The Open Pentest Bookmark Collection v1.4

We are pleased to announce the release of version 1.4 yes 1.3 squeaked by without a blog post of the Open Pentest Bookmarks Collection. They have added a large amount of community submissions, with the addition of severalnew sections. They have also moved around some of the bookmarks to better...

HTB22897: SQL injection vulnerability in Ripe website manager

Vulnerability ID: HTB22897 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinripewebsitemanager.html Product: Ripe website manager Vendor: Ripe website manager Team http://www.ripewebsitemanager.com/ Vulnerable Version: 1.1 and probably prior versions Vendor Notification: 10...

SyndeoCMS 2.8.02 - Multiple Vulnerabilities (2)

SyndeoCMS 2.8.02 - Multiple Vulnerabilities 2 Vulnerability ID: HTB22901 Reference: http://www.htbridge.ch/advisory/sqlinjectioninsyndeocms.html Product: SyndeoCMS Vendor: http://www.syndeocms.org/ http://www.syndeocms.org/ Vulnerable Version: 2.8.02 Vendor Notification: 10 March 2011 Vulnerabili...

Ripe Website Manager 1.1 XSRF / XSS / SQL Injection

================================ Vulnerability ID: HTB22898 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinripewebsitemanager.html Product: Ripe website manager Vendor: Ripe website manager Team http://www.ripewebsitemanager.com/ Vulnerable Version: 1.1 and probably prior versions Vendor...

SyndeoCMS 2.8.02 XSS / Path Disclosure / SQL Injection

================================= Vulnerability ID: HTB22899 Reference: http://www.htbridge.ch/advisory/pathdisclosureinsyndeocms.html Product: SyndeoCMS Vendor: http://www.syndeocms.org/ http://www.syndeocms.org/ Vulnerable Version: 2.8.02 Vendor Notification: 10 March 2011 Vulnerability Type:...

Rating-Widget 1.3.1 Cross Site Scripting

===================================== Vulnerability ID: HTB22891 Reference: http://www.htbridge.ch/advisory/xssinratingwidgetwordpressplugin2.html Product: Rating-Widget wordpress plugin Vendor: Vova Feldman http://rating-widget.com/ Vulnerable Version: 1.3.1 Vendor Notification: 03 March 2011...

HTB22890: XSS in Rating-Widget wordpress plugin

Vulnerability ID: HTB22890 Reference: http://www.htbridge.ch/advisory/xssinratingwidgetwordpressplugin1.html Product: Rating-Widget wordpress plugin Vendor: Vova Feldman http://rating-widget.com/ Vulnerable Version: 1.3.1 Vendor Notification: 03 March 2011 Vulnerability Type: XSS Cross Site...

HTB22889: XSS in Rating-Widget wordpress plugin

Vulnerability ID: HTB22889 Reference: http://www.htbridge.ch/advisory/xssinratingwidgetwordpressplugin.html Product: Rating-Widget wordpress plugin Vendor: Vova Feldman http://rating-widget.com/ Vulnerable Version: 1.3.1 Vendor Notification: 03 March 2011 Vulnerability Type: XSS Cross Site...

Sodahead Polls 2.0.2 Cross Site Scripting

================================ Vulnerability ID: HTB22894 Reference: http://www.htbridge.ch/advisory/xssinsodaheadpollswordpressplugin1.html Product: Sodahead Polls wordpress plugin Vendor: SodaHead.com SodaHead.com Vulnerable Version: 2.0.2 Vendor Notification: 03 March 2011 Vulnerability Type...

LotusCMS 3.0.3 - Multiple Vulnerabilities

Vulnerability ID: HTB22886 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinlotuscms.html Product: LotusCMS Vendor: Arboroia Network http://www.lotuscms.org/ Vulnerable Version: 3.0.3 and probably prior versions Vendor Notification: 01 March 2011 Vulnerability Type: CSRF Cross-Site Request...

HTB22888: File Content Disclosure in LotusCMS

Vulnerability ID: HTB22888 Reference: http://www.htbridge.ch/advisory/filecontentdisclosureinlotuscms.html Product: LotusCMS Vendor: Arboroia Network http://www.lotuscms.org/ Vulnerable Version: 3.0.3 and probably prior versions Vendor Notification: 01 March 2011 Vulnerability Type: File Content...

CosmoShop ePRO 10.05.00 Cross Site Scripting / SQL Injection

================================= Vulnerability ID: HTB22881 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityincosmoshop.html Product: CosmoShop Vendor: Zaunz Publishing GmbH http://www.cosmoshop.de/ Vulnerable Version: ePRO V10.05.00 Vendor Notification: 24 February 2011...

HTB22875: XSS in Lazyest Gallery wordpress plugin

Vulnerability ID: HTB22875 Reference: http://www.htbridge.ch/advisory/xssinlazyestgallerywordpressplugin.html Product: Lazyest Gallery wordpress plugin Vendor: Brimosoft http://brimosoft.nl/ Vulnerable Version: 1.0.26 Vendor Notification: 24 February 2011 Vulnerability Type: XSS Cross Site...

HTB22878: XSS vulnerability in CosmoShop

Vulnerability ID: HTB22878 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincosmoshop.html Product: CosmoShop Vendor: Zaunz Publishing GmbH http://www.cosmoshop.de/ Vulnerable Version: ePRO V10.05.00 Vendor Notification: 24 February 2011 Vulnerability Type: Stored XSS Cross Site...

Wordpress GRAND Flash Album Gallery 0.55 Plugin Multiple Vulnerabilities

Exploit for php platform in category web applications Product: GRAND Flash Album Gallery wordpress plugin Vendor: Sergey Pasyuk http://codeasily.com/ Vulnerable Version: 0.55 Vendor Notification: 22 February 2011 Vulnerability Type: SQL Injection Risk level: High Credit: High-Tech Bridge SA -...

HTB22870: SQL Injection in GRAND Flash Album Gallery wordpress plugin

Vulnerability ID: HTB22870 Reference: http://www.htbridge.ch/advisory/sqlinjectioningrandflashalbumgallerywordpressplugin.html Product: GRAND Flash Album Gallery wordpress plugin Vendor: Sergey Pasyuk http://codeasily.com/ Vulnerable Version: 0.55 Vendor Notification: 22 February 2011 Vulnerabili...

Inline Gallery 0.3.9 Cross Site Scripting

Vulnerability ID: HTB22873 Reference: http://www.htbridge.ch/advisory/xssininlinegallerywordpressplugin.html Product: Inline Gallery wordpress plugin Vendor: m0n5t3r http://m0n5t3r.info/work/wordpress-plugins/inline-gallery/ Vulnerable Version: 0.3.9 Vendor Notification: 22 February 2011...

PhotoSmash 1.0.1 Cross Site Scripting

Vulnerability ID: HTB22867 Reference: http://www.htbridge.ch/advisory/xssinphotosmashwordpressplugin.html Product: PhotoSmash wordpress plugin Vendor: Byron Bennett http://smashly.net/ Vulnerable Version: 1.0.1 Vendor Notification: 22 February 2011 Vulnerability Type: XSS Cross Site Scripting...

GRAND Flash Album Gallery 0.55 SQL Injection / File Disclosure

=============================== Vulnerability ID: HTB22871 Reference: http://www.htbridge.ch/advisory/filecontentdisclosureingrandflashalbumgallerywordpressplugin.html Product: GRAND Flash Album Gallery wordpress plugin Vendor: Sergey Pasyuk http://codeasily.com/ Vulnerable Version: 0.55 Vendor...

Ethical hacker (CEH) training now in syllabus of Riphah International University,Pakistan !

Islamabad: The first-ever 'Ethical Hacking and Countermeasures CEH' training course organised by the Riphah International University, in collaboration with internationally renowned information security certification body, EC-Council, concluded here on Wednesday. Riphah International University is...