Prometeo 1.0.65 - SQL Injection

// / ////// //////// /// / / / / // / / / / /// //////// / / // / / / // / // /// //////// // ================================= Prometeo vers. 1.0.65 -SQLi Vulnerability- ================================= -Vulnerability ID: LD3-Product: Prometeo-Vendor: Prometeo...

SQL injection vulnerability in SyntaxCMS

Vulnerability ID: HTB22540 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinsyntaxcms.html Product: SyntaxCMS Vendor: Forum One Communications http://www.syntaxcms.org/ Vulnerable Version: 1.3 and Probably Prior Versions Vendor Notification: 27 July 2010 Vulnerability Type: S...

Local File Inclusion in CMS Source

Vulnerability ID: HTB22552 Reference: http://www.htbridge.ch/advisory/localfileinclusionincmssource1.html Product: CMS Source Vendor: Proud Daddy Web Design http://www.prouddaddy.net/ Vulnerable Version: Current at 28.07.2010 and Probably Prior Versions Vendor Notification: 28 July 2010...

Edit-X CMS Cross Site Scripting

Vulnerability ID: HTB22542 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityineditxcms.html Product: Edit-X CMS Vendor: Edit-X, Inc. http://www.edit-x.com/ Vulnerable Version: Current at 27.07.2010 and Probably Prior Versions Vendor Notification: 27 July 2010 Vulnerability Type: XSS Cro...

SyntaxCMS 1.3 SQL Injection

Vulnerability ID: HTB22540 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinsyntaxcms.html Product: SyntaxCMS Vendor: Forum One Communications http://www.syntaxcms.org/ Vulnerable Version: 1.3 and Probably Prior Versions Vendor Notification: 27 July 2010 Vulnerability Type: S...

Prado Portal 1.2.0 Cross Site Scripting

Vulnerability ID: HTB22515 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinpradoportal.html Product: Prado Portal Vendor: Compudesign ApS http://www.pradoportal.dk/ Vulnerable Version: 1.2.0 and Probably Prior Versions Vendor Notification: 22 July 2010 Vulnerability Type: XSS Cross...

SQL injection vulnerability in Theeta CMS

Vulnerability ID: HTB22490 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityintheetacms.html Product: Theeta CMS Vendor: MN Tech Solutions http://www.mntechsolutions.net/ Vulnerable Version: 0.0 Vendor Notification: 12 July 2010 Vulnerability Type: SQL Injection Status: Not...

XSS vulnerability in Theeta CMS

Vulnerability ID: HTB22488 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityintheetacms1.html Product: Theeta CMS Vendor: MN Tech Solutions http://www.mntechsolutions.net/ Vulnerable Version: 0.0 Vendor Notification: 12 July 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not...

XSS vulnerability in FestOS

Vulnerability ID: HTB22472 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinfestos.html Product: FestOS Vendor: Skypanther Studios, Inc http://festengine.org/ Vulnerable Version: 2.3b and Probably Prior Versions Vendor Notification: 01 July 2010 Vulnerability Type: XSS Cross Site...

SQL injection vulnerability in CMSQLite

Vulnerability ID: HTB22463 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityincmsqlite2.html Product: CMSQLite Vendor: CMSQLite-Team Vulnerable Version: 1.3 and Probably Prior Versions Vendor Notification: 29 June 2010 Vulnerability Type: SQL Injection Status: Not Fixed, Vendor...

XSS vulnerability in Diem

Vulnerability ID: HTB22460 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityindiem2.html Product: Diem Vendor: Diem team Vulnerable Version: 5.1.2 and Probably Prior Versions Vendor Notification: 29 June 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed, Vendor Alerted...

dotDefender 4.02 - clave Cross-Site Scripting

dotDefender 4.02 - clave Cross-Site Scripting source: https://www.securityfocus.com/bid/41541/info dotDefender is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

Tomato CMS 2.0.6 SQL Injection

Vulnerability ID: HTB22444 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityintomatocms.html Product: TomatoCMS Vendor: TomatoCMS Vulnerable Version: 2.0.6 and Probably Prior Versions Vendor Notification: 14 June 2010 Vulnerability Type: SQL Injection Status: Not Fixed, Vendor...

Grafik CMS 1.1.2 SQL Injection

Vulnerability ID: HTB22440 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityingrafikcms.html Product: Grafik CMS Vendor: GrafikPower Vulnerable Version: 1.1.2 and Probably Prior Versions Vendor Notification: 14 June 2010 Vulnerability Type: SQL Injection Status: Not Fixed, Vend...

XSS vulnerability in Grafik CMS

Vulnerability ID: HTB22438 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityingrafikcms.html Product: Grafik CMS Vendor: GrafikPower Vulnerable Version: 1.1.2 and Probably Prior Versions Vendor Notification: 14 June 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed,...

Ecomat CMS Remote SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================= Ecomat CMS Remote SQL Injection Vulnerability ============================================= Product: Ecomat CMS Vendor: Codefabrik GmbH Vulnerable Version: 5.0 and Probably Prior Versions Vendor...

XSS vulnerability in PortalApp

Vulnerability ID: HTB22443 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinportalapp2.html Product: PortalApp Vendor: Latek Vulnerable Version: 4.0 and Probably Prior Versions Vendor Notification: 14 June 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed, Vendor...

TheWorld Browser 3.1.6.8 DOS Exploit

Exploit for windows platform in category dos / poc ==================================== TheWorld Browser 3.1.6.8 DOS Exploit ==================================== AUTHOR : Cur53D MAIL : Hyq6xxatgmail.com DATE : 29,june 2010 Blog : www.Cur53D.dlstreet.net Type : Denial Of Service Platform : Windows...

Lois Software 2.0a SQL Injection

Vulnerability ID: HTB22430 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinwebdb1.html Product: WebDB Vendor: Lois Software Vulnerable Version: 2.0a and Probably Prior Versions Vendor Notification: 10 June 2010 Vulnerability Type: SQL Injection Status: Fixed by Vendor Risk...

SQL injection vulnerability in WebDB

Vulnerability ID: HTB22430 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinwebdb1.html Product: WebDB Vendor: Lois Software Vulnerable Version: 2.0a and Probably Prior Versions Vendor Notification: 10 June 2010 Vulnerability Type: SQL Injection Status: Fixed by Vendor Risk...