Wordpress Plugin Comment Rating 2.9.23 Multiple Vulnerabilities

Exploit for php platform in category web applications ================================= Vulnerability ID: HTB22842 Reference: http://www.htbridge.ch/advisory/pathdisclosureincommentratingwordpressplugin.html Product: Comment Rating wordpress plugin Vendor: Bob King http://wealthynetizen.com/...

Multiple Vulnerabilities in Lazyest Gallery

High-Tech Bridge SA Security Research Lab has discovered vulnerabilities in Lazyest Gallery which could be exploited to perform cross-site scripting attacks and disclose potentially sensitive information. 1 Cross-site scripting XSS vulnerability in Lazyest Gallery The vulnerability exists due to...

WordPress Plugin Comment Rating 2.9.23 - Multiple Vulnerabilities

WordPress Plugin Comment Rating 2.9.23 - Multiple Vulnerabilities Source: http://packetstormsecurity.org/files/view/98660/commentrating-sqldisclose.txt ================================= Vulnerability ID: HTB22842 Reference:...

WordPress Plugin Comment Rating 2.9.23 - Multiple Vulnerabilities

Source: http://packetstormsecurity.org/files/view/98660/commentrating-sqldisclose.txt ================================= Vulnerability ID: HTB22842 Reference: http://www.htbridge.ch/advisory/pathdisclosureincommentratingwordpressplugin.html Product: Comment Rating wordpress plugin Vendor: Bob King...

WordPress Comment Rating Plugin 2.9.23 - Multiple Vulnerabilities

There are several vulnerabilities in this plugin. First vulnerability type is path disclosure. The issue exists due to failure in the "/wp-content/plugins/comment-rating/comment-rating-options.php" script. There is possible to generate an error which will disclose the full path of the script. In...

HTB22840: Path disclosure in Starbox Voting wordpress plugin

Vulnerability ID: HTB22840 Reference: http://www.htbridge.ch/advisory/pathdisclosureinstarboxvotingwordpressplugin.html Product: Starbox Voting wordpress plugin Vendor: jigen.he http://www.sealedbox.cn/ Vulnerable Version: 2.0.4 Vendor Notification: 08 February 2011 Vulnerability Type: Path...

Starbox 2.0.4 Path Disclosure

Vulnerability ID: HTB22840 Reference: http://www.htbridge.ch/advisory/pathdisclosureinstarboxvotingwordpressplugin.html Product: Starbox Voting wordpress plugin Vendor: jigen.he http://www.sealedbox.cn/ Vulnerable Version: 2.0.4 Vendor Notification: 08 February 2011 Vulnerability Type: Path...

HTB22842: Path disclosure in Comment Rating wordpress plugin

Vulnerability ID: HTB22842 Reference: http://www.htbridge.ch/advisory/pathdisclosureincommentratingwordpressplugin.html Product: Comment Rating wordpress plugin Vendor: Bob King http://wealthynetizen.com/ Vulnerable Version: 2.9.23 Vendor Notification: 08 February 2011 Vulnerability Type: Path...

GD Star Rating 1.9.7 Cross Site Scripting / Path Disclosure

===================================== Vulnerability ID: HTB22843 Reference: http://www.htbridge.ch/advisory/pathdisclosureingdstarratingwordpressplugin.html Product: GD Star Rating wordpress plugin Vendor: Milan Petrovic http://www.gdstarrating.com/ Vulnerable Version: 1.9.7 Vendor Notification: ...

HTB22838: Path disclosure in Vote It Up wordpress plugin

Vulnerability ID: HTB22838 Reference: http://www.htbridge.ch/advisory/pathdisclosureinvoteitupwordpressplugin.html Product: Vote It Up wordpress plugin Vendor: Nicholas Kwan multippt http://www.onfry.com/ Vulnerable Version: 1.2.2 Vendor Notification: 08 February 2011 Vulnerability Type: Path...

Vote It Up 1.2.2 Path Disclosure

Vulnerability ID: HTB22838 Reference: http://www.htbridge.ch/advisory/pathdisclosureinvoteitupwordpressplugin.html Product: Vote It Up wordpress plugin Vendor: Nicholas Kwan multippt http://www.onfry.com/ Vulnerable Version: 1.2.2 Vendor Notification: 08 February 2011 Vulnerability Type: Path...

HTB22843: Path disclosure in GD Star Rating wordpress plugin

Vulnerability ID: HTB22843 Reference: http://www.htbridge.ch/advisory/pathdisclosureingdstarratingwordpressplugin.html Product: GD Star Rating wordpress plugin Vendor: Milan Petrovic http://www.gdstarrating.com/ Vulnerable Version: 1.9.7 Vendor Notification: 08 February 2011 Vulnerability Type:...

Comment Rating 2.9.23 Path Disclosure / SQL Injection

================================= Vulnerability ID: HTB22842 Reference: http://www.htbridge.ch/advisory/pathdisclosureincommentratingwordpressplugin.html Product: Comment Rating wordpress plugin Vendor: Bob King http://wealthynetizen.com/ Vulnerable Version: 2.9.23 Vendor Notification: 08 Februar...

Coppermine 1.5.12 Path Disclosure

Vulnerability ID: HTB22836 Reference: http://www.htbridge.ch/advisory/pathdisclosureincoppermine.html Product: Coppermine Vendor: The Coppermine Dev Team http://coppermine-gallery.net/ Vulnerable Version: 1.5.12 and probably prior versions Vendor Notification: 03 February 2011 Vulnerability Type:...

FlatNux 2011-01.26 Denial Of Service / Path Disclosure

===================================== Vulnerability ID: HTB22835 Reference: http://www.htbridge.ch/advisory/dosdenialofserviceriskinflatnux.html Product: FlatNux Vendor: Alessandro Vernassa http://www.flatnux.altervista.org/ Vulnerable Version: flatnux-2011-01.26 and probably prior versions Vendo...

Уязвимости в Drupal

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Full path disclosure и Insufficient Anti-automation уязвимостях в Drupal. Full path disclosure WASC-13: При POST запросе к странице с формой с использованием кириллического символа, выводится сообщение про ошибку, в котором выводится полный путь в...

HTB22834: Path disclosure in FlatnuX

Vulnerability ID: HTB22834 Reference: http://www.htbridge.ch/advisory/pathdisclosureinflatnux.html Product: FlatNux Vendor: Alessandro Vernassa http://www.flatnux.altervista.org/ Vulnerable Version: flatnux-2011-01.26 and probably prior versions Vendor Notification: 03 February 2011 Vulnerability...

HTB22836: Path disclosure in Coppermine

Vulnerability ID: HTB22836 Reference: http://www.htbridge.ch/advisory/pathdisclosureincoppermine.html Product: Coppermine Vendor: The Coppermine Dev Team http://coppermine-gallery.net/ Vulnerable Version: 1.5.12 and probably prior versions Vendor Notification: 03 February 2011 Vulnerability Type:...

Installation Path Disclosure Weakness in Tribiq CMS | HTB22857

High-Tech Bridge SA Security Research Lab has discovered a weakness in Tribiq CMS which could be exploited to gain access to potentially sensitive information. 1 Installation path disclosure weakness in Tribiq CMS: CVE-2011-2727 The weakness exists due to application reveals the full path to...

Mandriva Update for phpmyadmin MDVSA-2011:026 (phpmyadmin)

Check for the Version of phpmyadmin OpenVAS Vulnerability Test Mandriva Update for phpmyadmin MDVSA-2011:026 phpmyadmin Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...