osCmax Shop CMS v2.5.1 - Multiple Web Vulnerabilities

Document Title: =============== osCmax Shop CMS v2.5.1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=497 Release Date: ============= 2012-04-07 Vulnerability Laboratory ID VL-ID: ==================================== 497...

Astaro Gateway v7.504 - Multiple Web Vulnerabilities

Document Title: =============== Astaro Gateway v7.504 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=8 Release Date: ============= 2012-04-07 Vulnerability Laboratory ID VL-ID: ==================================== 8 Common...

PT-2012-3155

Name of the Vulnerable Software and Affected Versions SENCHA SNS versions prior to 1.0.2 Description The issue allows remote attackers to hijack web sessions. The exact vectors used for the attack are not specified. Recommendations For versions prior to 1.0.2, update to version 1.0.2 or later to...

SmartJobBoard 3.4 b5140 Cross Site Scripting / Cross Site Request Forgery

Title: ====== SmartJobBoard v3.4 b5140 - Multiple Web Vulnerabilites Date: ===== 2012-04-03 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=490 VL-ID: ===== 490 Introduction: ============= SmartJobBoard is an advanced software platform for creating professional job boar...

SmartJobBoard 3.4 b5140 XSS / CSRF

Exploit for php platform in category web applications Title: ====== SmartJobBoard v3.4 b5140 - Multiple Web Vulnerabilites Introduction: ============= SmartJobBoard is an advanced software platform for creating professional job board web sites. It includes everything you need for running,...

Astaro Command Center v2.x - Multiple Web Vulnerabilities

Document Title: =============== Astaro Command Center v2.x - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=4 Release Date: ============= 2012-04-02 Vulnerability Laboratory ID VL-ID: ==================================== 4...

SmartJobBoard v3.4 b5140 - Multiple Web vulnerabilities

Document Title: =============== SmartJobBoard v3.4 b5140 - Multiple Web vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=490 Release Date: ============= 2012-04-02 Vulnerability Laboratory ID VL-ID: ==================================== 490...

NGS00154 Patch Notification: McAfee Email and Web Security Appliance v5.6 - Session hijacking and bypassing client-side session timeouts

Medium Risk Vulnerability in McAfee Email and Web Security Appliance 29 March 2012 Ben Williams of NGS Secure has discovered a medium risk vulnerability in the McAfee Email and Web Security Appliance Impact: Session hijacking and bypassing client-side session timeouts Versions affected: All...

SmartJobBoard v3.4 b5140 - Multiple Web vulnerabilities

Document Title: =============== SmartJobBoard v3.4 b5140 - Multiple Web vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=490 Release Date: ============= 2012-04-02 Vulnerability Laboratory ID VL-ID: ==================================== 490...

Astaro Command Center v2.x - Multiple Web Vulnerabilities

Document Title: =============== Astaro Command Center v2.x - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=4 Release Date: ============= 2012-04-02 Vulnerability Laboratory ID VL-ID: ==================================== 4...

Landshop v0.9.2 - Multiple Web Vulnerabilities

Exploit for php platform in category web applications Title: ====== Landshop v0.9.2 - Multiple Web Vulnerabilities Introduction: ============= The SAMEDIA LandShop� is an innovative tool for the marketing, sale or rent of any kind of real estate through the internet. The LandShop� user interface ...

Flatnux CMS 2011 08.09.2 - Multiple Web Vulnerabilities

Document Title: =============== Flatnux CMS 2011 08.09.2 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=487 Release Date: ============= 2012-03-31 Vulnerability Laboratory ID VL-ID: ==================================== 487...

LandShop CMS v0.9.2 - Multiple Web Vulnerabilities

Document Title: =============== LandShop CMS v0.9.2 - Multiple Web Vulnerabilities References Source: ==================== http://vulnerability-lab.com/getcontent.php?id=485 Release Date: ============= 2012-03-31 Vulnerability Laboratory ID VL-ID: ==================================== 485 Product ...

Flatnux CMS 2011 08.09.2 - Multiple Web Vulnerabilities

Document Title: =============== Flatnux CMS 2011 08.09.2 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=487 Release Date: ============= 2012-03-31 Vulnerability Laboratory ID VL-ID: ==================================== 487...

Barracuda Cloud CC v3.04.015 - Multiple Web Vulnerabilities

Exploit for cgi platform in category web applications Title: ====== Barracuda Cloud CC v3.04.015 - Multiple Web Vulnerabilities Introduction: ============= The Barracuda Control Center is a comprehensive cloud-based service that enables administrators to monitor and configure multiple Barracuda...

CVE-2007-6752

CVE-2007-6752 describes a CSRF vulnerability in Drupal 7.12 and earlier that allows an attacker to hijack the authentication of arbitrary users via requests ending the session on the user/logout URI. The vendor disputes the severity and there is no documented fix in the provided sources; some ref...

CVE-2007-6752

Removed by vendor...

Barracuda Cloud CC v3.04.015 - Multiple Vulnerabilities

Document Title: =============== Barracuda Cloud CC v3.04.015 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=441 Release Date: ============= 2012-03-28 Vulnerability Laboratory ID VL-ID: ==================================== 441...

Cross-site scripting (XSS) Vulnerability reported on Paypal

Cross-site scripting XSS Vulnerability reported on Paypal Paypal is affected by an XSS vulnerability where it fails to validate input on URL shown in above image. PayPal fixed the vulnerability shortly after being notified that its publicly posted. XSS, in general is a vulnerability that allows...

SEC Consult SA-20120315-0 :: Multiple permanent XSS vulnerabilities in EMC Documentum eRoom

SEC Consult Vulnerability Lab Security Advisory 20120315-0 ======================================================================= title: Multiple permanent cross-site scripting vulnerabilities product: EMC Documentum eRoom vulnerable version: 7.33.498.98 fixed version: 7.4.4 impact: high homepag...