WP-Ajax-Recent-Posts 1.0.1 Cross Site Scripting

Vulnerability ID: HTB22951 Reference: http://www.htbridge.ch/advisory/xssinwpajaxrecentpostswordpressplugin.html Product: WP-Ajax-Recent-Posts wordpress plugin Vendor: QiQiBoY http://www.qiqiboy.com/ Vulnerable Version: 1.0.1 Vendor Notification: 12 April 2011 Vulnerability Type: XSS Cross Site...

CA20110426-01: Security Notice for CA Arcot WebFort Versatile Authentication Server

-----BEGIN PGP SIGNED MESSAGE----- CA20110426-01: Security Notice for CA Arcot WebFort Versatile Authentication Server Issued: April 26, 2011 CA Technologies support is alerting customers to multiple security risks with CA Arcot WebFort Versatile Authentication Server. Two vulnerabilities exist...

phpList 2.10.13 Cross Site Request Forgery / Cross Site Scripting

============================== Vulnerability ID: HTB22956 Reference: http://www.htbridge.ch/advisory/xssvulnerabilitiesinphplist.html Product: phpList Vendor: Tincan Ltd http://www.phplist.com/ Vulnerable Version: 2.10.13 and probably prior versions Vendor Notification: 12 April 2011 Vulnerabilit...

dalbum 1.43 - Multiple Vulnerabilities

dalbum 1.43 - Multiple Vulnerabilities =============================== Vulnerability ID: HTB22941 Reference: http://www.htbridge.ch/advisory/csrfcrosssiterequestforgeryindalbum.html Product: Dalbum Vendor: http://www.dalbum.org/ http://www.dalbum.org/ Vulnerable Version: 1.43 Vendor Notification:...

HTB22930: Multiple XSS in WebCalendar

Vulnerability ID: HTB22930 Reference: http://www.htbridge.ch/advisory/xssinwebcalendar.html Product: WebCalendar Vendor: k5n.us http://www.k5n.us/ Vulnerable Version: 1.2.3 Vendor Notification: 29 March 2011 Vulnerability Type: XSS Cross Site Scripting Risk level: Medium Credit: High-Tech Bridge ...

WebCalendar 1.2.3 Cross Site Scripting

Vulnerability ID: HTB22930 Reference: http://www.htbridge.ch/advisory/xssinwebcalendar.html Product: WebCalendar Vendor: k5n.us http://www.k5n.us/ Vulnerable Version: 1.2.3 Vendor Notification: 29 March 2011 Vulnerability Type: XSS Cross Site Scripting Risk level: Medium Credit: High-Tech Bridge ...

Viscacha 0.8.1 Multiple Vulnerabilities

Exploit for php platform in category web applications Product: Viscacha Vendor: MaMo Net http://www.viscacha.org Vulnerable Version: 0.8.1 Vendor Notification: 24 March 2011 Vulnerability Type: SQL Injection Risk level: High Credit: High-Tech Bridge SA - Ethical Hacking & Penetration Testing...

Solaris 8 (x86) : 110663-26

SunOS 5.8x86: ksh patch. Date this patch was last updated by Sun : Apr/06/11 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

viscacha 0.8.1 - Multiple Vulnerabilities

Vulnerability ID: HTB22921 Reference: http://www.htbridge.ch/advisory/sqlinjectioninviscacha.html Product: Viscacha Vendor: MaMo Net http://www.viscacha.org Vulnerable Version: 0.8.1 Vendor Notification: 24 March 2011 Vulnerability Type: SQL Injection Risk level: High Credit: High-Tech Bridge SA ...

Eleanor CMS rc5 Cross Site Scripting / SQL Injection

================================= Vulnerability ID: HTB22912 Reference: http://www.htbridge.ch/advisory/multiplesqlinjectionsineleanorcms.html Product: Eleanor CMS Vendor: Eleanor CMS http://eleanor-cms.ru/ Vulnerable Version: rc5 Vendor Notification: 22 March 2011 Vulnerability Type: SQL Injecti...

HTB22914: Local File Inclusion in UseBB

Vulnerability ID: HTB22914 Reference: http://www.htbridge.ch/advisory/localfileinclusioninusebb.html Product: UseBB Vendor: UseBB http://www.usebb.net/ Vulnerable Version: 1.0.11 Vendor Notification: 22 March 2011 Vulnerability Type: Local File Inclusion Risk level: Medium Credit: High-Tech Bridg...

InTerra Blog Machine 1.84 XSS Vulnerability

Exploit for php platform in category web applications Product: InTerra Blog Machine Vendor: InTerra Blog Machine Team http://code.google.com/p/interra/ Vulnerable Version: 1.84 and probably prior versions Vendor Notification: 31 March 2011 Vulnerability Type: Stored XSS Cross Site Scripting Risk...

InTerra Blog Machine 1.84 - Cross-Site Scripting

Vulnerability ID: HTB22931 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityininterrablogmachin e.html Product: InTerra Blog Machine Vendor: InTerra Blog Machine Team http://code.google.com/p/interra/ Vulnerable Version: 1.84 and probably prior versions Vendor Notification: 31 March 201...

SyndeoCMS 2.8.02 - Multiple Vulnerabilities (2)

SyndeoCMS 2.8.02 - Multiple Vulnerabilities 2 Vulnerability ID: HTB22901 Reference: http://www.htbridge.ch/advisory/sqlinjectioninsyndeocms.html Product: SyndeoCMS Vendor: http://www.syndeocms.org/ http://www.syndeocms.org/ Vulnerable Version: 2.8.02 Vendor Notification: 10 March 2011 Vulnerabili...

HTB22891: XSS in Rating-Widget wordpress plugin

Vulnerability ID: HTB22891 Reference: http://www.htbridge.ch/advisory/xssinratingwidgetwordpressplugin2.html Product: Rating-Widget wordpress plugin Vendor: Vova Feldman http://rating-widget.com/ Vulnerable Version: 1.3.1 Vendor Notification: 03 March 2011 Vulnerability Type: XSS Cross Site...

HTB22889: XSS in Rating-Widget wordpress plugin

Vulnerability ID: HTB22889 Reference: http://www.htbridge.ch/advisory/xssinratingwidgetwordpressplugin.html Product: Rating-Widget wordpress plugin Vendor: Vova Feldman http://rating-widget.com/ Vulnerable Version: 1.3.1 Vendor Notification: 03 March 2011 Vulnerability Type: XSS Cross Site...

HTB22868: XSS in 1 Flash Gallery wordpress plugin

Vulnerability ID: HTB22868 Reference: http://www.htbridge.ch/advisory/xssin1flashgallerywordpressplugin.html Product: 1 Flash Gallery wordpress plugin Vendor: 1plugin.com http://1plugin.com/ Vulnerable Version: 0.2.5 Vendor Notification: 22 February 2011 Vulnerability Type: XSS Cross Site Scripti...

RuubikCMS Version 1.0.3 Multiple Vulnerabilities

Exploit for php platform in category web applications ---------------------------------------------------------------- WebApplication : RuubikCMS Version 1.0.3 Type of vunlnerability : CSRF Change Admin Password And XSS Risk of use : Medium...

recordpress 0.3.1 - Multiple Vulnerabilities

---------------------------------------------------------------- WebApplication : RecordPress 0.3.1 Type of vunlnerability : CSRF Change Admin Password And XSS Risk of use : Medium ---------------------------------------------------------------- Producer Website : http://www.recordpress.org/...

Ruubikcms 1.0.3 - Multiple Vulnerabilities

Ruubikcms 1.0.3 - Multiple Vulnerabilities ---------------------------------------------------------------- WebApplication : RuubikCMS Version 1.0.3 Type of vunlnerability : CSRF Change Admin Password And XSS Risk of use : Medium ----------------------------------------------------------------...