AneCMS 1.0/1.3 - 'register/next' SQL Injection

source: https://www.securityfocus.com/bid/42615/info AneCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, ...

XSS vulnerability in CMS Source

Vulnerability ID: HTB22549 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincmssource1.html Product: CMS Source Vendor: Proud Daddy Web Design http://www.prouddaddy.net/ Vulnerable Version: Current at 28.07.2010 and Probably Prior Versions Vendor Notification: 28 July 2010 Vulnerabili...

XSS vulnerability in i-Web Suite

Vulnerability ID: HTB22544 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityiniwebsuite.html Product: i-Web Suite Vendor: immediaC world wide Inc http://www.immediac.com/ Vulnerable Version: Current at 27.07.2010 and Probably Prior Versions Vendor Notification: 27 July 2010 Vulnerabilit...

eazyCMS Cross Site Scripting

=========================================== Vulnerability ID: HTB22553 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityineazycms.html Product: eazyCMS Vendor: eazycms.com http://eazycms.com/ Vulnerable Version: Current at 28.07.2010 and Probably Prior Versions Vendor Notification: 28...

SyntaxCMS - rows_per_page SQL Injection

SyntaxCMS - rowsperpage SQL Injection source: https://www.securityfocus.com/bid/42436/info SyntaxCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...

XSS vulnerability in Eden Platform

Vulnerability ID: HTB22539 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinedenplatform1.html Product: Eden Platform Vendor: Preation http://www.preation.com/ Vulnerable Version: Current at 27.07.2010 and Probably Prior Versions Vendor Notification: 26 July 2010 Vulnerability Type: X...

XSS vulnerability in BXR

Vulnerability ID: HTB22507 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinbxr1.html Product: BXR Vendor: Hulihan Applications ;http://hulihanapplications.com/projects/bxr Vulnerable Version: 0.6.8 and Probably Prior Versions Vendor Notification: 22 July 2010 Vulnerability Type: XSS...

68designs 68kb Multiple RFI Vulnerabilities (Aug 2010) - Active Check

68designs 68kb is prone to multiple remote file include RFI vulnerabilities because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

PHP Traverser <= 0.8.0 RFI Vulnerability

PHP Traverser is prone to a remote file include RFI vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Social Media - index.php Local File Inclusion

Social Media - index.php Local File Inclusion source: https://www.securityfocus.com/bid/42009/info Social Media is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive...

Social Media - 'index.php' Local File Inclusion

source: https://www.securityfocus.com/bid/42009/info Social Media is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in...

MC Content Manager 10.1 - SQL Injection Cross-Site Scripting

MC Content Manager 10.1 - SQL Injection Cross-Site Scripting source: https://www.securityfocus.com/bid/41949/info MC Content Manager is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiti...

YACS CMS 10.5.27 - 'context[path_to_root]' Remote File Inclusion

source: https://www.securityfocus.com/bid/41773/info Yacs CMS is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information or to execute arbitrary script code in th...

Gekko Web Builder 0.90 ALPHA Cross Site Scripting

Vulnerability ID: HTB22474 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityingekkowebbuilder.html Product: Gekko Web Builder Vendor: Baby Gekko IT Consulting http://www.babygekko.com/ Vulnerable Version: v0.90 ALPHA and Probably Prior Versions Vendor Notification: 01 July 2010...

Stored XSS vulnerability in Pixie

Vulnerability ID: HTB22469 Reference: http://www.htbridge.ch/advisory/storedxssvulnerabilityinpixie.html Product: Pixie Vendor: Toggle Labs Ltd http://www.getpixie.co.uk/ Vulnerable Version: 1.0.4 and Probably Prior Versions Vendor Notification: 01 July 2010 Vulnerability Type: Stored XSS Cross...

XSS vulnerability in DSite CMS

Vulnerability ID: HTB22465 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityindsitecms.html Product: DSite CMS Vendor: Media Programming Group http://www.dsite.ru Vulnerable Version: 4.81 and Probably Prior Versions Vendor Notification: 01 July 2010 Vulnerability Type: XSS Cross Site...

XSS vulnerability in WebPress

Vulnerability ID: HTB22478 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinwebpress.html Product: WebPress Vendor: YWP http://www.goywp.com/ Vulnerable Version: Current at 01.07.2010 and Probably Prior Versions Vendor Notification: 01 July 2010 Vulnerability Type: XSS Cross Site...

XSS vulnerability in Pligg search module

Vulnerability ID: HTB22467 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinpliggsearchmodule.html Product: Pligg Vendor: Pligg, LLC http://www.pligg.com/demo/ Vulnerable Version: 1.0.4 and Probably Prior Versions Vendor Notification: 01 July 2010 Vulnerability Type: XSS Cross Site...

Diem 5.1.2 Cross Site Scripting

================================================ Vulnerability ID: HTB22460 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityindiem2.html Product: Diem Vendor: Diem team Vulnerable Version: 5.1.2 and Probably Prior Versions Vendor Notification: 29 June 2010 Vulnerability Type: XSS Cross...

XSS vulnerability in CruxPA

Vulnerability ID: HTB22450 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincruxpa1.html Product: CruxPA Vendor: CruxSoftware Vulnerable Version: 2.00 and Probably Prior Versions Vendor Notification: 21 June 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed, Vendor...