ki Wiki CMS groupware local file include and cross-site scripting vulnerability-vulnerability warning-the black bar safety net

The attacker can through the browser to exploit these issues. The use of a cross-site scripting issues, an attacker must entice an unsuspecting user to click on a malicious URI. The local file vulnerability EXP: the http:// 网站...

e107 0.7.23 SQL Injection

Vulnerability ID: HTB22604 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityine1072.html Product: e107 Website System Vendor: e107 http://www.e107.org/ Vulnerable Version: 0.7.23 and Probably Prior Versions Vendor Notification: 13 September 2010 Vulnerability Type: SQL Injectio...

SQL injection vulnerability in e107

Vulnerability ID: HTB22604 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityine1072.html Product: e107 Website System Vendor: e107 http://www.e107.org/ Vulnerable Version: 0.7.23 and Probably Prior Versions Vendor Notification: 13 September 2010 Vulnerability Type: SQL Injectio...

ChillyCMS 1.1.3 - Multiple Vulnerabilities

ChillyCMS 1.1.3 - Multiple Vulnerabilities www.BugReport.ir AmnPardaz Security Research Team Title: chillyCMS Multiple Vulnerabilities Vendor: http://frozenpepper.de/ Vulnerable Version: 1.1.3 Latest version till now Exploitation: Remote with browser Fix: N/A - Description: chillyCMS is a Content...

SQL injection vulnerability in TCMS

Vulnerability ID: HTB22578 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityintcms4.html Product: TCMS Vendor: Target CMS http://targetcms.com/ Vulnerable Version: 100728 and Probably Prior Versions Vendor Notification: 09 August 2010 Vulnerability Type: SQL Injection Status: N...

Prometeo 1.0.65 - SQL Injection

// / ////// //////// /// / / / / // / / / / /// //////// / / // / / / // / // /// //////// // ================================= Prometeo vers. 1.0.65 -SQLi Vulnerability- ================================= -Vulnerability ID: LD3-Product: Prometeo-Vendor: Prometeo...

Prometeo v1.0.65 SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================ Prometeo v1.0.65 SQL Injection Vulnerability ============================================ Prometeo vers. 1.0.65 -SQLi Vulnerability- ================================= -Vulnerability ID: LD3-Product:...

SQL injection vulnerability in SyntaxCMS

Vulnerability ID: HTB22540 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinsyntaxcms.html Product: SyntaxCMS Vendor: Forum One Communications http://www.syntaxcms.org/ Vulnerable Version: 1.3 and Probably Prior Versions Vendor Notification: 27 July 2010 Vulnerability Type: S...

Local File Inclusion in CMS Source

Vulnerability ID: HTB22552 Reference: http://www.htbridge.ch/advisory/localfileinclusionincmssource1.html Product: CMS Source Vendor: Proud Daddy Web Design http://www.prouddaddy.net/ Vulnerable Version: Current at 28.07.2010 and Probably Prior Versions Vendor Notification: 28 July 2010...

SyntaxCMS 1.3 SQL Injection

Vulnerability ID: HTB22540 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinsyntaxcms.html Product: SyntaxCMS Vendor: Forum One Communications http://www.syntaxcms.org/ Vulnerable Version: 1.3 and Probably Prior Versions Vendor Notification: 27 July 2010 Vulnerability Type: S...

Edit-X CMS Cross Site Scripting

Vulnerability ID: HTB22542 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityineditxcms.html Product: Edit-X CMS Vendor: Edit-X, Inc. http://www.edit-x.com/ Vulnerable Version: Current at 27.07.2010 and Probably Prior Versions Vendor Notification: 27 July 2010 Vulnerability Type: XSS Cro...

Prado Portal 1.2.0 Cross Site Scripting

Vulnerability ID: HTB22515 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinpradoportal.html Product: Prado Portal Vendor: Compudesign ApS http://www.pradoportal.dk/ Vulnerable Version: 1.2.0 and Probably Prior Versions Vendor Notification: 22 July 2010 Vulnerability Type: XSS Cross...

SQL injection vulnerability in Theeta CMS

Vulnerability ID: HTB22490 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityintheetacms.html Product: Theeta CMS Vendor: MN Tech Solutions http://www.mntechsolutions.net/ Vulnerable Version: 0.0 Vendor Notification: 12 July 2010 Vulnerability Type: SQL Injection Status: Not...

XSS vulnerability in Theeta CMS

Vulnerability ID: HTB22488 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityintheetacms1.html Product: Theeta CMS Vendor: MN Tech Solutions http://www.mntechsolutions.net/ Vulnerable Version: 0.0 Vendor Notification: 12 July 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not...

XSS vulnerability in FestOS

Vulnerability ID: HTB22472 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinfestos.html Product: FestOS Vendor: Skypanther Studios, Inc http://festengine.org/ Vulnerable Version: 2.3b and Probably Prior Versions Vendor Notification: 01 July 2010 Vulnerability Type: XSS Cross Site...

SQL injection vulnerability in CMSQLite

Vulnerability ID: HTB22463 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityincmsqlite2.html Product: CMSQLite Vendor: CMSQLite-Team Vulnerable Version: 1.3 and Probably Prior Versions Vendor Notification: 29 June 2010 Vulnerability Type: SQL Injection Status: Not Fixed, Vendor...

XSS vulnerability in Diem

Vulnerability ID: HTB22460 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityindiem2.html Product: Diem Vendor: Diem team Vulnerable Version: 5.1.2 and Probably Prior Versions Vendor Notification: 29 June 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed, Vendor Alerted...

dotDefender 4.02 - clave Cross-Site Scripting

dotDefender 4.02 - clave Cross-Site Scripting source: https://www.securityfocus.com/bid/41541/info dotDefender is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

Tomato CMS 2.0.6 SQL Injection

Vulnerability ID: HTB22444 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityintomatocms.html Product: TomatoCMS Vendor: TomatoCMS Vulnerable Version: 2.0.6 and Probably Prior Versions Vendor Notification: 14 June 2010 Vulnerability Type: SQL Injection Status: Not Fixed, Vendor...

Grafik CMS 1.1.2 SQL Injection

Vulnerability ID: HTB22440 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityingrafikcms.html Product: Grafik CMS Vendor: GrafikPower Vulnerable Version: 1.1.2 and Probably Prior Versions Vendor Notification: 14 June 2010 Vulnerability Type: SQL Injection Status: Not Fixed, Vend...