Wiccle Web Builder CMS / iWiccle CMS Community Builder Cross Site Scripting

Wiccle Web Builder CMS and iWiccle CMS Community Builder Multiple Cross-Site Scripting Vulnerability. SecPod Technologies www.secpod.com Author Veerendra G.G SecPod ID: 1005 09/07/2010 Issue Discovered 09/10/2010 Vendor Notified 09/13/2010 Vendor Confirmed 09/14/2010 Fix Available Class: Cross-Si...

Wiccle Web Builder 2.0 - Multiple Cross-Site Scripting Vulnerabilities

Wiccle Web Builder 2.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/44295/info Wiccle Web Builder CMS and iWiccle CMS Community Builder are prone to multiple cross-site scripting vulnerabilities because they fail to properly sanitize user-supplied inpu...

Wiccle Web Builder 2.0 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/44295/info Wiccle Web Builder CMS and iWiccle CMS Community Builder are prone to multiple cross-site scripting vulnerabilities because they fail to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary HTML and...

Wiccle Web Builder 'post_text' XSS Vulnerability

Wiccle Web Builder is prone to a cross-site scripting XSS vulnerability. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fre...

CVE-2010-3208

Cross-site scripting XSS vulnerability in ajax.php in Wiccle Web Builder WWB 1.00 and 1.0.1 allows remote attackers to inject arbitrary web script or HTML via the posttext parameter in a site customsearch action to index.php. NOTE: some of these details are obtained from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in ajax.php in Wiccle Web Builder WWB 1.00 and 1.0.1 allows remote attackers to inject arbitrary web script or HTML via the posttext parameter in a site customsearch action to index.php. NOTE: some of these details are obtained from third party information...

CVE-2010-3208

CVE-2010-3208 is an XSS vulnerability in the Wiccle Web Builder (WWB) web application. The affected components are the PHP file path involved, specifically in the ajax.php handling for WWB versions 1.00 and 1.0.1. The root cause is a cross-site scripting flaw that allows an attacker to inject arb...

CVE-2010-3208

Cross-site scripting XSS vulnerability in ajax.php in Wiccle Web Builder WWB 1.00 and 1.0.1 allows remote attackers to inject arbitrary web script or HTML via the posttext parameter in a site customsearch action to index.php. NOTE: some of these details are obtained from third party information...

Gekko Web Builder 0.90 ALPHA Cross Site Scripting

Vulnerability ID: HTB22474 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityingekkowebbuilder.html Product: Gekko Web Builder Vendor: Baby Gekko IT Consulting http://www.babygekko.com/ Vulnerable Version: v0.90 ALPHA and Probably Prior Versions Vendor Notification: 01 July 2010...

XSS vulnerability in Gekko Web Builder

Vulnerability ID: HTB22474 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityingekkowebbuilder.html Product: Gekko Web Builder Vendor: Baby Gekko IT Consulting http://www.babygekko.com/ Vulnerable Version: v0.90 ALPHA and Probably Prior Versions Vendor Notification: 01 July 2010...

Gekko Web Builder 9.0 - index.php Cross-Site Scripting

Gekko Web Builder 9.0 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/41726/info Gekko Web Builder is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...

Gekko Web Builder 9.0 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41726/info Gekko Web Builder is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Cross-site Scripting (XSS) Vulnerability in Gekko Web Builderer

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Gekko Web Builder which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Gekko Web Builder The vulnerability exists due to input sanitation error in the "app" parameter...

HauntmAx CMS Haunted House Directory Listing SQL Injection

No description provided by source. Name : HauntmAx CMS SQLi Vulnerability Date : june, 9 2010 Vendor url :http://www.hauntmax.com/ Platform: Linux,Windows Price: $200 Author : Sid3^effects aKa HaRi shellc99atyahoo.com special thanks to : r0073r inj3ct0r.com,L0rd CruSad3r,MaYur,gunslinger greetz t...

CVE-2006-5816

Multiple PHP remote file inclusion vulnerabilities in Dmitry Sheiko Business Card Web Builder BCWB 2.5 allow remote attackers to execute arbitrary PHP code via a URL in the rootpathadmin parameter to 1 /include/startup.inc.php, 2 dcontent/default.css.php, or 3 system/default.css.php, different...

CVE-2006-5816

Multiple PHP remote file inclusion vulnerabilities in Dmitry Sheiko Business Card Web Builder BCWB 2.5 allow remote attackers to execute arbitrary PHP code via a URL in the rootpathadmin parameter to 1 /include/startup.inc.php, 2 dcontent/default.css.php, or 3 system/default.css.php, different...

CVE-2006-5481

Multiple PHP remote file inclusion vulnerabilities in 2le.net Castor PHP Web Builder 1.1.1 allow remote attackers to execute arbitrary PHP code via the rootpath parameter in 1 lib/code.php, 2 lib/dbconnect.php, 3 lib/error.php, 4 lib/menu.php, and other unspecified files. NOTE: the provenance of...

CVE-2006-5480

CVE-2006-5480 affects the 2le.net Castor PHP Web Builder 1.1.1. The vulnerability is a PHP remote file inclusion in lib/rs.php that allows a remote attacker to execute arbitrary PHP code by supplying a crafted rootpath parameter. This is a server-side class of flaw that enables code execution thr...

CVE-2006-5481

Affected software: 2le.net Castor PHP Web Builder 1.1.1. Vulnerability: Multiple PHP remote file inclusion via the rootpath parameter in several files (lib/code.php, lib/dbconnect.php, lib/error.php, lib/menu.php) and other unspecified files. Impact (as stated): Remote attackers could execute arb...

CVE-2006-4946

PHP remote file inclusion vulnerability in include/startup.inc.php in CMSDevelopment Business Card Web Builder BCWB 0.99, and possibly 2.5 Beta and earlier, allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter...