Google Analytics v4.2.4 Wordpress - Web Vulnerabilities

Document Title: =============== Google Analytics v4.2.4 Wordpress - Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=692 Release Date: ============= 2012-08-22 Vulnerability Laboratory ID VL-ID: ==================================== 692...

PT-2012-5489

Name of the Vulnerable Software and Affected Versions McAfee Email and Web Security EWS versions 5.x through 5.5 before Patch 6 McAfee Email and Web Security EWS version 5.6 before Patch 3 McAfee Email Gateway MEG versions 7.0 before Patch 1 Description The issue is related to a "Logout Failure"...

CVE-2012-4581: Improper Authentication

McAfee Email and Web Security EWS 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway MEG 7.0 before Patch 1, does not disable the server-side session token upon the closing of the Management Console/Dashboard, which makes it easier for remote attackers to hijack sessions by...

NextGEN Gallery v1.9.5 Wordpress - Web Vulnerabilities

Document Title: =============== NextGEN Gallery v1.9.5 Wordpress - Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=693 Release Date: ============= 2012-08-22 Vulnerability Laboratory ID VL-ID: ==================================== 693...

AdRotate v3.7.3.5 Wordpress - Multiple Web Vulnerabilities

Document Title: =============== AdRotate v3.7.3.5 Wordpress - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=690 Release Date: ============= 2012-08-20 Vulnerability Laboratory ID VL-ID: ====================================...

ocPortal CMS 8.x Session Hijacking

OVERVIEW ocPoral CMS 8.x and lower versions are vulnerable to Session Hijacking flaw which could allow attackers to compromise administrator session. 2. PRODUCT DESCRIPTION ocPortal is the website Content Management System a CMS for building and maintaining a dynamic website. ocPortal's powerful...

Lsoft ListServ 16 Cross Site Scripting

============================================================ FOREGROUND SECURITY, SECURITY ADVISORY 2012-001 - Original release date: August 16, 2012 - Discovered by: Jose Carlos de Arriba Penetration Testing Team Lead at Foreground Security - Contact: jcarriba at foregroundsecurity dot com, dade...

Social Engine 4.2.5 Cross Site Scripting

Title: ====== Social Engine v4.2.5 - Multiple Web Vulnerabilities Date: ===== 2012-07-31 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=672 VL-ID: ===== 672 Common Vulnerability Scoring System: ==================================== 3 Abstract: ========= A Laboratory...

ASTPP VoIP Billing (4cf207a) - Multiple Web Vulnerabilities

Document Title: =============== ASTPP VoIP Billing 4cf207a - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=687 Release Date: ============= 2012-08-16 Vulnerability Laboratory ID VL-ID: ==================================== 6...

ASTPP VoIP Billing (4cf207a) - Multiple Web Vulnerabilities

Document Title: =============== ASTPP VoIP Billing 4cf207a - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=687 Release Date: ============= 2012-08-16 Vulnerability Laboratory ID VL-ID: ==================================== 6...

Design/Logic Flaw

The Authen::ExternalAuth extension before 0.11 for Best Practical Solutions RT allows remote attackers to obtain a logged-in session via unspecified vectors related to the "URL of a RSS feed of the user."...

CVE-2012-2770

The Authen::ExternalAuth extension before 0.11 for Best Practical Solutions RT allows remote attackers to obtain a logged-in session via unspecified vectors related to the "URL of a RSS feed of the user."...

CVE-2012-2770: Undefined Security Weakness

The Authen::ExternalAuth extension before 0.11 for Best Practical Solutions RT allows remote attackers to obtain a logged-in session via unspecified vectors related to the "URL of a RSS feed of the user."...

PT-2012-3792

Name of the Vulnerable Software and Affected Versions Drupal Node Limit Number module versions prior to 6.x-1.2 Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack the authentication of users with the administer node limitnumber permission for requests...

Ossim SIEM v4.0 - Multiple Cross Site Vulnerabilities

Document Title: =============== Ossim SIEM v4.0 - Multiple Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=679 Release Date: ============= 2012-08-13 Vulnerability Laboratory ID VL-ID: ==================================== 679...

iAuto Mobile Application 2012 - Multiple Web Vulnerabilities

Title: ====== iAuto Mobile Application 2012 - Multiple Web Vulnerabilities Date: ===== 2012-07-11 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=658 VL-ID: ===== 658 Common Vulnerability Scoring System: ==================================== 3.5 Introduction: ===========...

Inout Mobile Webmail APP - Multiple Web Vulnerabilities

Title: ====== Inout Mobile Webmail APP - Multiple Web Vulnerabilities Date: ===== 2012-06-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=609 VL-ID: ===== 609 Common Vulnerability Scoring System: ==================================== 3.5 Abstract: ========= The...

CVE-2012-2964

CVE-2012-2964 affects BreakingPoint Storm CTM prior to version 3.0. The issue stems from the CTM administrative interface failing to properly authorize requests to the embedded web server, allowing an unauthenticated remote attacker to retrieve a diagnostic report containing sensitive configurati...

SonicWall UTM ES WAF - Input Filter Bypass Vulnerability

Document Title: =============== SonicWall UTM ES WAF - Input Filter Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=545 Release Date: ============= 2012-08-12 Vulnerability Laboratory ID VL-ID: ==================================== 54...

Flynax General Classifieds 4.0 XSS / SQL Injection

Title: ====== Flynax General Classifieds v4.0 CMS - Multiple Vulnerabilities Date: ===== 2012-07-13 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=659 VL-ID: ===== 659 Common Vulnerability Scoring System: ==================================== 8.3 Introduction:...