnowledgeBase 0.95.4 - SQL Injection

Andys PHP KnowledgeBase 0.95.4 - SQL Injection ------------------------------------------------------------------------ Software................Andy's PHP Knowledgebase Project 0.95.4 Vulnerability...........SQL Injection Threat Level............Critical 4/5...