FestOS 2.3b Cross Site Scripting

Vulnerability ID: HTB22473 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinfestos1.html Product: FestOS Vendor: Skypanther Studios, Inc http://festengine.org/ Vulnerable Version: 2.3b and Probably Prior Versions Vendor Notification: 01 July 2010 Vulnerability Type: Stored XSS Cross...

XSS vulnerability in Diem

Vulnerability ID: HTB22460 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityindiem2.html Product: Diem Vendor: Diem team Vulnerable Version: 5.1.2 and Probably Prior Versions Vendor Notification: 29 June 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed, Vendor Alerted...

Diem 5.1.2 Cross Site Scripting

================================================ Vulnerability ID: HTB22460 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityindiem2.html Product: Diem Vendor: Diem team Vulnerable Version: 5.1.2 and Probably Prior Versions Vendor Notification: 29 June 2010 Vulnerability Type: XSS Cross...

Multiple Vulnerabilities in Theeta CMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Theeta CMS which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting vulnerabilities XSS in Theeta CMS 1.1 The vulnerability exists due to input sanitation error i...

XSS vulnerability in CruxPA

Vulnerability ID: HTB22452 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincruxpa3.html Product: CruxPA Vendor: CruxSoftware Vulnerable Version: 2.00 and Probably Prior Versions Vendor Notification: 21 June 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed, Vendor...

XSS vulnerability in CruxPA

Vulnerability ID: HTB22451 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincruxpa2.html Product: CruxPA Vendor: CruxSoftware Vulnerable Version: 2.00 and Probably Prior Versions Vendor Notification: 21 June 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed, Vendor...

XSS vulnerability in CruxCMS

Vulnerability ID: HTB22445 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincruxcms.html Product: CruxCMS Vendor: CruxSoftware Vulnerable Version: 3.00 and Probably Prior Versions Vendor Notification: 21 June 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed, Vendor...

CruxPA 2.00 Cross Site Scripting

================================================ Vulnerability ID: HTB22452 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincruxpa3.html Product: CruxPA Vendor: CruxSoftware Vulnerable Version: 2.00 and Probably Prior Versions Vendor Notification: 21 June 2010 Vulnerability Type: XSS...

Fedora 12 : drupal-6.16-1.fc12 (2010-3787)

Fix for SA-CORE-2010-001: http://drupal.org/node/731710 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 13 : krb5-1.7.1-8.fc13 (2010-7102)

Joel Johnson reported a possible double-free in the Kerberos KDC MITKRB5-SA-2010-004, CVE-2010-1320. This update adds the upstream fix for this bug. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted t...

Ecomat CMS Remote SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================= Ecomat CMS Remote SQL Injection Vulnerability ============================================= Product: Ecomat CMS Vendor: Codefabrik GmbH Vulnerable Version: 5.0 and Probably Prior Versions Vendor...

Ecomat CMS - SQL Injection

Vulnerability ID: HTB22390 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinecomatcms.html Product: Ecomat CMS Vendor: Codefabrik GmbH Vulnerable Version: 5.0 and Probably Prior Versions Vendor Notification: 18 May 2010 Vulnerability Type: SQL Injection Status: Not Fixed,...

synType CMS Cross Site Scripting

Vulnerability ID: HTB22417 Reference: http://www.htbridge.ch/advisory/storedxssvulnerabilityinsyntypecmscommenttextfield.html Product: synType CMS Vendor: MindArray GbR Vulnerable Version: V.0.12.2 and Probably Prior Versions Vendor Notification: 03 June 2010 Vulnerability Type: Stored XSS Cross...

Scribe CMS Cross Site Scripting

Vulnerability ID: HTB22422 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinscribecms2.html Product: Scribe CMS Vendor: Sigmer Technologies Vulnerable Version: Current at 03.06.2010 and Probably Prior Versions Vendor Notification: 07 June 2010 Vulnerability Type: XSS Cross Site...

SuSE Update for flash-player SUSE-SA:2010:024

Check for the Version of flash-player OpenVAS Vulnerability Test SuSE Update for flash-player SUSE-SA:2010:024 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

SuSE Update for flash-player SUSE-SA:2010:024

Check for the Version of flash-player OpenVAS Vulnerability Test SuSE Update for flash-player SUSE-SA:2010:024 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

XSS vulnerability in Scribe CMS

Vulnerability ID: HTB22421 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinscribecms1.html Product: Scribe CMS Vendor: Sigmer Technologies Vulnerable Version: Current at 03.06.2010 and Probably Prior Versions Vendor Notification: 07 June 2010 Vulnerability Type: XSS Cross Site...

XSS vulnerability in Scribe CMS

Vulnerability ID: HTB22422 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinscribecms2.html Product: Scribe CMS Vendor: Sigmer Technologies Vulnerable Version: Current at 03.06.2010 and Probably Prior Versions Vendor Notification: 07 June 2010 Vulnerability Type: XSS Cross Site...

Multiple Vulnerabilities in DBHcms

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in DBHcms which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerabilities in DBHcms 1.1 The vulnerability exists due to input sanitation error in the...

SQL injection vulnerability in MODx CMS

Vulnerability ID: HTB22414 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinmodxcms.html Product: MODx CMS and Application Framework Vendor: MODx Vulnerable Version: 1.0.3 and Probably Prior Versions Vendor Notification: 28 May 2010 Vulnerability Type: SQL Injection Status: N...