Joomla Component com_ignitegallery SQL injection vulnerability

Exploit for php platform in category web applications Joomla Component comignitegallery SQL injection vulnerability‎ + Author : TiGeRYeMeN HaCkEr + Author Name : TiGEr... + Email : email protected + Greetz : Sa-HaCkEr + Group : No-Group + Vulnerability : SQL injection + Google Dork :...

Fedora 13 : krb5-1.7.1-18.fc13 (2011-3464)

This update incorporates upstream fixes for a double-free in the KDC which could occur if the KDC needed to send back typed-data along with an error MITKRB5-SA-2011-003, CVE-2011-0284. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora securi...

SyndeoCMS 2.8.02 Multiple Vulnerabilities

Exploit for php platform in category web applications Product: SyndeoCMS Vendor: http://www.syndeocms.org/ http://www.syndeocms.org/ Vulnerable Version: 2.8.02 Vendor Notification: 10 March 2011 Vulnerability Type: SQL injection Risk level: High Credit: High-Tech Bridge SA - Ethical Hacking &...

SyndeoCMS 2.8.02 XSS / Path Disclosure / SQL Injection

================================= Vulnerability ID: HTB22899 Reference: http://www.htbridge.ch/advisory/pathdisclosureinsyndeocms.html Product: SyndeoCMS Vendor: http://www.syndeocms.org/ http://www.syndeocms.org/ Vulnerable Version: 2.8.02 Vendor Notification: 10 March 2011 Vulnerability Type:...

Installation Path Disclosure Weakness in Joomla!

High-Tech Bridge SA Security Research Lab has discovered a weakness in Joomla! which could be exploited to gain access to potentially sensitive information. 1 Installation path disclosure weakness in Joomla! The weakness exists due to application reveals the full path to installation directory in...

Multiple Vulnerabilities in Eleanor CMS

High-Tech Bridge SA Security Research Lab has discovered vulnerabilities in Eleanor CMS which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerability in Eleanor CMS The vulnerability exists due to input sanitation error in the...

Rating-Widget 1.3.1 Cross Site Scripting

===================================== Vulnerability ID: HTB22891 Reference: http://www.htbridge.ch/advisory/xssinratingwidgetwordpressplugin2.html Product: Rating-Widget wordpress plugin Vendor: Vova Feldman http://rating-widget.com/ Vulnerable Version: 1.3.1 Vendor Notification: 03 March 2011...

LotusCMS 3.0.3 Multiple Vulnerabilities

Exploit for php platform in category web applications Product: LotusCMS Vendor: Arboroia Network http://www.lotuscms.org/ Vulnerable Version: 3.0.3 and probably prior versions Vendor Notification: 01 March 2011 Vulnerability Type: CSRF Cross-Site Request Forgery Risk level: Low Credit: High-Tech...

Sodahead Polls 2.0.2 Cross Site Scripting

================================ Vulnerability ID: HTB22894 Reference: http://www.htbridge.ch/advisory/xssinsodaheadpollswordpressplugin1.html Product: Sodahead Polls wordpress plugin Vendor: SodaHead.com SodaHead.com Vulnerable Version: 2.0.2 Vendor Notification: 03 March 2011 Vulnerability Type...

HTB22890: XSS in Rating-Widget wordpress plugin

Vulnerability ID: HTB22890 Reference: http://www.htbridge.ch/advisory/xssinratingwidgetwordpressplugin1.html Product: Rating-Widget wordpress plugin Vendor: Vova Feldman http://rating-widget.com/ Vulnerable Version: 1.3.1 Vendor Notification: 03 March 2011 Vulnerability Type: XSS Cross Site...

HTB22889: XSS in Rating-Widget wordpress plugin

Vulnerability ID: HTB22889 Reference: http://www.htbridge.ch/advisory/xssinratingwidgetwordpressplugin.html Product: Rating-Widget wordpress plugin Vendor: Vova Feldman http://rating-widget.com/ Vulnerable Version: 1.3.1 Vendor Notification: 03 March 2011 Vulnerability Type: XSS Cross Site...

Cross-site Request Forgery (CSRF) Vulnerability in InTerra Blog Machine

High-Tech Bridge SA Security Research Lab has discovered vulnerability in InTerra Blog Machine which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF vulnerability in InTerra Blog Machine: CVE-2011-1670 The vulnerability exists due to insufficien...

Installation Path Disclosure weakness in Tine 2.0

High-Tech Bridge SA Security Research Lab has discovered a weakness in Tine 2.0 which could be exploited to gain access to potentially sensitive information. 1 Installation path disclosure weakness in Tine 2.0: CVE-2011-1666 The weakness exists due to application reveals the full path to...

LotusCMS 3.0.3 - Multiple Vulnerabilities

Vulnerability ID: HTB22886 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinlotuscms.html Product: LotusCMS Vendor: Arboroia Network http://www.lotuscms.org/ Vulnerable Version: 3.0.3 and probably prior versions Vendor Notification: 01 March 2011 Vulnerability Type: CSRF Cross-Site Request...

XSS and SQL Injection vulnerabilities in extension "Direct Mail" (direct_mail)

TYPO3-SA-2011-002 Release Date: March 15, 2011 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 2.6.9 and all versions below Vulnerability Type: Cross-Site Scripting XSS, SQL Injection Severity: Low Suggested CVSS...

CVE-2011-0157

WebKit, as used in Apple iOS before 4.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-09-1...

HTB22880: XSS vulnerability in CosmoShop

Vulnerability ID: HTB22880 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincosmoshop1.html Product: CosmoShop Vendor: Zaunz Publishing GmbH http://www.cosmoshop.de/ Vulnerable Version: ePRO V10.05.00 Vendor Notification: 24 February 2011 Vulnerability Type: Stored XSS Cross Site...

HTB22875: XSS in Lazyest Gallery wordpress plugin

Vulnerability ID: HTB22875 Reference: http://www.htbridge.ch/advisory/xssinlazyestgallerywordpressplugin.html Product: Lazyest Gallery wordpress plugin Vendor: Brimosoft http://brimosoft.nl/ Vulnerable Version: 1.0.26 Vendor Notification: 24 February 2011 Vulnerability Type: XSS Cross Site...

HTB22878: XSS vulnerability in CosmoShop

Vulnerability ID: HTB22878 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincosmoshop.html Product: CosmoShop Vendor: Zaunz Publishing GmbH http://www.cosmoshop.de/ Vulnerable Version: ePRO V10.05.00 Vendor Notification: 24 February 2011 Vulnerability Type: Stored XSS Cross Site...

Wordpress GRAND Flash Album Gallery 0.55 Plugin Multiple Vulnerabilities

Exploit for php platform in category web applications Product: GRAND Flash Album Gallery wordpress plugin Vendor: Sergey Pasyuk http://codeasily.com/ Vulnerable Version: 0.55 Vendor Notification: 22 February 2011 Vulnerability Type: SQL Injection Risk level: High Credit: High-Tech Bridge SA -...