Full path disclosure и SQL Injection уязвимости в MC Content Manager

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Full path disclosure и SQL Injection уязвимостях в системе MC Content Manager. Это украинская коммерческая CMS. Full path disclosure WASC-13: http://site/article.php?root=a SQL Injection WASC-19: http://site/article.php?root=-120and20version=4...

Уязвимости в xAjax и xajax_jquery_plugin

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting и Full path disclosure уязвимостях в xAjax и xajaxjqueryplugin. XSS WASC-08: http://site/cms/’;alertdocument.cookie;/ Это DOM Based XSS. Данная уязвимость в частности имеет место в MC Content Manager которая использует xAjax...

xAjax Cross Site Scripting / Path Disclosure

Hello list! I want to warn you about Cross-Site Scripting and Full path disclosure vulnerabilities in xAjax and xajaxjqueryplugin. ------------------------- Affected products: ------------------------- Vulnerable are potentially all versions of xAjax. Vulnerable are all versions of...

Multiple Vulnerabilities in Redaxscript

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Redaxscript which could be exploited to perform SQL injection attacks and gain access to sensitive information. 1 SQL injection vulnerabilities in Redaxscript The vulnerability exists due to input sanitation erro...

Installation Path Disclosure Weakness in Pluck CMS

High-Tech Bridge SA Security Research Lab has discovered a weakness in Pluck CMS which could be exploited to gain access to potentially sensitive information. 1 Installation path disclosure weakness in Pluck CMS The weakness exists due to application reveals the full path to installation director...

Vulnerabilities in MC Content Manager

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting, Brute Force и Full path disclosure уязвимостях в MC Content Manager. Это украинская коммерческая CMS. XSS WASC-08: http://site/cms/’;alertdocument.cookie;/ Brute Force WASC-11: http://site/admin/ Full path disclosure WASC-13:...

MC Content Manager 10.1.1 Cross Site Scripting / Path Disclosure

Hello list! I want to warn you about Cross-Site Scripting, Brute Force and Full path disclosure vulnerabilities in MC Content Manager. It's Ukrainian commercial CMS. ------------------------- Affected products: ------------------------- Vulnerable are potentially all versions of MC Content Manage...

Energine 2.3.8 Multiple Vulnerabilities

Exploit for php platform in category web applications Product: Energine Vulnerable Version: 2.3.8 and probably prior versions Vendor Notification: 28 December 2010 Vulnerability Type: SQL Injection Status: Not Fixed, Vendor Alerted, Awaiting Vendor Response Risk level: Medium Credit: High-Tech...

energine 2.3.8 - Multiple Vulnerabilities

energine 2.3.8 - Multiple Vulnerabilities Vulnerability ID: HTB22783 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinenergine.html Product: Energine Vulnerable Version: 2.3.8 and probably prior versions Vendor Notification: 28 December 2010 Vulnerability Type: SQL Injection...

Energine 2.3.8 Cross Site Request Forgery / Path Disclosure / SQL Injection

==================================== Vulnerability ID: HTB22783 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinenergine.html Product: Energine Vendor: Energine http://www.memht.com/ Vulnerable Version: 2.3.8 and probably prior versions Vendor Notification: 28 December 2010...

Multiple Vulnerabilities in Pivotx

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Pivotx which could be exploited to perform cross-site scripting attacks and disclose potentially sensitive information. 1 Cross-site scripting XSS vulnerabilities in Pivotx: CVE-2011-0772 1.1 The vulnerability...

energine 2.3.8 - Multiple Vulnerabilities

Vulnerability ID: HTB22783 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinenergine.html Product: Energine Vulnerable Version: 2.3.8 and probably prior versions Vendor Notification: 28 December 2010 Vulnerability Type: SQL Injection Status: Not Fixed, Vendor Alerted, Awaitin...

Path disclosure in Energine

Vulnerability ID: HTB22784 Reference: http://www.htbridge.ch/advisory/pathdisclosureinenergine.html Product: Energine Vendor: Energine http://www.energine.org/ Vulnerable Version: 2.3.8 and probably prior versions Vendor Notification: 28 December 2010 Vulnerability Type: Path disclosure Status: N...

BlogEngine.NET 1.6 Multiple Vulnerabilities

Product: BlogEngine.NET Vendor informed: 24 Sep 2010 Fixed Version Released: 01 Jan 2011 Affected Versions: 1.6.x and prior versions Severtiy: Critical Impact: Information Discloure and System Compromise Description: BlogEngine.NET is an open source .NET blogging project that was born out of desi...

Path disclousure in phpMySport

Vulnerability ID: HTB22773 Reference: http://www.htbridge.ch/advisory/pathdisclousureinphpmysport.html Product: phpMySport Vendor: phpMySport http://phpmysport.sourceforge.net/ Vulnerable Version: 1.4 Vendor Notification: 21 December 2010 Vulnerability Type: Path disclosure Status: Not Fixed,...

phpMySport 1.4 SQLi, Auth Bypass, Path Disclosure Vulnerabilities

Exploit for php platform in category web applications Product: phpMySport Vendor: phpMySport http://phpmysport.sourceforge.net/ Vulnerable Version: 1.4 Vendor Notification: 21 December 2010 Vulnerability Type: SQL Injection Status: Not Fixed, Vendor Alerted, Awaiting Vendor Response Risk level:...

phpMySport 1.4 - SQL Injection / Authentication Bypass / Full Path Disclosure

Vulnerability ID: HTB22770 Reference: http://www.htbridge.ch/advisory/sqlinjectioninphpmysport.html Product: phpMySport Vendor: phpMySport http://phpmysport.sourceforge.net/ Vulnerable Version: 1.4 Vendor Notification: 21 December 2010 Vulnerability Type: SQL Injection Status: Not Fixed, Vendor...

phpMySport 1.4 Bypass / Path Disclosure / SQL Injection

================================== Vulnerability ID: HTB22774 Reference: http://www.htbridge.ch/advisory/authenticationbypassinphpmysport.html Product: phpMySport Vendor: phpMySport http://phpmysport.sourceforge.net/ Vulnerable Version: 1.4 Vendor Notification: 21 December 2010 Vulnerability Type...

phpMySport 1.4 - SQL Injection Authentication Bypass Full Path Disclosure

phpMySport 1.4 - SQL Injection Authentication Bypass Full Path Disclosure Vulnerability ID: HTB22770 Reference: http://www.htbridge.ch/advisory/sqlinjectioninphpmysport.html Product: phpMySport Vendor: phpMySport http://phpmysport.sourceforge.net/ Vulnerable Version: 1.4 Vendor Notification: 21...

BlogEngine.NET Unauthorized Access / Directory Traversal

Product: BlogEngine.NET Vendor informed: 24 Sep 2010 Fixed Version Released: 01 Jan 2011 Affected Versions: 1.6.x and prior versions Severtiy: Critical Impact: Information Discloure and System Compromise Description: BlogEngine.NET is an open source .NET blogging project that was born out of desi...