HTB22800: Path disclosure in Podcast Generator

Vulnerability ID: HTB22800 Reference: http://www.htbridge.ch/advisory/pathdisclosureinpodcastgenerator.html Product: Podcast Generator Vendor: Alberto Betella http://podcastgen.sourceforge.net/ Vulnerable Version: 1.3 Vendor Notification: 20 January 2011 Vulnerability Type: Path disclosure Risk...

Razor CMS 1.1 Path Disclosure

Vulnerability ID: HTB22803 Reference: http://www.htbridge.ch/advisory/pathdisclosureinrazorcms.html Product: Razor CMS Vendor: http://www.razorcms.co.uk http://www.razorcms.co.uk Vulnerable Version: 1.1 Vendor Notification: 18 January 2011 Vulnerability Type: Path disclosure Status: Awaiting Vend...

Pluck CMS 4.6.4 Path Disclosure

Vulnerability ID: HTB22799 Reference: http://www.htbridge.ch/advisory/pathdisclosureinpluckcms1.html Product: Pluck Vendor: Pluck CMS http://www.pluck-cms.org Vulnerable Version: 4.6.4 Vendor Notification: 18 January 2011 Vulnerability Type: Path disclosure Risk level: Low Credit: High-Tech Bridg...

RedaxScript 0.3.2 - Multiple Vulnerabilities

RedaxScript 0.3.2 - Multiple Vulnerabilities ================================== Vulnerability ID: HTB22805 Reference: http://www.htbridge.ch/advisory/pathdisclosureinredaxscript.html Product: Redaxscript Vendor: http://redaxscript.com/ http://redaxscript.com/ Vulnerable Version: 0.3.2 Vendor...

HTB22805: Path disclosure in Redaxscript

Vulnerability ID: HTB22805 Reference: http://www.htbridge.ch/advisory/pathdisclosureinredaxscript.html Product: Redaxscript Vendor: http://redaxscript.com/ http://redaxscript.com/ Vulnerable Version: 0.3.2 Vendor Notification: 18 January 2011 Vulnerability Type: Path disclosure Status: Fixed by...

HTB22799: Path disclosure in Pluck CMS

Vulnerability ID: HTB22799 Reference: http://www.htbridge.ch/advisory/pathdisclosureinpluckcms1.html Product: Pluck Vendor: Pluck CMS http://www.pluck-cms.org Vulnerable Version: 4.6.4 Vendor Notification: 18 January 2011 Vulnerability Type: Path disclosure Risk level: Low Credit: High-Tech Bridg...

HTB22797: Path disclousure in BLOG:CMS

Vulnerability ID: HTB22797 Reference: http://www.htbridge.ch/advisory/pathdisclousureinblogcms.html Product: BLOG:CMS Vendor: Radek Hulan http://blogcms.com/ Vulnerable Version: 4.2.1.f and probably prior versions Vendor Notification: 13 January 2011 Vulnerability Type: Path disclousure Status: N...

Hycus CMS 1.0.3 Path Disclosure

Vulnerability ID: HTB22795 Reference: http://www.htbridge.ch/advisory/pathdisclousureinhycuscms.html Product: Hycus CMS Vendor: Hycus Web Development Team http://www.hycus.com/ Vulnerable Version: 1.0.3 and probably prior versions Vendor Notification: 13 January 2011 Vulnerability Type: Path...

Pixelpost 1.7.3 Cross Site Scripting / Disclosure

================================ Vulnerability ID: HTB22794 Reference: http://www.htbridge.ch/advisory/pathdisclousureinpixelpost.html Product: Pixelpost Vendor: Pixelpost http://www.pixelpost.org/ Vulnerable Version: 1.7.3 Vendor Notification: 11 January 2011 Vulnerability Type: Path disclousure...

Path disclousure in phpMySport

Vulnerability ID: HTB22773 Reference: http://www.htbridge.ch/advisory/pathdisclousureinphpmysport.html Product: phpMySport Vendor: phpMySport http://phpmysport.sourceforge.net/ Vulnerable Version: 1.4 Vendor Notification: 21 December 2010 Vulnerability Type: Path disclosure Status: Not Fixed,...

Habari Blog Multiple Vulnerabilities

Exploit for php platform in category web applications Vulnerability ID: HTB22732 Reference: http://www.htbridge.ch/advisory/pathdisclosureinhabari.html Product: Habari Vendor: Habari http://habariproject.org/en/ Vulnerable Version: 0.6.5 Vendor Notification: 02 December 2010 Vulnerability Type:...

GetSimple CMS 2.03 Path Disclosure

Vulnerability ID: HTB22730 Reference: http://www.htbridge.ch/advisory/pathdisclosureingetsimplecms.html Product: GetSimple CMS Vendor: http://get-simple.info/ http://get-simple.info/ Vulnerable Version: 2.03 Vendor Notification: 02 December 2010 Vulnerability Type: Path disclosure Status: Not...

HTML-EDIT CMS 3.1.8 Cross Site Scripting / Path Disclosure / SQL Injection

Vulnerability ID: HTB22734 Reference: http://www.htbridge.ch/advisory/sqlinjectioninhtmleditcms.html Product: HTML-EDIT CMS Vendor: html-edit web services http://www.html-edit.org/ Vulnerable Version: 3.1.8 Vendor Notification: 02 December 2010 Vulnerability Type: SQL Injection Status: Fixed by...

html-edit CMS - Multiple Vulnerabilities

html-edit CMS - Multiple Vulnerabilities Vulnerability ID: HTB22734 Reference: http://www.htbridge.ch/advisory/sqlinjectioninhtmleditcms.html Product: HTML-EDIT CMS Vendor: html-edit web services http://www.html-edit.org/ Vulnerable Version: 3.1.8 Vendor Notification: 02 December 2010 Vulnerabili...

Path disclosure in Habari

Vulnerability ID: HTB22732 Reference: http://www.htbridge.ch/advisory/pathdisclosureinhabari.html Product: Habari Vendor: Habari http://habariproject.org/en/ Vulnerable Version: 0.6.5 Vendor Notification: 02 December 2010 Vulnerability Type: Path disclosure Status: Fixed by Vendor Risk level: Low...

Path disclosure in HTML-EDIT CMS

Vulnerability ID: HTB22736 Reference: http://www.htbridge.ch/advisory/pathdisclosureinhtmleditcms.html Product: HTML-EDIT CMS Vendor: html-edit web services http://www.html-edit.org/ Vulnerable Version: 3.1.8 Vendor Notification: 02 December 2010 Vulnerability Type: Path disclosure Status: Fixed ...

Habari Blog - Multiple Vulnerabilities

Vulnerability ID: HTB22732 Reference: http://www.htbridge.ch/advisory/pathdisclosureinhabari.html Product: Habari Vendor: Habari http://habariproject.org/en/ Vulnerable Version: 0.6.5 Vendor Notification: 02 December 2010 Vulnerability Type: Path disclosure Status: Fixed by Vendor Risk level: Low...

html-edit CMS - Multiple Vulnerabilities

Vulnerability ID: HTB22734 Reference: http://www.htbridge.ch/advisory/sqlinjectioninhtmleditcms.html Product: HTML-EDIT CMS Vendor: html-edit web services http://www.html-edit.org/ Vulnerable Version: 3.1.8 Vendor Notification: 02 December 2010 Vulnerability Type: SQL Injection Status: Fixed by...

WordPress < 3.0.3 XML-RPC Interface Access Restriction Bypass

According to its version number, the installation of WordPress is prior to 3.0.3. It is, therefore, affected by a security bypass vulnerability. Certain access control restrictions are not properly enforced, which could allow a remote, authenticated user to perform unauthorized actions such as...

Symantec IM Manager rdpageimlogic.aspx Multiple SQL Injections (CVE-2010-0112)

Symantec IM Manager is a software-based proxy to secure, manage, and log IM messages for enterprise and public IM protocols. It provides real-time threat protection against IM viruses, worms, and other types of attacks delivered through IM messages. Symantec IM Manager allows the definition of...