sNews CMS - Multiple Cross-Site Scripting Vulnerabilities

sNews CMS - Multiple Cross-Site Scripting Vulnerabilities Vulnerability ID: HTB22638 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinsnews1.html Product: sNews Vendor: sNews Team tp://www.snewscms.com/ Vulnerable Version: 1.7 and probably prior versions Vendor Notification: 05 Octobe...

FilterFTP 2.0.3 Directory Traversal

Vulnerability ID: HTB22626 Reference: http://www.htbridge.ch/advisory/directorytraversalvulnerabilityinfilterftp.html Product: FilterFTP Vendor: IN MEDIA KG http://www.in-mediakg.com/software/filterftp/filterftp.shtml Vulnerable Version: 2.0.3 and Probably Prior Versions Vendor Notification: 22...

XSS vulnerability in Elxis CMS polls module

Vulnerability ID: HTB22616 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinelxiscmspollsmodule.html Product: Elxis CMS Vendor: Elxis Team http://www.elxis.org/ Vulnerable Version: 2009.2 electra rev2631 and probably prior versions Vendor Notification: 20 September 2010 Vulnerability...

XSS vulnerability in Elxis CMS

Vulnerability ID: HTB22614 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinelxiscms.html Product: Elxis CMS Vendor: Elxis Team http://www.elxis.org/ Vulnerable Version: 2009.2 electra rev2631 and probably prior versions Vendor Notification: 20 September 2010 Vulnerability Type: XSS...

Hackid

One of the more interesting trends is the way hacking culture is starting to trickle down from the technology cognoscenti to a far broader and equally receptive audience. Hackid is a great example of that. In its first year ever, Hackid is a conference specifically targeted at kids aged 5 to 17...

Jax Calender admin bypass vulnerability

Exploit for php platform in category web applications ======================================= Jax Calender admin bypass vulnerability ======================================= Exploit Title: Jax Calender admin bypass vulnerability Date: 3.10.2010 Author: EraGoN Software Link:...

Pluck 4.6.3 Cross Site Scripting

Vulnerability ID: HTB22610 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinpluck.html Product: Pluck Vendor: Pluck Team http://www.pluck-cms.org Vulnerable Version: 4.6.3 and probably prior versions Vendor Notification: 15 September 2010 Vulnerability Type: XSS Cross Site Scripting...

PdShop Pro Online Store System SQL Injection

----------------------------------------------------------------------------------------- PdShop pro Online Store System. SQL-i Vulnerability -----------------------------------------------------------------------------------------...

BPJewelry Store SQL Injection

----------------------------------------------------------------------------------------- BPJewelry Store SQL-i Vulnerability ----------------------------------------------------------------------------------------- 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /'...

e107 v0.7.23 SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================== e107 v0.7.23 SQL Injection Vulnerability ======================================== Product: e107 Website System Vendor: e107 http://www.e107.org/ Vulnerable Version: 0.7.23 and Probably Prior Versions...

Entrans 0.3.2 Cross Site Scripting / SQL Injection

======================================= Vulnerability ID: HTB22606 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinentrans.html Product: Entrans Vendor: Khader Abbeb N http://sourceforge.net/projects/entrans/ Vulnerable Version: 0.3.2 and Probably Prior Versions Vendor Notification: ...

Allpc 2.5 osCommerce - SQL Injection / Cross-Site Scripting

+Title Allpc 2.5 osCommerce SQL-i/XSS Multiple Vulnerabilities +Author RoAdKiLlEr +Contact RoAdKiLlEratKhg-CrewdotWs +Tested on Win Xp Sp 2/3 --------------------------------------------------------------------------- Founded by RoAdKiLlEr Team: Albanian Hacking Crew Version: 2.5 Vendor:...

Car Portal 2.0 - Blind SQL Injection

Car Portal 2.0 - Blind SQL Injection +Title Car Portal v2.0 BLIND SQL Injection Vulnerability +Author RoAdKiLlEr +Contact RoAdKiLlEratKhg-CrewdotWs +Tested on Win Xp Sp 2/3 --------------------------------------------------------------------------- Founded by RoAdKiLlEr Team: Albanian Hacking Cre...

Joomla Elite Experts SQL Injection

+Title Joomla Component comeliteexperts SQL Injection Vulnerability +Author RoAdKiLlEr +Contact RoAdKiLlEratKhg-CrewdotWs +Tested on Win Xp Sp 2/3 --------------------------------------------------------------------------- Founded by RoAdKiLlEr Team: Albanian Hacking Crew Contact:...

Joomla Component com_elite_experts SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================================== Joomla Component comeliteexperts SQL Injection Vulnerability ==============================================================...

Joomla! Component Elite Experts - SQL Injection

+Title Joomla Component comeliteexperts SQL Injection Vulnerability +Author RoAdKiLlEr +Contact RoAdKiLlEratKhg-CrewdotWs +Tested on Win Xp Sp 2/3 --------------------------------------------------------------------------- Founded by RoAdKiLlEr Team: Albanian Hacking Crew Contact:...

Joomla! Component Elite Experts - SQL Injection

Joomla! Component Elite Experts - SQL Injection +Title Joomla Component comeliteexperts SQL Injection Vulnerability +Author RoAdKiLlEr +Contact RoAdKiLlEratKhg-CrewdotWs +Tested on Win Xp Sp 2/3 --------------------------------------------------------------------------- Founded by RoAdKiLlEr Team...

Microsoft issues Advisory on ASP.NET Hole

Microsoft has issued a security advisory for a recently disclosed vulnerability in the ASP.NET that could leave millions of Web pages vulnerable to attack. The company on Friday released Security Advisory 2416728 addressing the ASP.NET security hole, which was first disclosed by researchers at th...

SQL injection vulnerability in e107

Vulnerability ID: HTB22602 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityine107.html Product: e107 Website System Vendor: e107 http://www.e107.org/ Vulnerable Version: 0.7.23 and Probably Prior Versions Vendor Notification: 03 September 2010 Vulnerability Type: SQL Injection...

AChecker 1.0 Cross Site Scripting

Vulnerability ID: HTB22601 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinachecker.html Product: AChecker Vendor: Inclusive Design Institute http://www.atutor.ca/ Vulnerable Version: 1.0 Vendor Notification: 01 September 2010 Vulnerability Type: XSS Cross Site Scripting Status: Fixe...