etomite 1.1 - Multiple Vulnerabilities

Vulnerability ID: HTB22710 Reference: http://www.htbridge.ch/advisory/sqlinjectioninetomite.html Product: Etomite Vendor: http://www.etomite.org/ http://www.etomite.org/ Vulnerable Version: 1.1 Vendor Notification: 18 November 2010 Vulnerability Type: SQL Injection Status: Not Fixed, Vendor...

etomite 1.1 - Multiple Vulnerabilities

etomite 1.1 - Multiple Vulnerabilities Vulnerability ID: HTB22710 Reference: http://www.htbridge.ch/advisory/sqlinjectioninetomite.html Product: Etomite Vendor: http://www.etomite.org/ http://www.etomite.org/ Vulnerable Version: 1.1 Vendor Notification: 18 November 2010 Vulnerability Type: SQL...

Path disclosure in Enano CMS

Vulnerability ID: HTB22708 Reference: http://www.htbridge.ch/advisory/pathdisclosureinenanocms.html Product: Enano CMS Vendor: enanocms.org http://enanocms.org/ Vulnerable Version: 1.1.7pl1 Vendor Notification: 16 November 2010 Vulnerability Type: Path disclosure Status: Fixed by Vendor Risk leve...

Vulnerabilities in Register Plus for WordPress

Hello Bugtraq! I want to warn you about Cross-Site Scripting, Insufficient Anti-automation and Full path disclosure vulnerabilities in plugin Register Plus for WordPress. ------------------------- Affected products: ------------------------- Vulnerable are versions of plugin Register Plus 3.5.1 a...

Register Plus <= 3.5.1 - Full Path Disclosure

It is unclear whether or not the issue has been fixed. Plugin has been closed...

S-CMS 2.5 Multiple Vulnerabilities

Exploit for php platform in category web applications ================================== S-CMS 2.5 Multiple Vulnerabilities ================================== ============================================================ Exploit Title: S-CMS Multiple Vuln Date: 14/11/2010 Author: LordTittiS...

S_CMS 2.5 - Multiple Vulnerabilities

SCMS 2.5 - Multiple Vulnerabilities ============================================================ Exploit Title: S-CMS Multiple Vuln Date: 14/11/2010 Author: LordTittiS Greetings To: GodOfPain, SystemOveride Software Link: http://www.matteoiammarrone.com http://www.matteoiammarrone.com/public/s-cm...

S_CMS 2.5 - Multiple Vulnerabilities

============================================================ Exploit Title: S-CMS Multiple Vuln Date: 14/11/2010 Author: LordTittiS Greetings To: GodOfPain, SystemOveride Software Link: http://www.matteoiammarrone.com http://www.matteoiammarrone.com/public/s-cms/ Vulnerability Type: Full Path...

Invision Power Board 3 SQL Injection

============================================================ Exploit Title: Invision Power Board 3 Multiple Vuln Date: 13/11/2010 Author: LordTittiS Greetings To: GodOfPain, SystemOveride Software Link: http://www.invisionpower.com/ Vulnerability Type: Full Path Disclosure Version: 3.x.x All 3...

Invision Power Board 3 - 'search_app' SQL Injection

============================================================ Exploit Title: Invision Power Board 3 Multiple Vuln Date: 13/11/2010 Author: LordTittiS Greetings To: GodOfPain, SystemOveride Software Link: http://www.invisionpower.com/ Vulnerability Type: Full Path Disclosure Version: 3.x.x All 3...

Invision Power Board 3 - search_app SQL Injection

Invision Power Board 3 - searchapp SQL Injection ============================================================ Exploit Title: Invision Power Board 3 Multiple Vuln Date: 13/11/2010 Author: LordTittiS Greetings To: GodOfPain, SystemOveride Software Link: http://www.invisionpower.com/ Vulnerability...

Punbb 1.3.4 Full Path Disclosure Vulnerability

Exploit for php platform in category web applications ============================================== Punbb 1.3.4 Full Path Disclosure Vulnerability ============================================== Exploit Title: Punbb 1.3.4 Full Path Disclosure Date: 07/11/2010 Author: SYSTEMOVERIDE, OverSecurityCr...

Уязвимости в PHPShop

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Insufficient Anti-automation, Cross-Site Scripting, Denial of Service и Full path disclosure уязвимостях в PHPShop. Это движок для онлайн магазинов. Insufficient Anti-automation WASC-21: http://site/users/register.html На данной странице...

Punbb 1.3.4 - Multiple Full Path Disclosures

Exploit Title: Punbb 1.3.4 Full Path Disclosure Date: 07/11/2010 Author: SYSTEMOVERIDE, OverSecurityCrew Software Link: http://punbb.informer.com/ Vulnerability Type: Full Path Disclosure Version: 1.3.4 Vulnerability Details: The vulnerabilities are in the file and the file /search.php,...

Punbb 1.3.4 - Multiple Full Path Disclosures

Punbb 1.3.4 - Multiple Full Path Disclosures Exploit Title: Punbb 1.3.4 Full Path Disclosure Date: 07/11/2010 Author: SYSTEMOVERIDE, OverSecurityCrew Software Link: http://punbb.informer.com/ Vulnerability Type: Full Path Disclosure Version: 1.3.4 Vulnerability Details: The vulnerabilities are in...

MyBB 1.6 - Full Path Disclosure

MyBB 1.6 - Full Path Disclosure Vulnerability ID: HTB22654 Reference: http://www.htbridge.ch/advisory/pathdisclosureinmybb.html Product: MyBB Vendor: MyBB http://www.mybb.com Vulnerable Version: 1.6 Vendor Notification: 13 October 2010 Vulnerability Type: Path disclosure Status: Not Fixed, Vendor...

Уязвимости в CMS MYsite

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting и Insufficeint Anti-automation уязвимостях в CMS MYsite это украинская коммерческая CMS. Full path disclosure WASC-13: http://site/portal/modules.php?name=Ads XSS WASC-08:...

CMS Mysite Cross Site Scripting / SQL Injection

Hello Full-Disclosure! I want to warn you about Full path disclosure, Cross-Site Scripting and SQL Injection vulnerabilities in CMS MYsite. It's Ukrainian commercial CMS. Full path disclosure WASC-13: http://site/portal/modules.php?name=Ads XSS WASC-08:...

Многочисленные уязвимости в eSitesBuilder

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Insufficient Anti-automation, Cross-Site Scripting, SQL Injection и Full path disclosure уязвимостях в eSitesBuilder это украинская коммерческая CMS. Insufficient Anti-automation: http://site/forget.php В форме нет защиты от автоматизированных...

Mod-X Cross Site Request Forgery / Cross Site Scripting

Got bored and decided to break the new website of the company I work for. Throughout I'll be dropping two new exploits that were chained to allow the changing of the administrative password of a default mod-x install. This is not a full review of mod-x, my main goal was just to break something, s...