[oCERT-2011-001] Chyrp input sanitization errors

2011-001 Chyrp input sanitization errors Description: The Chyrp framework, an open source blogging engine, suffers from cross-site scripting XSS and local file inclusion LFI vulnerabilities. Insufficient input sanitization on the parameters passed to pages related to administration settings, the...

Nakid CMS 1.0.2 Cross Site Scripting

------------------------------------------------------------------------ Software................Nakid CMS 1.0.2 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://www.nakid.org/ Discovery Date..........6/1/2011 Tested...

Apache Archiva 1.3.4 Cross Site Scripting

Hi, This is regarding multiple XSS Cross Site Scripting Vulnerabilities in Apache Archiva 1.3.4 and previous versions. The following is the disclosure document Project: Apache Archiva Severity: High Versions: 1.3.0 - 1.3.4. The unsupported versions Archiva 1.0 - 1.2.2 are also affected. Exploit...

phpScheduleIt 1.2.12 Cross Site Scripting

Vulnerability ID: HTB22987 Reference: http://www.htbridge.ch/advisory/multiplexssinphpscheduleit.html Product: phpScheduleIt Vendor: php.brickhost.com Vulnerable Version: 1.2.12 Vendor Notification: 05 May 2011 Vulnerability Type: XSS Cross Site Scripting Risk level: Medium Credit: High-Tech Brid...

eFront 3.6.9 Build 10653 Cross Site Scripting

------------------------------------------------------------------------ Software................eFront 3.6.9 build 10653 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://www.efrontlearning.net/ Discovery Date..........5/12/2011...

HTML2PDF 4.02 Cross Site Scripting

------------------------------------------------------------------------ --Description-- A reflected cross-site scripting vulnerability in HTML2PDF v4.02 can be exploited to execute arbitrary JavaScript. --PoC-- alert0" /...

ECoder 0.4.10 Cross Site Scripting

------------------------------------------------------------------------ Software................ECoder 0.4.10 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://ecoder.quintalinda.com/ Discovery Date..........5/5/2011 Tested...

Gelsheet 1.02 Cross Site Scripting

------------------------------------------------------------------------ Software................Gelsheet 1.02 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://www.gelsheet.org/ Discovery Date..........5/5/2011 Tested...

Classmates XSS cross-site vulnerabilities-vulnerability warning-the black bar safety net

Vulnerability description: Classmates 1.1.1 design flaws, leading toXSScross-site vulnerability; user can be in a vulnerable application to execute arbitrary JavaScript code. Since the vulnerability exists in“/themes/default/header.inc.php“script is not properly sanitized of user-supplied input t...

SelectaPix Image Gallery 1.4.1 Cross Site Scripting

Vulnerability ID: HTB22964 Reference: http://www.htbridge.ch/advisory/xssinselectapiximagegallery.html Product: SelectaPix Image Gallery Vendor: http://www.outofthetrees.co.uk/ http://www.outofthetrees.co.uk/ Vulnerable Version: 1.4.1 Vendor Notification: 19 April 2011 Vulnerability Type: XSS Cro...

Tine 2.0 Cross Site Scripting

------------------------------------------------------------------------ Software................Tine 2.0 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://www.tine20.org/ Discovery Date..........4/30/2011 Tested...

Time And Expense Management System Cross Site Scripting

------------------------------------------------------------------------ Software................Time and Expense Management System Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://sourceforge.net/projects/tems/ Discovery...

LDAP Account Manager 3.4.0 Cross Site Scripting

------------------------------------------------------------------------ Software................LDAP Account Manager 3.4.0 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://www.ldap-account-manager.org/ Discovery...

HTB22952: XSS vulnerabilities in Noah's Classifieds

Vulnerability ID: HTB22952 Reference: http://www.htbridge.ch/advisory/xssvulnerabilitiesinnoahsclassifieds.html Product: Noah's Classifieds Vendor: Noah's Classifieds http://www.noahsclassifieds.org/ Vulnerable Version: 5.0.4 and probably prior versions Vendor Notification: 12 April 2011...

phpMyChat Plus 1.93 Cross Site Scripting

------------------------------------------------------------------------ Software................phpMyChat Plus 1.93 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://sourceforge.net/projects/phpmychat/ Discovery...

Dolibarr 3.0.0 Cross Site Scripting

------------------------------------------------------------------------ Software................Dolibarr 3.0.0 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://www.dolibarr.org/ Discovery Date..........4/21/2011 Tested...

HTB22917: XSS vulnerabilities in phpCollab

Vulnerability ID: HTB22917 Reference: http://www.htbridge.ch/advisory/xssvulnerabilitiesinphpcollab.html Product: phpCollab Vendor: phpCollab Team http://www.php-collab.org/ Vulnerable Version: 2.5 and probably prior versions Vendor Notification: 24 March 2011 Vulnerability Type: Stored XSS Cross...

eyeOS 2.3 Cross Site Scripting

------------------------------------------------------------------------ Software................eyeOS 2.3 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://www.eyeos.org/ Discovery Date..........4/3/2011 Tested...

LiveStreet 0.4.2 Cross Site Scripting

------------------------------------------------------------------------ Software................LiveStreet 0.4.2 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://livestreetcms.com/ Discovery Date..........4/3/2011 Tested...

WordPress Placester 0.1.0 Cross Site Scripting

------------------------------------------------------------------------ Software................WordPress Placester 0.1.0 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://www.wordpress-plugin.org/plugin/placester-plugin/...