XSS vulnerability in Ronny CMS

Vulnerability ID: HTB22622 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinronnycms.html Product: Ronny CMS Vendor: TO4KA Programming Team http://ronny-cms.ru/ Vulnerable Version: 1.1 r935 and probably prior versions Vendor Notification: 29 September 2010 Vulnerability Type: Stored X...

GetSimple CMS 2.01 Cross Site Scripting

Vulnerability ID: HTB22609 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityingetsimplecms1.html Product: GetSimple CMS Vendor: Cagintranet Networks http://get-simple.info/ Vulnerable Version: 2.01 and Probably Prior Versions Vendor Notification: 15 September 2010 Vulnerability Type:...

XSS vulnerability in GetSimple CMS

Vulnerability ID: HTB22609 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityingetsimplecms1.html Product: GetSimple CMS Vendor: Cagintranet Networks http://get-simple.info/ Vulnerable Version: 2.01 and Probably Prior Versions Vendor Notification: 15 September 2010 Vulnerability Type:...

Micro CMS v1.0 b1 Persistent XSS Vulnerability

Exploit for php platform in category web applications ============================================== Micro CMS v1.0 b1 Persistent XSS Vulnerability ============================================== Class: Persistent Cross-Site Scripting Severity: High Overview: --------- Micro CMS is prone to...

Achievo 1.4.3 - Multiple Authorisation Vulnerabilities

Achievo 1.4.3 - Multiple Authorisation Vulnerabilities Advisory Name: Multiple Authorization Flaws in Achievo 1.4.3 Internal Cybsec Advisory Id: 2010-08-02 Vulnerability Class: Authorization Flaw Release Date: 2010-Sept-28 Affected Applications: Achievo 1.4.3 other versions may be also vulnerable...

Achievo 1.4.3 - Cross-Site Request Forgery

Advisory Name: Cross Site Request Forgery in Achievo 1.4.3 Internal Cybsec Advisory Id: 2010-08-03 Vulnerability Class: Cross Site Request Forgery Release Date: 2010-Sept-28 Affected Applications: Achievo 1.4.3 other versions may be also vulnerable Affected Platforms: Any Local / Remote: Remote...

Achievo 1.4.3 - Multiple Authorisation Vulnerabilities

Advisory Name: Multiple Authorization Flaws in Achievo 1.4.3 Internal Cybsec Advisory Id: 2010-08-02 Vulnerability Class: Authorization Flaw Release Date: 2010-Sept-28 Affected Applications: Achievo 1.4.3 other versions may be also vulnerable Affected Platforms: Any Local / Remote: Remote Severit...

Achievo 1.4.3 - Cross-Site Request Forgery

Achievo 1.4.3 - Cross-Site Request Forgery Advisory Name: Cross Site Request Forgery in Achievo 1.4.3 Internal Cybsec Advisory Id: 2010-08-03 Vulnerability Class: Cross Site Request Forgery Release Date: 2010-Sept-28 Affected Applications: Achievo 1.4.3 other versions may be also vulnerable...

[DCA-00016 - Nokia E72 Keyboard Password bypass]

DCA-00016 - Nokia E72 Keyboard Password bypass Software/Hardware - Nokia E72 Vendor Product Description - Nokia E72 is a high-performance device tailor-made for seamless business and personal communication. Bug Description - The Nokia E72 keyboard lock have a delay to validate the password and on...

XSS vulnerability in AContent

Vulnerability ID: HTB22598 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinacontentcourse.html Product: AContent Vendor: Inclusive Design Institute http://www.atutor.ca/ Vulnerable Version: 1.0 Vendor Notification: 01 September 2010 Vulnerability Type: XSS Cross Site Scripting Status...

Deepin TFTP Server Directory Traversal Vulnerability

Software : Deepin TFTP Server Directory Traversal Vulnerability Software Version : v1.25 Vendor: Deepin.org Vulnerability Published : 2010-08-14 Vulnerability Update Time : Status : Impact : Medium Bug Description : Deepin TFTP Server does not properly sanitise filenames containing directory...

XSS vulnerability in Webmatic

Vulnerability ID: HTB22568 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinwebmatic.html Product: Webmatic Vendor: Valarsoft http://www.valarsoft.com/ Vulnerable Version: 3.0.5 and Probably Prior Versions Vendor Notification: 09 August 2010 Vulnerability Type: Stored XSS Cross Site...

Deepin TFTP Server 1.25 - Directory Traversal

Software : Deepin TFTP Server Directory Traversal Vulnerability Software Version : v1.25 Vendor: Deepin.org Vulnerability Published : 2010-08-14 Vulnerability Update Time : Status : Impact : Medium Bug Description : Deepin TFTP Server does not properly sanitise filenames containing directory...

Deepin TFTP Server 1.25 - Directory Traversal

Deepin TFTP Server 1.25 - Directory Traversal Software : Deepin TFTP Server Directory Traversal Vulnerability Software Version : v1.25 Vendor: Deepin.org Vulnerability Published : 2010-08-14 Vulnerability Update Time : Status : Impact : Medium Bug Description : Deepin TFTP Server does not properl...

TYPO3 Security Bulletin

It has been discovered that the extension phpMyAdmin phpmyadmin is vulnerable to Cross-Site Scripting. Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 4.8.1 and below Vulnerability Type: Cross-Site Scripting Severit...

CMSimple 3.3 Cross Site Request Forgery / Cross Site Scripting

==================================== Vulnerability ID: HTB22558 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincmsimple.html Product: CMSimple Vendor: Peter Andreas Harteg http://www.cmsimple.org/ Vulnerable Version: 3.3 and Probably Prior Versions Vendor Notification: 02 August 201...

XSS vulnerability in CMSimple

Vulnerability ID: HTB22558 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincmsimple.html Product: CMSimple Vendor: Peter Andreas Harteg http://www.cmsimple.org/ Vulnerable Version: 3.3 and Probably Prior Versions Vendor Notification: 02 August 2010 Vulnerability Type: XSS Cross Site...

Pimcore 1.1.0 Cross Site Scripting

Vulnerability ID: HTB22562 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinpimcore.html Product: pimcore Vendor: elements.at New Media Solutions GmbH. http://www.pimcore.org/ Vulnerable Version: 1.1.0 and Probably Prior Versions Vendor Notification: 02 August 2010 Vulnerability Type:...

XSS vulnerability in CMS Source

Vulnerability ID: HTB22548 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincmssource.html Product: CMS Source Vendor: Proud Daddy Web Design http://www.prouddaddy.net/ Vulnerable Version: Current at 28.07.2010 and Probably Prior Versions Vendor Notification: 28 July 2010 Vulnerabilit...

XSS vulnerability in eazyCMS

Vulnerability ID: HTB22553 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityineazycms.html Product: eazyCMS Vendor: eazycms.com http://eazycms.com/ Vulnerable Version: Current at 28.07.2010 and Probably Prior Versions Vendor Notification: 28 July 2010 Vulnerability Type: XSS Cross Site...