WordPress Plugin GRAND Flash Album Gallery 0.55 - Multiple Vulnerabilities

Vulnerability ID: HTB22870 Reference: http://www.htbridge.ch/advisory/sqlinjectioningrandflashalbumgalle rywordpressplugin.html Product: GRAND Flash Album Gallery wordpress plugin Vendor: Sergey Pasyuk http://codeasily.com/ Vulnerable Version: 0.55 Vendor Notification: 22 February 2011...

WordPress Plugin GRAND Flash Album Gallery 0.55 - Multiple Vulnerabilities

WordPress Plugin GRAND Flash Album Gallery 0.55 - Multiple Vulnerabilities Vulnerability ID: HTB22870 Reference: http://www.htbridge.ch/advisory/sqlinjectioningrandflashalbumgalle rywordpressplugin.html Product: GRAND Flash Album Gallery wordpress plugin Vendor: Sergey Pasyuk http://codeasily.com...

WordPress GRAND Flash Album Gallery Plugin 0.55 - Multiple Vulnerabilities

There are several vulnerabilities in this WordPress GRAND Flash Album Gallery plugin. First vulnerability is SQL injection that exists because of failure in the "/wp-content/plugins/flash-album-gallery/lib/hitcounter.php" script to properly sanitize user-supplied input in "pid" variable. It allow...

BackWPup WordPress Plugin 1.4.0 File Content Disclosure

============================================= - Release date: Feb 28th, 2010 - Discovered by: Danilo Massa - Severity: High ============================================= I. VULNERABILITY ------------------------- BackWPup Wordpress plugin = 1.4.0 File content disclosure II. BACKGROUND...

HTB22827: File Content Disclosure in Wikipad

Vulnerability ID: HTB22827 Reference: http://www.htbridge.ch/advisory/filecontentdisclosureinwikipad.html Product: Wikipad Vendor: Cherry-Design http://www.cherry-software.spb.ru/ Vulnerable Version: 1.6.0 Vendor Notification: 01 February 2011 Vulnerability Type: File Content Disclosure Risk leve...

Caedo HTTPd Server 0.5.1 ALPHA Remote File Download

!/usr/bin/perl use LWP::Simple; Caedo HTTPd Server v 0.5.1 ALPHA Remote File Download Exploit Author : Zer0 Thunder if @ARGV $file"; print FILE $result; close FILE; print " File Saved : $file \n\n"; print "---------------------------------------------\n"; print "site : zt-security.com -...

Caedo HTTPd Server 0.5.1 ALPHA - Arbitrary File Download

Caedo HTTPd Server 0.5.1 ALPHA - Arbitrary File Download !/usr/bin/perl use LWP::Simple; Caedo HTTPd Server v 0.5.1 ALPHA Remote File Download Exploit Author : Zer0 Thunder if @ARGV $file"; print FILE $result; close FILE; print " File Saved : $file \n\n"; print...

HTB22791: File Content Disclosure in Pixelpost

Vulnerability ID: HTB22791 Reference: http://www.htbridge.ch/advisory/filecontentdisclosureinpixelpost.html Product: Pixelpost Vendor: Pixelpost http://www.pixelpost.org/ Vulnerable Version: 1.7.3 Vendor Notification: 11 January 2011 Vulnerability Type: File Content Disclosure Status: Awaiting...

Pixelpost 1.7.3 Cross Site Scripting / Disclosure

================================ Vulnerability ID: HTB22794 Reference: http://www.htbridge.ch/advisory/pathdisclousureinpixelpost.html Product: Pixelpost Vendor: Pixelpost http://www.pixelpost.org/ Vulnerable Version: 1.7.3 Vendor Notification: 11 January 2011 Vulnerability Type: Path disclousure...

Feindura File Manager 1.0(rc) - Arbitrary File Upload

Feindura File Manager 1.0rc - Arbitrary File Upload =================================================== Feindura File Manager 1.0rc - Remote File Upload =================================================== My + Author : KnocKout Contact : [email protected] Software info Web App. : Feindura - Flat...

Feindura File Manager 1.0(rc) - Arbitrary File Upload

=================================================== Feindura File Manager 1.0rc - Remote File Upload =================================================== My + Author : KnocKout Contact : [email protected] Software info Web App. : Feindura - Flat File Content Management System 1.0 rc Software:...

File Content Disclosure in TCMS

Vulnerability ID: HTB22579 Reference: http://www.htbridge.ch/advisory/filecontentdisclosureintcms.html Product: TCMS Vendor: Target CMS http://targetcms.com/ Vulnerable Version: 100728 and Probably Prior Versions Vendor Notification: 09 August 2010 Vulnerability Type: File Content Disclosure...

FTPGetter 3.51.0.05 Directory Traversal

Vulnerability ID: HTB22567 Reference: http://www.htbridge.ch/advisory/directorytraversalinftpgetter.html Product: FTPGetter Vendor: FTPGetter Team http://www.ftpgetter.com/ Vulnerable Version: 3.51.0.05 and Probably Prior Versions Vendor Notification: 05 August 2010 Vulnerability Type: File Conte...

AutoFTP Manager 4.31 Directory Traversal

Vulnerability ID: HTB22566 Reference: http://www.htbridge.ch/advisory/directorytraversalinautoftpmanager.html Product: AutoFTP Manager Vendor: DeskShare http://www.deskshare.com/afm.aspx Vulnerable Version: 4.31 and Probably Prior Versions Vendor Notification: 05 August 2010 Vulnerability Type:...

Directory Traversal in 3D FTP Client

Vulnerability ID: HTB22565 Reference: http://www.htbridge.ch/advisory/directorytraversalin3dftpclient.html Product: 3D FTP Client Vendor: SiteDesigner Technologies, Inc. http://3dftp.com/3dftp.htm Vulnerable Version: 9.0 build 2 and Probably Prior Versions Vendor Notification: 05 August 2010...

Directory Traversal in FTPGetter

Vulnerability ID: HTB22567 Reference: http://www.htbridge.ch/advisory/directorytraversalinftpgetter.html Product: FTPGetter Vendor: FTPGetter Team http://www.ftpgetter.com/ Vulnerable Version: 3.51.0.05 and Probably Prior Versions Vendor Notification: 05 August 2010 Vulnerability Type: File Conte...

Directory Traversal in AutoFTP Manager

Vulnerability ID: HTB22566 Reference: http://www.htbridge.ch/advisory/directorytraversalinautoftpmanager.html Product: AutoFTP Manager Vendor: DeskShare http://www.deskshare.com/afm.aspx Vulnerable Version: 4.31 and Probably Prior Versions Vendor Notification: 05 August 2010 Vulnerability Type:...

GLSA-200909-14 : Horde: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200909-14 Horde: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Horde: Gunnar Wrobel reported an input sanitation and directory traversal flaw in framework/Image/Image.php, related to the 'HordeImage...

CentOS 3 : seamonkey (CESA-2009:1096)

Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat...

Critical: Red Hat Security Advisory: seamonkey security update

Updated seamonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat...