SilverStripe CMS 3.0.2 Multiple Vulnerabilities

SilverStripe version 3.0.2 suffers from cross site request forgery and cross site scripting vulnerabilities. Product. SilverStripe CMS Platform. Windows Affected versions. 3.0.2 Severity Rating. Medium Impact. Privilege escalation, cross-site scripting Attack Vector. From remote with authenticati...

Security in a serious way [THN] - eZine Issue 014

Document Title: =============== Security in a serious way THN - eZine Issue 014 References: =========== Download: http://www.vulnerability-lab.com/resources/documents/780.pdf Original: magazine.hackinthebox.org/issues/THN-September2012.pdf Release Date: ============= 2012-11-26 Vulnerability...

SonicWALL CDP 5040 6.x Cross Site Scripting

Title: ====== SonicWALL CDP 5040 v6.x - Multiple Web Vulnerabilities Date: ===== 2012-11-19 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=549 VL-ID: ===== 549 Common Vulnerability Scoring System: ==================================== 3.5 Introduction: =============...

iDev Rentals 1.0 Cross Site Scripting

Title: ====== iDev Rentals v1.0 - Multiple Web Vulnerabilities Date: ===== 2012-11-14 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=760 VL-ID: ===== 758 Common Vulnerability Scoring System: ==================================== 3.5 Introduction: =============...

Parallels Plesk v11.0.9b - Multiple Web Vulnerabilities

Document Title: =============== Parallels Plesk v11.0.9b - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=714 Reward: 3000$ Release Date: ============= 2012-11-01 Vulnerability Laboratory ID VL-ID:...

Parallels Plesk v11.0.9b - Multiple Web Vulnerabilities

Document Title: =============== Parallels Plesk v11.0.9b - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=714 Reward: 3000$ Release Date: ============= 2012-11-01 Vulnerability Laboratory ID VL-ID:...

Several Vulnerabilities in extension Formhandler (formhandler)

It has been discovered that the extension Formhandler formhandler is vulnerable to SQL-Injection and Cross-Site Scripting. Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 1.4.0 and below Vulnerability Types: SQL...

Switchvox Asterisk 5.1.2 Cross Site Scripting

Title: ====== Switchvox Asterisk v5.1.2 - Multiple Web Vulnerabilities Date: ===== 2012-09-10 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=700 VL-ID: ===== 700 Common Vulnerability Scoring System: ==================================== 4.1 Introduction: =============...

SonicWALL email security 7.3.5 - Multiple Vulnerabilities

SonicWALL email security 7.3.5 - Multiple Vulnerabilities Title: ====== SonicWALL EMail Security 7.3.5 - Multiple Vulnerabilities Date: ===== 2012-08-14 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=543 VL-ID: ===== 543 Common Vulnerability Scoring System:...

SonicWALL EMail Security 7.3.5 Cross Site Scripting

Title: ====== SonicWALL EMail Security 7.3.5 - Multiple Vulnerabilities Date: ===== 2012-08-14 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=543 VL-ID: ===== 543 Common Vulnerability Scoring System: ==================================== 3.5 Introduction: =============...

Barracuda Web Filter 910 5.0.015 Cross Site Scripting

Title: ====== Barracuda Web Filter 910 5.0.015 - Multiple Vulnerabilities Date: ===== 2012-08-02 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=570 Barracuda Networks Security ID: BNSEC-279/BNYF-5533 VL-ID: ===== 570 Common Vulnerability Scoring System:...

Parallels Plesk v11.0.9 - Multiple Web Vulnerabilities

Document Title: =============== Parallels Plesk v11.0.9 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=699 Release Date: ============= 2012-08-31 Vulnerability Laboratory ID VL-ID: ==================================== 699...

SonicWall UTM ES WAF - Input Filter Bypass Vulnerability

Document Title: =============== SonicWall UTM ES WAF - Input Filter Bypass Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=683 Download: http://www.vulnerability-lab.com/resources/videos/683.wmv View: http://www.youtube.com/watch?v=VQGlReh4VB0 Advisory1:...

SonicWall UTM ES WAF - Input Filter Bypass Vulnerability

Document Title: =============== SonicWall UTM ES WAF - Input Filter Bypass Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=683 Download: http://www.vulnerability-lab.com/resources/videos/683.wmv View: http://www.youtube.com/watch?v=VQGlReh4VB0 Advisory1:...

Social Engine 4.2.5 - Multiple Vulnerabilities

Title: ====== Social Engine v4.2.5 - Multiple Web Vulnerabilities Date: ===== 2012-07-31 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=672 VL-ID: ===== 672 Common Vulnerability Scoring System: ==================================== 3 Abstract: ========= A Laboratory...

Inout Mobile Webmail APP - Multiple Web Vulnerabilities

Title: ====== Inout Mobile Webmail APP - Multiple Web Vulnerabilities Date: ===== 2012-06-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=609 VL-ID: ===== 609 Common Vulnerability Scoring System: ==================================== 3.5 Abstract: ========= The...

Inout Mobile Webmail APP - Persistent Cross-Site Scripting

Inout Mobile Webmail APP - Persistent Cross-Site Scripting Title: ====== Inout Mobile Webmail APP - Multiple Web Vulnerabilities Date: ===== 2012-06-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=609 VL-ID: ===== 609 Common Vulnerability Scoring System:...

Kaspersky Password Manager - Filter Bypass Vulnerability

Document Title: =============== Kaspersky Password Manager - Filter Bypass Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=674 Download: http://www.vulnerability-lab.com/resources/videos/674.wmv View: http://www.youtube.com/watch?v=8D86ic9opYE Advisory:...

[PT-2012-23] SQL Injection in Dr.Web Anti-virus

----------------------------------------------------------------------------- PT-2012-23 Positive Technologies Security Advisory SQL Injection in Dr.Web Anti-virus ----------------------------------------------------------------------------- --- Vulnerable software Dr.Web Anti-virus Version: 7.00...

Barracuda Appliances - Validation Filter Bypass Vulnerability

Document Title: =============== Barracuda Appliances - Validation Filter Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=661 Release Date: ============= 2012-07-15 Vulnerability Laboratory ID VL-ID: ==================================...