Portal Pack 6 XSS vuln.

Portal Pack 6 XSS vuln. Vuln. discovered by : r0t Date: 20 april 2006 vendor:www.kcscripts.com/scripts/portal-pack.htm affected versions:6.0 and prior orginal advisoy: http://pridels.blogspot.com/2006/04/portal-pack-6-xss-vuln.html Vuln. Description: Portal Pack contains a flaws that allows a...

CommuniMail XSS vuln.

CommuniMail XSS vuln. Vuln. discovered by : r0t Date: 19 april 2006 vendor:http://www.sibsoft.net/communimail.html affected versions: 1.2 and previous orginal advisory: http://pridels.blogspot.com/2006/04/communimail-xss-vuln.html Vuln. Description: IntelliLink Pro contains a flaw that allows a...

[SA19697] warforge.NEWS Multiple Vulnerabilities

TITLE: warforge.NEWS Multiple Vulnerabilities SECUNIA ADVISORY ID: SA19697 VERIFY ADVISORY: http://secunia.com/advisories/19697/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote REVISION: 1.1 originally posted 2006-04-19 SOFTWARE: warforge.NEWS 1...

BluePay Manager v2.0 Script Insertion Vulnerability

BluePay Manager v2.0 Script Insertion Vulnerability Vuln. discovered by : r0t Date: 18 april 2006 vendor:bluepay.com affected versions:v2.0 and previous orginal advisory: http://pridels.blogspot.com/2006/04/bluepay-manager-v20-script-insertion.html Vuln. description: Input passed to the "Account...

Article Publisher Pro SQL inj.

Article Publisher Pro SQL inj. Vuln. discovered by : r0t Date: 18 april 2006 vendor:Scriptsfrenzy.com product link:http://www.scriptsfrenzy.com/article.html affected versions: 1.0.1 and previous orginal advisory: http://pridels.blogspot.com/2006/04/article-publisher-pro-sql-inj.html Vuln...

[SA19602] XBrite Members "id" SQL Injection Vulnerability

TITLE: XBrite Members "id" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA19602 VERIFY ADVISORY: http://secunia.com/advisories/19602/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: XBrite Members 1.x http://secunia.com/product/9242/ DESCRIPTION: snatch...

vBulletin 3.5.x vBug Tracker XSS vuln.

vBug Tracker for vBulletin 3.5.x XSS vuln. Vuln. discovered by : r0t Date: 5 april 2006 vendor:www.vbulletin.org affected versions:vBug Tracker Version 3.5.1 and previous orginal advisory: http://pridels.blogspot.com/2006/04/vbug-tracker-for-vbulletin-35x-xss.html vBug Tracker contains a flaws th...

[SA19512] gtd-php Cross-Site Scripting and Script Insertion Vulnerabilities

TITLE: gtd-php Cross-Site Scripting and Script Insertion Vulnerabilities SECUNIA ADVISORY ID: SA19512 VERIFY ADVISORY: http://secunia.com/advisories/19512/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: gtd-php 0.x http://secunia.com/product/9122/...

SiteSearch Indexer 3.5 XSS vuln.

SiteSearch Indexer 3.5 XSS vuln. Vuln. discovered by : r0t Date: 31 march 2006 vendor:www.marcreed.com/projects/searchindexer/tutorial/ affected versions: 3.5 and prior orginal advisory: http://pridels.blogspot.com/2006/03/sitesearch-indexer-35-xss-vuln.html Vuln. description SiteSearch Indexer...

[SA19448] VBook Multiple Vulnerabilities

TITLE: VBook Multiple Vulnerabilities SECUNIA ADVISORY ID: SA19448 VERIFY ADVISORY: http://secunia.com/advisories/19448/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data, System access WHERE: From remote SOFTWARE: VBook 2.x http://secunia.com/product/9051/...

ActiveCampaign SupportTrio 2.5 vuln.

ActiveCampaign SupportTrio 2.5 vuln. Vuln. discovered by : r0t Date: 28 march 2006 vendor:http://www.activecampaign.com/ affected versions: 2.50.2 orginal advisory:http://pridels.blogspot.com/2006/03/activecampaign-supporttrio-25-vuln.html Vuln. description: ActiveCampaign SupportTrio contains a...

Helm Web Hosting Control Panel XSS vuln.

Helm Web Hosting Control Panel XSS vuln. Vuln. discovered by : r0t Date: 27 march 2006 vendor:http://www.webhostautomation.com/ affected versions:3.2.10 and prior orginal advisory: http://pridels.blogspot.com/2006/03/helm-web-hosting-control-panel-xss.html Vuln. description: Helm Web Hosting...

[SA19397] uniForum "websecadmin.aspx" Cross-Site Scripting

TITLE: uniForum "websecadmin.aspx" Cross-Site Scripting SECUNIA ADVISORY ID: SA19397 VERIFY ADVISORY: http://secunia.com/advisories/19397/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: uniForum 4.x http://secunia.com/product/8960/ DESCRIPTION: r0t has reported ...

SweetSuite.NET - ssCMS 2.1.x XSS vuln.

SweetSuite.NET - ssCMS 2.1.x XSS vuln. Vuln. discovered by : r0t Date: 25 march 2006 vendor: www.sweetsuite.net/ssCMSMain.aspx affected versions: 2.1.0 and prior orginal advisory: http://pridels.blogspot.com/2006/03/sweetsuitenet-sscms-21x-xss-vuln.html Vuln. Description: ssCMS contains a flaw th...

XSS in <= Toast Forums 1.6

XSS in = Toast Forums 1.6 Vuln. discovered by : r0t Date: 25 march 2005 vendor:http://www.toastforums.com/ affected versions: 1.6 and prior orginal advisory: http://pridels.blogspot.com/2006/03/xss-in-toast-forums-16.html Vuln. Description. Toast Forums contains a flaw that allows a remote cross...

GLSA-200603-22 : PHP: Format string and XSS vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200603-22 PHP: Format string and XSS vulnerabilities Stefan Esser of the Hardened PHP project has reported a few vulnerabilities found in PHP: Input passed to the session ID in the session extension isn't properly sanitised before...

[SA19181] RedBLoG "cat_id" SQL Injection Vulnerability

TITLE: RedBLoG "catid" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA19181 VERIFY ADVISORY: http://secunia.com/advisories/19181/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: RedBLoG 0.x http://secunia.com/product/8630/ DESCRIPTION: x128 has discover...

[SA18723] WEBInsta Limbo Contact Form Script Insertion Vulnerability

TITLE: WEBInsta Limbo Contact Form Script Insertion Vulnerability SECUNIA ADVISORY ID: SA18723 VERIFY ADVISORY: http://secunia.com/advisories/18723/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: WEBInsta Limbo 1.x http://secunia.com/product/4774/...

[SA18946] Guestbox Two Vulnerabilities and One Security Issue

TITLE: Guestbox Two Vulnerabilities and One Security Issue SECUNIA ADVISORY ID: SA18946 VERIFY ADVISORY: http://secunia.com/advisories/18946/ CRITICAL: Moderately critical IMPACT: Security Bypass, Cross Site Scripting, Exposure of sensitive information WHERE: From remote SOFTWARE: Guestbox 0.x...

[SA18945] WPCeasy Admin Logon SQL Injection Vulnerability

TITLE: WPCeasy Admin Logon SQL Injection Vulnerability SECUNIA ADVISORY ID: SA18945 VERIFY ADVISORY: http://secunia.com/advisories/18945/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: WPCeasy http://secunia.com/product/8156/ DESCRIPTION: murfie has report...