HackInTheBox Quartal Magazine - eZine Issue 09

Document Title: =============== HackInTheBox Quartal Magazine - eZine Issue 09 References: =========== Download: http://www.vulnerability-lab.com/resources/documents/780.pdf Original: magazine.hackinthebox.org/issues/HITB-Ezine-Issue-009.pdf Release Date: ============= 2012-11-30 Vulnerability...

Spotify Cross Site Scripting

Title: ====== Spotify Playlists - Persistent Cross Site Scripting Vector Date: ===== 2012-11-27 Introduction: ============= Spotify is a Swedish music streaming service offering digitally restricted streaming of selected music from a range of major and independent record labels, including Sony,...

Skype Account Service Session Token Bypass

Title: ====== Skype Account Service - Session Token Bypass Vulnerability Date: ===== 2012-11-15 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=762 http://www.vulnerability-lab.com/getcontent.php?id=739 MSRC ID: 13175 VL-ID: ===== 739 Common Vulnerability Scoring System...

opera to 12.10 (important)

This Opera 12.10 security update fixes following security issues: -an issue that could cause Opera not to correctly check for certificate revocation; -an issue where CORS requests could incorrectly retrieve contents of cross origin pages; -an issue where data URIs could be used to facilitate...

Eventy CMS v1.8 Plus - Multiple Web Vulnerabilities

Document Title: =============== Eventy CMS v1.8 Plus - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=756 Release Date: ============= 2012-11-13 Vulnerability Laboratory ID VL-ID: ==================================== 756...

Eventy CMS v1.8 Plus - Multiple Web Vulnerabilities

Document Title: =============== Eventy CMS v1.8 Plus - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=756 Release Date: ============= 2012-11-13 Vulnerability Laboratory ID VL-ID: ==================================== 756...

BananaDance Wiki b2.2 Cross Site Scripting / SQL Injection

Title: ====== BananaDance Wiki b2.2 - Multiple Web Vulnerabilities Date: ===== 2012-11-10 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=745 VL-ID: ===== 745 Common Vulnerability Scoring System: ==================================== 7.1 Introduction: ============= Banan...

AWAuctionScript CMS v1.x - Multiple Web Vulnerabilities

Document Title: =============== AWAuctionScript CMS v1.x - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=741 Release Date: ============= 2012-11-04 Vulnerability Laboratory ID VL-ID: ==================================== 741...

AWAuctionScript CMS v1.x - Multiple Web Vulnerabilities

Document Title: =============== AWAuctionScript CMS v1.x - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=741 Release Date: ============= 2012-11-04 Vulnerability Laboratory ID VL-ID: ==================================== 741...

VaM Shop v1.69 - Multiple Web Vulnerabilities

Title: ====== VaM Shop v1.69 - Multiple Web Vulnerabilities Date: ===== 2012-10-24 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=730 VL-ID: ===== 730 Common Vulnerability Scoring System: ==================================== 8.1 Introduction: ============= Vendor...

Endpoint Protector 4.0.4.2 - Multiple Persistent Cross-Site Scripting Vulnerabilities

Endpoint Protector 4.0.4.2 - Multiple Persistent Cross-Site Scripting Vulnerabilities Advisory Name: Multiple Persistent Cross-Site Scripting XSS in Endpoint Protector Internal Cybsec Advisory Id: 2012-1029-Multiple Persistent XSS in Endpoint Protector Vulnerability Class: Permanent Cross-Site...

Endpoint Protector 4.0.4.2 - Multiple Persistent Cross-Site Scripting Vulnerabilities

Advisory Name: Multiple Persistent Cross-Site Scripting XSS in Endpoint Protector Internal Cybsec Advisory Id: 2012-1029-Multiple Persistent XSS in Endpoint Protector Vulnerability Class: Permanent Cross-Site Scripting XSS Release Date: 10/29/2012 Affected Applications: Endpoint Protector v4.0.4....

VaM Shop 1.69 Cross Site Scripting / SQL Injection

Title: ====== VaM Shop v1.69 - Multiple Web Vulnerabilities Date: ===== 2012-10-24 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=730 VL-ID: ===== 730 Common Vulnerability Scoring System: ==================================== 8.1 Introduction: ============= Vendor...

PG Dating Pro v1.0 CMS - Multiple Web Vulnerabilities

Document Title: =============== PG Dating Pro v1.0 CMS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=736 Release Date: ============= 2012-10-29 Vulnerability Laboratory ID VL-ID: ==================================== 736...

PG Dating Pro v1.0 CMS - Multiple Web Vulnerabilities

Document Title: =============== PG Dating Pro v1.0 CMS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=736 Release Date: ============= 2012-10-29 Vulnerability Laboratory ID VL-ID: ==================================== 736...

ASTPP VoIP Billing (4cf207a) - Multiple Web Vulnerabilities

Title: ====== ASTPP VoIP Billing 4cf207a - Multiple Web Vulnerabilities Date: ===== 2012-08-17 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=687 VL-ID: ===== 687 Common Vulnerability Scoring System: ==================================== 4 Introduction: =============...

Huawei Technologies - SEH Based Buffer Overflow

Document Title: =============== Huawei Technologies - SEH Based Buffer Overflow References: =========== View: http://www.youtube.com/watch?v=pkOaPQJPQbE Release Date: ============= 2012-10-24 Vulnerability Laboratory ID VL-ID: ==================================== 731 Common Vulnerability Scoring...

CMSQLITE v1.3.2 - Multiple Web Vulnerabiltiies

Title: ====== CMSQLITE v1.3.2 - Multiple Web Vulnerabiltiies Date: ===== 2012-10-18 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=726 VL-ID: ===== 726 Common Vulnerability Scoring System: ==================================== 4.3 Introduction: ============= CMSQLite is...

Sisfokol 4.0 - Arbitrary File Upload

Sisfokol 4.0 - Arbitrary File Upload Undergroundthalo Hacking Team - Security Advisory Release Date. 13-Okt-2012 Last Update. - Vendor Notification Date. 14-Okt-2012 Product. Sisfokol 4.0 Download. http://sisfokol.bitnet.web.id/ Platform. PHP Affected versions. 4.0 possibly others Solution Status...

Symphony CMS 2.3 - Multiple Vulnerabilities

Symphony CMS 2.3 - Multiple Vulnerabilities Symphony cms 2.3 multiple vulnerabilities -------------------------------------------------------------------------------------------- 20121017 - Justanotherhacker.com : Symphony cms - Multiple vulnerabilities JAHx122 -...