EUVD-2010-4927

Malware in sbrugna...

BXR 0.6.8 - CSRF Vulnerability

No description provided by source. Vulnerability ID: HTB22503 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinbxr.html Product: BXR Vendor: Hulihan Applications http://hulihanapplications.com/projects/bxr Vulnerable Version: 0.6.8 and Probably Prior Versions Vendor Notification: 22 July 2010...

CVE-2010-4963

SQL injection vulnerability in folder/list in Hulihan BXR 0.6.8 allows remote attackers to execute arbitrary SQL commands via the orderby parameter...

Sql injection

SQL injection vulnerability in folder/list in Hulihan BXR 0.6.8 allows remote attackers to execute arbitrary SQL commands via the orderby parameter...

CVE-2010-4963

SQL injection vulnerability in folder/list in Hulihan BXR 0.6.8 allows remote attackers to execute arbitrary SQL commands via the orderby parameter...

CVE-2010-4963

The CVE-2010-4963 issue concerns Hulihan BXR 0.6.8. The vulnerability is a SQL injection in the folder/list endpoint, specifically via the order_by parameter, caused by inadequate input sanitization. An attacker could remotely execute arbitrary SQL commands, potentially reading, modifying, adding...

CVE-2010-4963

SQL injection vulnerability in folder/list in Hulihan BXR 0.6.8 allows remote attackers to execute arbitrary SQL commands via the orderby parameter...

CVE-2010-4963: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in folder/list in Hulihan BXR 0.6.8 allows remote attackers to execute arbitrary SQL commands via the orderby parameter...

PT-2011-1898

Name of the Vulnerable Software and Affected Versions Hulihan BXR version 0.6.8 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the order by parameter in the folder/list functionality. Recommendations For Hulihan BXR version 0.6.8, avoid using...

XSRF (CSRF) in BXR

Vulnerability ID: HTB22503 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinbxr.html Product: BXR Vendor: Hulihan Applications http://hulihanapplications.com/projects/bxr Vulnerable Version: 0.6.8 and Probably Prior Versions Vendor Notification: 22 July 2010 Vulnerability Type: CSRF Cross-Sit...

XSS vulnerability in BXR search

Vulnerability ID: HTB22505 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinbxrsearch.html Product: BXR Vendor: Hulihan Applications http://hulihanapplications.com/projects/bxr Vulnerable Version: 0.6.8 and Probably Prior Versions Vendor Notification: 22 July 2010 Vulnerability Type:...

SQL injection vulnerability in BXR

Vulnerability ID: HTB22506 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinbxr.html Product: BXR Vendor: Hulihan Applications http://hulihanapplications.com/projects/bxr Vulnerable Version: 0.6.8 and Probably Prior Versions Vendor Notification: 22 July 2010 Vulnerability Typ...

XSS vulnerability in BXR

Vulnerability ID: HTB22504 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinbxr.html Product: BXR Vendor: Hulihan Applications http://hulihanapplications.com/projects/bxr Vulnerable Version: 0.6.8 and Probably Prior Versions Vendor Notification: 22 July 2010 Vulnerability Type: XSS...

BXR 0.6.8 Cross Site Request Forgery / Cross Site Scripting / SQL Injection

============================================== Vulnerability ID: HTB22506 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinbxr.html Product: BXR Vendor: Hulihan Applications http://hulihanapplications.com/projects/bxr Vulnerable Version: 0.6.8 and Probably Prior Versions Vend...

BXR v0.6.8 CSRF Vulnerability

Exploit for php platform in category web applications ============================= BXR v0.6.8 CSRF Vulnerability ============================= Vulnerability ID: HTB22503 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinbxr.html Product: BXR Vendor: Hulihan Applications...

Hulihan Applications BXR 0.6.8 - SQL Injection HTML Injection

Hulihan Applications BXR 0.6.8 - SQL Injection HTML Injection source: https://www.securityfocus.com/bid/42247/info Hulihan Applications BXR is prone to an SQL-injection vulnerability and multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input. An...

BXR 0.6.8 - Cross-Site Request Forgery

BXR 0.6.8 - Cross-Site Request Forgery Vulnerability ID: HTB22503 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinbxr.html Product: BXR Vendor: Hulihan Applications http://hulihanapplications.com/projects/bxr Vulnerable Version: 0.6.8 and Probably Prior Versions Vendor Notification: 22 July...

Hulihan Applications BXR 0.6.8 - SQL Injection / HTML Injection

source: https://www.securityfocus.com/bid/42247/info Hulihan Applications BXR is prone to an SQL-injection vulnerability and multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to compromise the application,...

BXR 0.6.8 - Cross-Site Request Forgery

Vulnerability ID: HTB22503 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinbxr.html Product: BXR Vendor: Hulihan Applications http://hulihanapplications.com/projects/bxr Vulnerable Version: 0.6.8 and Probably Prior Versions Vendor Notification: 22 July 2010 Vulnerability Type: CSRF Cross-Sit...

Multiple Vulnerabilities in BXR

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in BXR which could be exploited to perform cross-site scripting, cross-site request forgery and SQL injection attacks. 1 Cross-site scripting XSS vulnerability in BXR 1.1 The vulnerability exists due to input...