Drupal Module CKEditor 3.0 3.6.2 - Persistent EventHandler Cross-Site Scripting

Drupal Module CKEditor 3.0 3.6.2 - Persistent EventHandler Cross-Site Scripting Exploit Title: Drupal CKEditor 3.0 - 3.6.2 - Persistent EventHandler XSS Google Dork: "inurl:"sites/all/modules/ckeditor" -drupalcode.org" Google Results: Approximately 379.000 results Date: 18th January 2012 Author:...

Drupal Module CKEditor 3.0 < 3.6.2 - Persistent EventHandler Cross-Site Scripting

Exploit Title: Drupal CKEditor 3.0 - 3.6.2 - Persistent EventHandler XSS Google Dork: "inurl:"sites/all/modules/ckeditor" -drupalcode.org" Google Results: Approximately 379.000 results Date: 18th January 2012 Author: MaXe @InterN0T Found in a private Hatforce.com Penetration Test Software Link:...

Drupal CKEditor 3.6.2 Cross Site Scripting

Exploit Title: Drupal CKEditor 3.0 - 3.6.2 - Persistent EventHandler XSS Google Dork: "inurl:"sites/all/modules/ckeditor" -drupalcode.org" Google Results: Approximately 379.000 results Date: 18th January 2012 Author: MaXe @InterN0T Found in a private Hatforce.com Penetration Test Software Link:...

Barracuda Spam/Virus WAF 600 - Multiple Vulnerabilities

Document Title: =============== Barracuda Spam/Virus WAF 600 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=28 Release Date: ============= 2012-01-18 Vulnerability Laboratory ID VL-ID: ==================================== 28...

WebTitan Appliance 3.50.x Script Insertion

Title: ====== WebTitan Appliance v3.50.x - Multiple Web Vulnerabilities Date: ===== 2012-01-13 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=89 VL-ID: ===== 89 Introduction: ============= WebTitan is a complete internet monitoring software web filter which provides...

Barracuda SSL VPN 480 Script Insertion

Title: ====== Barracuda SSL VPN 480 - Multiple Web Vulnerabilities Date: ===== 2012-01-12 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=35 VL-ID: ===== 35 Introduction: ============= The Barracuda SSL VPN is an integrated hardware and software solution enabling secure...

MegaSWF Cross Site Scripting

Title: ====== MegaSWF - Persistant Cross Site Scripting Vulnerability Date: ===== 2012-01-12 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=368 VL-ID: ===== 368 Introduction: ============= Do you create Flash games, Flash animations, or any other type of content saved ...

Wordpress plugin Count-per-day plurality of defect and repair-vulnerability warning-the black bar safety net

Title: Count-per-day Wordpress plugin Arbitrary file download and XSS Affected versions: 3.1.1 Author 6Scan http://6scan.com security team www.2cto.com Download address: http://wordpress.org/extend/plugins/count-per-day/ Official fix: This advisory is released after the vendor has responded and...

Tine v2.0 Maischa Multiple Cross Site Scripting Vulnerabilities

Exploit for php platform in category web applications Title: ====== Tine v2.0 Maischa - Cross Site Scripting Vulnerability Introduction: ============= Tine 2.0 is an open source project which combines groupware and CRM in one consistent interface. Tine 2.0 is web-based and optimises collaboration...

Tine 2.0 - Maischa Multiple Cross-Site Scripting Vulnerabilities

Title: ====== Tine v2.0 Maischa - Cross Site Scripting Vulnerability Date: ===== 2012-01-12 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=379 VL-ID: ===== 379 Introduction: ============= Tine 2.0 is an open source project which combines groupware and CRM in one...

Tine 2.0 - Maischa Multiple Cross-Site Scripting Vulnerabilities

Tine 2.0 - Maischa Multiple Cross-Site Scripting Vulnerabilities Title: ====== Tine v2.0 Maischa - Cross Site Scripting Vulnerability Date: ===== 2012-01-12 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=379 VL-ID: ===== 379 Introduction: ============= Tine 2.0 is an...

Tine v2.0 Maischa - Cross Site Scripting Vulnerability

Document Title: =============== Tine v2.0 Maischa - Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=379 Release Date: ============= 2012-01-12 Vulnerability Laboratory ID VL-ID: ==================================== 379...

Zimbra Desktop v7.1.2 - Persistent Software Vulnerability

Document Title: =============== Zimbra Desktop v7.1.2 - Persistent Software Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=378 Release Date: ============= 2012-01-12 Vulnerability Laboratory ID VL-ID: ==================================== 3...

WebTitan Appliance v3.50.x - Multiple Web Vulnerabilities

Document Title: =============== WebTitan Appliance v3.50.x - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=89 Release Date: ============= 2012-01-12 Vulnerability Laboratory ID VL-ID: ==================================== 89...

Tine v2.0 Maischa - Cross Site Scripting Vulnerability

Document Title: =============== Tine v2.0 Maischa - Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=379 Release Date: ============= 2012-01-12 Vulnerability Laboratory ID VL-ID: ==================================== 379...

Zimbra Desktop v7.1.2 - Persistent Software Vulnerability

Document Title: =============== Zimbra Desktop v7.1.2 - Persistent Software Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=378 Release Date: ============= 2012-01-12 Vulnerability Laboratory ID VL-ID: ==================================== 3...

WebCalendar -- Persistent XSS

tom reports, There is no sanitation on the input of the location variable allowing for persistent XSS...

Barracuda SSL VPN 480 - Multiple Web Vulnerabilities

Document Title: =============== Barracuda SSL VPN 480 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=35 Release Date: ============= 2012-01-11 Vulnerability Laboratory ID VL-ID: ==================================== 35...

Multiple new vulnerabilities in Register Plus Redux for WordPress

Hello 3APA3A! I want to warn you about multiple new vulnerabilities in plugin Register Plus Redux for WordPress. Last version of the plugin was checked. These are Cross-Site Scripting, SQL Injection, Code Execution and Full path disclosure vulnerabilities. ------------------------- Affected...

ATMAIL WebMail Admin 6.3.4 Cross Site Scripting

Title: ====== ATMAIL WebMail Admin v6.3.4 - Multiple Vulnerabilities Date: ===== 2012-01-07 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=376 VL-ID: ===== 376 Introduction: ============= Atmail is a commercial Linux messaging platform provider. The company was founded...