TCExam <=11.2.011 Multiple Cross-Site Scripting Vulnerabilities

Summary TCExam is a FLOSS system for electronic exams also know as CBA - Computer-Based Assessment, CBT - Computer-Based Testing or e-exam that enables educators and trainers to author, schedule, deliver, and report on quizzes, tests and exams. Description TCExam suffers from multiple pre and pos...

sNews v1.7.1 - File Upload Vulnerability

Document Title: =============== sNews v1.7.1 - File Upload Vulnerability Release Date: ============= 2011-07-11 Vulnerability Laboratory ID VL-ID: ==================================== 142 Product & Service Introduction: =============================== sNews is a completely free, standards...

Tugux CMS 1.2 Remote Arbitrary File Deletion

Tugux CMS 1.2 pid Remote Arbitrary File Deletion Vulnerability Vendor: Tugux Studios Product web page: http://www.tugux.com Affected version: 1.2 Summary: Tugux CMS is a free, open-source content Management system CMS and application that powers the entire web. Desc: Input passed to the 'pid'...

Tugux CMS 1.2 (pid) Arbitrary File Deletion Vulnerability

Exploit for php platform in category web applications Tugux CMS 1.2 pid Remote Arbitrary File Deletion Vulnerability Vendor: Tugux Studios Product web page: http://www.tugux.com Affected version: 1.2 Summary: Tugux CMS is a free, open-source content Management system CMS and application that powe...

Tugux CMS 1.2 (pid) Remote Arbitrary File Deletion Vulnerability

Summary Tugux CMS is a free, open-source content Management system CMS and application that powers the entire web. Description Input passed to the 'pid' parameter in administrator/deletepageparse.php is not properly sanitised before being used to delete files. This can be exploited to delete file...

Tugux CMS 1.2 - 'pid' Arbitrary File Deletion

Tugux CMS 1.2 pid Remote Arbitrary File Deletion Vulnerability Vendor: Tugux Studios Product web page: http://www.tugux.com Affected version: 1.2 Summary: Tugux CMS is a free, open-source content Management system CMS and application that powers the entire web. Desc: Input passed to the 'pid'...

Cross-site Scripting (XSS) Vulnerabilities in GBook PHP guestbook

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in GBook PHP guestbook which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerabilities in GBook PHP guestbook The vulnerability exists due to input sanitation error in th...

ESTsoft ALPlayer 2.0 ASX Playlist File Handling Buffer Overflow Vulnerability

Summary ALPlayer former ALShow is an easy-to-use media player that comes equipped with plenty of codecs, and it's prepared to download more if needed. Description The vulnerability is caused due to a boundary error in the processing of a playlist file , which can be exploited to cause a stack-bas...

Ashampoo 3D CAD Professional 3 ActiveX control Insecure Method

Vulnerability ID: HTB23019 Reference: http://www.htbridge.ch/advisory/ashampoo3dcadprofessional3activexcontrolinsecuremethod.html Product: Ashampoo 3D CAD Professional 3 Vendor: Ashampoo GmbH Co http://www.ashampoo.com Vulnerable Version: 3.0.1 and probably prior Tested on: 3.0.1 Vendor...

Click&Email - Multiple SQL Injection Vulnerabilities

Document Title: =============== Click&Email - Multiple SQL Injection Vulnerabilities Release Date: ============= 2011-07-04 Vulnerability Laboratory ID VL-ID: ==================================== 219 Product & Service Introduction: =============================== ClickAndEmail is a full featured...

Click&Rank - Multiple SQL Injection Vulnerabilities

Document Title: =============== Click&Rank - Multiple SQL Injection Vulnerabilities Release Date: ============= 2011-07-03 Vulnerability Laboratory ID VL-ID: ==================================== 220 Product & Service Introduction: =============================== While adding a TOP-List or TOP-Sit...

Click&Rank - Multiple SQL Injection Vulnerabilities

Document Title: =============== Click&Rank - Multiple SQL Injection Vulnerabilities Release Date: ============= 2011-07-03 Vulnerability Laboratory ID VL-ID: ==================================== 220 Product & Service Introduction: =============================== While adding a TOP-List or TOP-Sit...

Click&BaneX v1.01 - Multiple SQL Injection Vulnerabilities

Document Title: =============== Click&BaneX v1.01 - Multiple SQL Injection Vulnerabilities Release Date: ============= 2011-07-02 Vulnerability Laboratory ID VL-ID: ==================================== 218 Product & Service Introduction: =============================== Click&BaneX is a full...

Hepi.pl CMS v2011 - SQL Injection Vulnerability

Document Title: =============== Hepi.pl CMS v2011 - SQL Injection Vulnerability Release Date: ============= 2011-07-02 Vulnerability Laboratory ID VL-ID: ==================================== 216 Product & Service Introduction: =============================== http://hepi.pl/ Abstract Advisory...

SQL Injection Vulnerability in Google Lab Database System

SQL Injection Vulnerability in Google Lab Database System Very Big & Critical Vulnerability detected in Google Lab System. Vendor is already reported by hackers, But they don't take positive step in this case, so finally hackers exposed the vulnerability in public by Bangladesh Cyber Army Admin -...

SQL Injection Vulnerability in Google Lab Database System

SQL Injection Vulnerability in Google Lab Database System Very Big & Critical Vulnerability detected in Google Lab System. Vendor is already reported by hackers, But they don't take positive step in this case, so finally hackers exposed the vulnerability in public by Bangladesh Cyber Army Admin -...

TDSS rootkit infects 1.5 million US computers

TDSS rootkit infects 1.5 million US computers Millions of PCs around the world infected by the dangerous TDSS 'super-malware' rootkit as part of a campaign to build a giant new botnet. The report is presented by researchers from security firm Kaspersky Lab. TDSS also known as 'TDL' and sometimes ...

TDSS rootkit infects 1.5 million US computers

TDSS rootkit infects 1.5 million US computers Millions of PCs around the world infected by the dangerous TDSS 'super-malware' rootkit as part of a campaign to build a giant new botnet. The report is presented by researchers from security firm Kaspersky Lab. TDSS also known as 'TDL' and sometimes ...

IW Newsletter v3.5 - Remote SQL Injection Vulnerability

Document Title: =============== IW Newsletter v3.5 - Remote SQL Injection Vulnerability Release Date: ============= 2011-06-29 Vulnerability Laboratory ID VL-ID: ==================================== 210 Product & Service Introduction: =============================== Interamente sviluppato in ASP,...

CartStore eCommerce v2.2.x - Multiple XSS Vulnerabilities

Document Title: =============== CartStore eCommerce v2.2.x - Multiple XSS Vulnerabilities Release Date: ============= 2011-06-27 Vulnerability Laboratory ID VL-ID: ==================================== 133 Product & Service Introduction: =============================== CartStore is a sophisticated...