PHPFaber CMS 2.0.5 Cross Site Scripting

Author: prodigy Date found: 4/07/2010 Software: PHPFaber Content Management System Vendor: www.phpfaber.com version: 2.0.5 Vulnerability founded: Multiple XSS Vulnerabilities Risk: Medium Impact: Malicious attackers can run javascript code into the page to perform phising attacks and cookie...

Xlight FTP Server 3.5.5 Directory Traversal

Accensus Security Group Vulnerability Advisory L-03 Date: 7/5/2010 Vendor: http://www.xlightftpd.com/ Effected Software: Xlight FTP Server 3.5.5 Description of Vulnerability: The SFTP server contains several directory traversal vulnerabilities: get, ls, rm, rename, etc. For example get...

PortalApp 4.0 Cross Site Scripting

Vulnerability ID: HTB22443 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinportalapp2.html Product: PortalApp Vendor: Latek Vulnerable Version: 4.0 and Probably Prior Versions Vendor Notification: 14 June 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed, Vendor...

XSS vulnerability in ForumCMS

Vulnerability ID: HTB22428 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinforumcms.html Product: ForumCMS Vendor: Forum Web Design Vulnerable Version: Current at 08.06.2010 and Probably Prior Versions Vendor Notification: 10 June 2010 Vulnerability Type: XSS Cross Site Scripting...

ForumCMS 08.06.2010 Cross Site Scripting

Vulnerability ID: HTB22428 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinforumcms.html Product: ForumCMS Vendor: Forum Web Design Vulnerable Version: Current at 08.06.2010 and Probably Prior Versions Vendor Notification: 10 June 2010 Vulnerability Type: XSS Cross Site Scripting...

freeForum <= 1.8.1 Sql Injection Admin Login ByPass

Exploit for php platform in category web applications =================================================== freeForum = 1.8.1 Sql Injection Admin Login ByPass ===================================================...

synType CMS Cross Site Scripting

Vulnerability ID: HTB22417 Reference: http://www.htbridge.ch/advisory/storedxssvulnerabilityinsyntypecmscommenttextfield.html Product: synType CMS Vendor: MindArray GbR Vulnerable Version: V.0.12.2 and Probably Prior Versions Vendor Notification: 03 June 2010 Vulnerability Type: Stored XSS Cross...

Interscan Web Security 5.0 - Arbitrary File Upload / Privilege Escalation

Advisory Name: Local Privilege Escalation in InterScan Web Security Virtual Apliance 5.0 Internal Cybsec Advisory Id: 2010-0604 Vulnerability Class: Local Privilege Escalation Release Date: 22-06-2010 Affected Applications: InterScan Web Security Virtual Aplliance 5.0. Other versions may be...

SQL injection vulnerability in MODx CMS

Vulnerability ID: HTB22414 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinmodxcms.html Product: MODx CMS and Application Framework Vendor: MODx Vulnerable Version: 1.0.3 and Probably Prior Versions Vendor Notification: 28 May 2010 Vulnerability Type: SQL Injection Status: N...

KF Web Server 3.2.0 Remote Contents Change

Securitylab.ir Application Info: Name: KF Web Server Version: 3.2.0 Download: http://keyfocus.net/kfws/download/kfws32.exe Vulnerability Info: Type: Remote Contents Change Risk: Medium Vulnerability: http://127.0.0.1:9727/index.wkf?opmenu=1 http://127.0.0.1:9727/index.wkf?opmenu=2 Edit general...

KF Web Server v3.2.0 Remote Contents Change Vulnerability

No description provided by source. Securitylab.ir Application Info: Name: KF Web Server Version: 3.2.0 Download: http://keyfocus.net/kfws/download/kfws32.exe Vulnerability Info: Type: Remote Contents Change Risk: Medium Vulnerability: http://127.0.0.1:9727/index.wkf?opmenu=1...

Parallels System Automation (PSA) Local File Inclusion

No description provided by source. Application Info: Name: Parallels System Automation PSA Vendor: http://Parallels.com Vulnerability Info: Type: Local File Inclusion Risk: Medium Vulnerability:...

Parallels System Automation (PSA) Local File Inclusion

Application Info: Name: Parallels System Automation PSA Vendor: http://Parallels.com Vulnerability Info: Type: Local File Inclusion Risk: Medium Vulnerability: https://www.cp.site.com/servlet/Help?systemid=pem&booktype=login&helpid=changepassword&locale=/../../../../../../etc/passwd%00 Discoverd...

Parallels System Automation (PSA) - Local File Inclusion

Application Info: Name: Parallels System Automation PSA Vendor: http://Parallels.com Vulnerability Info: Type: Local File Inclusion Risk: Medium Vulnerability: https://cp.site.com/servlet/Help?systemid=pem&booktype=login&helpid=changepassword&locale=/../../../../../../etc/passwd%00 Discoverd By:...

Parallels System Automation (PSA) - Local File Inclusion

Parallels System Automation PSA - Local File Inclusion Application Info: Name: Parallels System Automation PSA Vendor: http://Parallels.com Vulnerability Info: Type: Local File Inclusion Risk: Medium Vulnerability:...

CuteSITE CMS 1.5.0 SQL Injection

Vulnerability ID: HTB22396 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityincutesitecms.html Product: CuteSITE CMS Vendor: AMT Company Vulnerable Version: 1.5.0 and Probably Prior Versions Vendor Notification: 20 May 2010 Vulnerability Type: SQL Injection Status: Not Fixed,...

boastMachine 3.1 Cross Site Scripting

Vulnerability ID: HTB22399 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinboastmachine.html Product: boastMachine Vendor: Kailash Nadh Vulnerable Version: 3.1 and Probably Prior Versions Vendor Notification: 20 May 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed,...

Phreebooks 2.0 - Directory Traversal

Phreebooks 2.0 - Directory Traversal Advisory Name: Directory Traversal in Phreebooks v2.0 Internal Cybsec Advisory Id: Vulnerability Class: Directory Traversal Release Date: 2010-05-26 Affected Applications: Phreebooks v2.0 Affected Platforms: Any running Phreebooks v2.0 Local / Remote: Remote...

Phreebooks 2.0 - Multiple Persistent Cross-Site Scripting Vulnerabilities

Phreebooks 2.0 - Multiple Persistent Cross-Site Scripting Vulnerabilities Advisory Name: Multiple Permanent Cross-site Scripting in Phreebooks v2.0 Internal Cybsec Advisory Id: Vulnerability Class: Permanent Cross-site Scripting Release Date: 2010-05-26 Affected Applications: Phreebooks v2.0...

XSS vulnerability in boastMachine

Vulnerability ID: HTB22399 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinboastmachine.html Product: boastMachine Vendor: Kailash Nadh Vulnerable Version: 3.1 and Probably Prior Versions Vendor Notification: 20 May 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed,...