5049 matches found
Cambio 0.5a - Cross-Site Request Forgery
Vulnerability ID: HTB22768 Reference: http://www.htbridge.ch/advisory/xsrfcsrfincambio.html Product: Cambio Vendor: Joram van den Boezem http://www.cambiocms.org/ Vulnerable Version: 0.5a nightly r37 and probably prior versions Vendor Notification: 28 December 2010 Vulnerability Type: CSRF...
vam shop 1.6 - Multiple Vulnerabilities
Vulnerability ID: HTB22780 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinvamshop.html Product: VaM Shop Vendor: Vamsoft http://vamshop.ru/ Vulnerable Version: 1.6 and Probably Prior Versions Vendor Notification: 28 December 2010 Vulnerability Type: CSRF Cross-Site Request Forgery Status: N...
Persistent Cross Site Scripting Vulnerability In JAF-CMS ver 4.0_RC_2
Exploit Title: Persistent Cross Site Scripting Vulnerability In JAF-CMS ver 4.0RC2 Google Dork: Site engine powered by JAF-CMS Date: 9 January 2011 Author: Akastep Software Link: http://jaf-cms.sourceforge.net/ Version: JAF-CMS ver 4.0RC2 may be vuln exist in older versions too Tested on: FreeBSD...
Unfixed XSS vulnerability at www.starpulse.com
Security researcher VirtualSystEm, has submitted on 30/12/2010 a cross-site-scripting XSS vulnerability affecting www.starpulse.com, which at the time of submission ranked 5099 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is...
Injader CMS - Multiple Vulnerabilities
Vulnerability ID: HTB22745 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityininjadercms1.html Product: Injader CMS Vendor: http://www.injader.com/ http://www.injader.com/ Vulnerable Version: 2.4.4 Vendor Notification: 07 December 2010 Vulnerability Type: XSS Cross Site Scripting Status...
FreeNAS 0.7.2.5543 - index.php Multiple Cross-Site Scripting Vulnerabilities
FreeNAS 0.7.2.5543 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/45522/info FreeNAS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...
BLOG:CMS <= v4.2.1e Multiple Vulnerabilities
Exploit for php platform in category web applications Product: BLOG:CMS Vendor: Radek Hulán http://blogcms.com/ Vulnerable Version: 4.2.1.e and probably prior versions Vendor Notification: 30 November 2010 Vulnerability Type: CSRF Cross-Site Request Forgery Status: Not Fixed, Vendor Alerted Risk...
Stored Cross Site Scripting vulnerability in BEdita
Vulnerability ID: HTB22728 Reference: http://www.htbridge.ch/advisory/storedcrosssitescriptingvulnerabilityinbedita.html Product: BEdita Vendor: Chialab ChannelWeb http://www.bedita.com/ Vulnerable Version: 3.0.1.2550 "betula" and probably prior versions Vendor Notification: 30 November 2010...
Mura CMS - Multiple Cross-Site Scripting Vulnerabilities
Mura CMS - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/45384/info Mura CMS is prone to multiple cross-site-scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to...
XSS vulnerability in Zimplit CMS
Vulnerability ID: HTB22716 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinzimplitcms1.html Product: Zimplit CMS Vendor: Zimplit http://www.zimplit.com/ Vulnerable Version: Current at 22.11.2010 and Probably Prior Versions Vendor Notification: 22 November 2010 Vulnerability Type: XSS...
Stored XSS (Cross Site Scripting) vulnerability in Diferior
Vulnerability ID: HTB22721 Reference: http://www.htbridge.ch/advisory/storedxsscrosssitescriptingvulnerabilityindiferior.html Product: Diferior Vendor: Povilas Musteikis http://www.diferior.com/ Vulnerable Version: 8.03 and probably prior versions Vendor Notification: Vulnerability Type: Stored X...
Car Portal 2.0 - 'car_make' Cross-Site Scripting
source: https://www.securityfocus.com/bid/45092/info Car Portal is prone to a cross-site-scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the contex...
Session fixation
The administrator interface in IBM OmniFind Enterprise Edition 8.x and 9.x does not restrict use of a session ID aka SID value to a single IP address, which allows remote attackers to perform arbitrary administrative actions by leveraging cookie theft, related to a "session impersonation" issue...
CVE-2010-3893
The administrator interface in IBM OmniFind Enterprise Edition 8.x and 9.x does not restrict use of a session ID aka SID value to a single IP address, which allows remote attackers to perform arbitrary administrative actions by leveraging cookie theft, related to a "session impersonation" issue...
CVE-2010-3893
The CVE-2010-3893 issue affects IBM OmniFind Enterprise Edition 8.x/9.x, where the session ID (SID) is not bound to an IP address, enabling session impersonation after cookie theft (e.g., via CVE-2010-3890). This allows an attacker to perform administrative actions from any machine reaching the a...
pfSense - 'pkg_edit.php?id' Cross-Site Scripting
source: https://www.securityfocus.com/bid/45272/info pfSense is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...
Angel Learning Management System 7.3 - 'pdaview.asp' Cross-Site Scripting
source: https://www.securityfocus.com/bid/44689/info Angel Learning Management System is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
MemHT Portal 4.0.1 - Persistent Cross-Site Scripting
Vulnerability ID: HTB22662 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinmemhtportal.html Product: MemHT Portal Vendor: Miltenovik Manojlo http://www.memht.com/ Vulnerable Version: 4.0.1 and probably prior versions Vendor Notification: 19 October 2010 Vulnerability Type: Stored XSS...
NinkoBB 1.3RC5 - Cross-Site Scripting
Vulnerability ID: HTB22652 Reference: http://www.htbridge.ch/advisory/xssinninkobb.html Product: NinkoBB Vendor: NinkoBB http://ninkobb.com Vulnerable Version: 1.3RC5 and probably prior versions Vendor Notification: 13 October 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed,...
IBM Tivoli Access Manager for E-Business - ibmwpmgsogroup?method Cross-Site Scripting
IBM Tivoli Access Manager for E-Business - ibmwpmgsogroup?method Cross-Site Scripting source: https://www.securityfocus.com/bid/44382/info IBM Tivoli Access Manager for e-business is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. ...