2833 matches found
Vastal I-Tech Agent Zone - 'search.php' Blind SQL Injection
Agent Zone Vastal I-Tech Blind SQL Injection Vulnerability Date: 31.01.2012 Author: Cagri Tepebasili Software : http://www.vastal.com/agent-zone-real-estate-script.html Tested on: Linux Mint 12 The First Step http://server/real/search.php?pricefrom=1000000.00+and+1=1&priceto=10000000.00 The Secon...
Multiple vulnerabilities in 11in1
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in 11in1, which can be exploited to perform Local File Inclusion and Сross-Site Request Forgery CSRF attacks. 1 Local File Inclusion in 11in1: CVE-2012-0996 Input passed via the "class" GET parameter to index.php an...
OneOrZero AIMS 2.8.0 Trial Build 231211 Cross Site Scripting
Advisory ID: HTB23066 Reference: https://www.htbridge.ch/advisory/xssinoneorzeroaims.html Product: OneOrZero AIMS Vendor: www.oneorzero.com http://www.oneorzero.com/ Vulnerable Version: 2.8.0 Trial build231211 and probably prior Tested Version: 2.8.0 Trial build231211 Vendor Notification: 28...
KnowledgeTree 3.7.0.2 Cross Site Scripting
Advisory ID: HTB23065 Reference: https://www.htbridge.ch/advisory/multiplevulnerabilitiesinknowledgetreecommunityedition.html Product: KnowledgeTree Commercial and Community Editions Vendor: KnowledgeTree Inc. http://knowledgetree.org Vulnerable Version: 3.7.0.2 and probably prior Tested Version:...
#Enter_at_your_own_Risk Cyber Awareness Magazine Issue January edition Released
EnteratyourownRisk Cyber Awareness Magazine Issue January edition Released As we promised last month, The Hacker News along with Security-FAQs, SecManiac, Korben, Security-Shell, SecTechno have come together to bring you an outstanding array of internet security and hacking information. You can...
Bypass SOPA (Stop Online Piracy Act) DNS Blocking with DeSopa 1.1
Bypass SOPA Stop Online Piracy Act DNS Blocking with DeSopa 1.1 A developer who calls himself T Rizk doesn't have much faith in Congress making the right decision on anti-piracy legislation, so he's built a work around for the impending censorship measures being considered DeSOPA. The Firefox...
OBM 2.4.0-rc13 XSS / LFI / SQL Injection
Vulnerability ID: HTB23060 Reference: https://www.htbridge.ch/advisory/multiplevulnerabilitiesinobm.html Product: OBM Vendor: obm.org http://obm.org Vulnerable Version: 2.4.0-rc13 and probably prior Tested Version: 2.4.0-rc13 Vendor Notification: 30 November 2011 Vulnerability Type: XSS, SQL...
PHPShop CMS Free 3.4 Cross Site Scripting / SQL Injection
No description provided by source. Reference: https://www.htbridge.ch/advisory/multiplevulnerabilitiesinphpshopcmsfree.html Product: PHPShop CMS Free Vendor: PHPShop Software http://www.phpshopcms.ru/ Vulnerable Version: 3.4 and probably prior Tested Version: 3.4 Vendor Notification: 23 November...
PHPShop CMS Free 3.4 Cross Site Scripting / SQL Injection
Vulnerability ID: HTB23058 Reference: https://www.htbridge.ch/advisory/multiplevulnerabilitiesinphpshopcmsfree.html Product: PHPShop CMS Free Vendor: PHPShop Software http://www.phpshopcms.ru/ Vulnerable Version: 3.4 and probably prior Tested Version: 3.4 Vendor Notification: 23 November 2011...
Heap Memory Corruption in HP Device Access Manager for Protect Tools Information Store
No description provided by source. Vulnerable Version: Prior to v.6.1.0.1 Tested Version: 5.0.0.5 Vendor Notification: 26 August 2011 Vulnerability Type: Heap Memory Corruption Status: Fixed by Vendor Risk level: Medium Credit: High-Tech Bridge SA Security Research Lab...
SugarCRM 6.3.0RC1 SQL Injection Vulnerability
No description provided by source. Vulnerable Version: Community Edition 6.3.0RC1 and probably prior Tested Version: Community Edition 6.3.0RC1 Vendor Notification: 05 October 2011 Vulnerability Type: SQL Injection Status: Fixed by Vendor Risk level: Medium Credit: High-Tech Bridge SA Security...
Cross-site Scripting (XSS) Vulnerabilities in epesi BIM
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in epesi BIM which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerabilities in epesi BIM 1.1 The vulnerability exists due to input sanitation error in the "diratual"...
Multiple vulnerabilities in OBM
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in OBM, which can be exploited to perform cross-site scripting, local file inclusion and SQL injection attacks and gain access to sensitive information. 1 Local File Inclusion in OBM 1.1 Input passed via the "module...
Multiple vulnerabilities in Browser CRM
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Browser CRM, which can be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-Site Scripting in Browser CRM 1.1 Input appended to the URL after multiple files is not properly sanitised...
Multiple vulnerabilities in PHPShop CMS Free
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in PHPShop CMS Free, which can be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-Site Scripting in PHPShop CMS Free 1.1 Input appended to the URL after multiple files is not properly...
Xxe
The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25, Edimax 6114Wg, Canyon-Tech CN-WF512 with firmware 1.83, Canyon-Tech CN-WF514 with firmware 2.08, Sitecom WL-153 with firmware before 1.39, and Sweex LB000021 with firmware 3.15 allows remote attackers...
Code injection
The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25, Edimax 6114Wg, Canyon-Tech CN-WF512 with firmware 1.83, Canyon-Tech CN-WF514 with firmware 2.08, Sitecom WL-153 with firmware before 1.39, and Sweex LB000021 with firmware 3.15 allows remote attackers...
CVE-2011-4502
The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25, Edimax 6114Wg, Canyon-Tech CN-WF512 with firmware 1.83, Canyon-Tech CN-WF514 with firmware 2.08, Sitecom WL-153 with firmware before 1.39, and Sweex LB000021 with firmware 3.15 allows remote attackers...
PT-2011-4965
Name of the Vulnerable Software and Affected Versions Edimax BR-6104K versions prior to 3.25 Edimax 6114Wg version not specified Canyon-Tech CN-WF512 version 1.83 Canyon-Tech CN-WF514 version 2.08 Sitecom WL-153 versions prior to 1.39 Sweex LB000021 version 3.15 Description The issue allows remot...
CVE-2011-4502: Improper Neutralization of Special Elements used in an OS Command
The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25, Edimax 6114Wg, Canyon-Tech CN-WF512 with firmware 1.83, Canyon-Tech CN-WF514 with firmware 2.08, Sitecom WL-153 with firmware before 1.39, and Sweex LB000021 with firmware 3.15 allows remote attackers...