Fedora 14 : phpMyAdmin-3.3.9.2-1.fc14 (2011-1408)

Changes for 3.3.9.1 2011-02-08 - security Path disclosure, see PMASA-2011-1 - http://www.phpmyadmin.net/homepage/security/PMASA-201 1-1.php Changes for 3.3.9.2 2011-02-11 - security SQL injection, see PMASA-2011-2 - http://www.phpmyadmin.net/homepage/security/PMASA-201 1-2.php Note that Tenable...

Уязвимости в phpMyAdmin

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Brute Force и Full path disclosure уязвимостях в phpMyAdmin. CVE id: CVE-2011-0986. Brute Force WASC-11: http://site/phpmyadmin/ В форме логина нет защиты от Brute Force атак. Full path disclosure WASC-13: http://site/phpmyadmin/readme.php если не...

Wordpress Plugin Comment Rating 2.9.23 Multiple Vulnerabilities

Exploit for php platform in category web applications ================================= Vulnerability ID: HTB22842 Reference: http://www.htbridge.ch/advisory/pathdisclosureincommentratingwordpressplugin.html Product: Comment Rating wordpress plugin Vendor: Bob King http://wealthynetizen.com/...

Multiple Vulnerabilities in Lazyest Gallery

High-Tech Bridge SA Security Research Lab has discovered vulnerabilities in Lazyest Gallery which could be exploited to perform cross-site scripting attacks and disclose potentially sensitive information. 1 Cross-site scripting XSS vulnerability in Lazyest Gallery The vulnerability exists due to...

WordPress Plugin Comment Rating 2.9.23 - Multiple Vulnerabilities

WordPress Plugin Comment Rating 2.9.23 - Multiple Vulnerabilities Source: http://packetstormsecurity.org/files/view/98660/commentrating-sqldisclose.txt ================================= Vulnerability ID: HTB22842 Reference:...

WordPress Plugin Comment Rating 2.9.23 - Multiple Vulnerabilities

Source: http://packetstormsecurity.org/files/view/98660/commentrating-sqldisclose.txt ================================= Vulnerability ID: HTB22842 Reference: http://www.htbridge.ch/advisory/pathdisclosureincommentratingwordpressplugin.html Product: Comment Rating wordpress plugin Vendor: Bob King...

WordPress Comment Rating Plugin 2.9.23 - Multiple Vulnerabilities

There are several vulnerabilities in this plugin. First vulnerability type is path disclosure. The issue exists due to failure in the "/wp-content/plugins/comment-rating/comment-rating-options.php" script. There is possible to generate an error which will disclose the full path of the script. In...

HTB22840: Path disclosure in Starbox Voting wordpress plugin

Vulnerability ID: HTB22840 Reference: http://www.htbridge.ch/advisory/pathdisclosureinstarboxvotingwordpressplugin.html Product: Starbox Voting wordpress plugin Vendor: jigen.he http://www.sealedbox.cn/ Vulnerable Version: 2.0.4 Vendor Notification: 08 February 2011 Vulnerability Type: Path...

Starbox 2.0.4 Path Disclosure

Vulnerability ID: HTB22840 Reference: http://www.htbridge.ch/advisory/pathdisclosureinstarboxvotingwordpressplugin.html Product: Starbox Voting wordpress plugin Vendor: jigen.he http://www.sealedbox.cn/ Vulnerable Version: 2.0.4 Vendor Notification: 08 February 2011 Vulnerability Type: Path...

HTB22842: Path disclosure in Comment Rating wordpress plugin

Vulnerability ID: HTB22842 Reference: http://www.htbridge.ch/advisory/pathdisclosureincommentratingwordpressplugin.html Product: Comment Rating wordpress plugin Vendor: Bob King http://wealthynetizen.com/ Vulnerable Version: 2.9.23 Vendor Notification: 08 February 2011 Vulnerability Type: Path...

GD Star Rating 1.9.7 Cross Site Scripting / Path Disclosure

===================================== Vulnerability ID: HTB22843 Reference: http://www.htbridge.ch/advisory/pathdisclosureingdstarratingwordpressplugin.html Product: GD Star Rating wordpress plugin Vendor: Milan Petrovic http://www.gdstarrating.com/ Vulnerable Version: 1.9.7 Vendor Notification: ...

HTB22838: Path disclosure in Vote It Up wordpress plugin

Vulnerability ID: HTB22838 Reference: http://www.htbridge.ch/advisory/pathdisclosureinvoteitupwordpressplugin.html Product: Vote It Up wordpress plugin Vendor: Nicholas Kwan multippt http://www.onfry.com/ Vulnerable Version: 1.2.2 Vendor Notification: 08 February 2011 Vulnerability Type: Path...

HTB22843: Path disclosure in GD Star Rating wordpress plugin

Vulnerability ID: HTB22843 Reference: http://www.htbridge.ch/advisory/pathdisclosureingdstarratingwordpressplugin.html Product: GD Star Rating wordpress plugin Vendor: Milan Petrovic http://www.gdstarrating.com/ Vulnerable Version: 1.9.7 Vendor Notification: 08 February 2011 Vulnerability Type:...

Vote It Up 1.2.2 Path Disclosure

Vulnerability ID: HTB22838 Reference: http://www.htbridge.ch/advisory/pathdisclosureinvoteitupwordpressplugin.html Product: Vote It Up wordpress plugin Vendor: Nicholas Kwan multippt http://www.onfry.com/ Vulnerable Version: 1.2.2 Vendor Notification: 08 February 2011 Vulnerability Type: Path...

Comment Rating 2.9.23 Path Disclosure / SQL Injection

================================= Vulnerability ID: HTB22842 Reference: http://www.htbridge.ch/advisory/pathdisclosureincommentratingwordpressplugin.html Product: Comment Rating wordpress plugin Vendor: Bob King http://wealthynetizen.com/ Vulnerable Version: 2.9.23 Vendor Notification: 08 Februar...

FlatNux 2011-01.26 Denial Of Service / Path Disclosure

===================================== Vulnerability ID: HTB22835 Reference: http://www.htbridge.ch/advisory/dosdenialofserviceriskinflatnux.html Product: FlatNux Vendor: Alessandro Vernassa http://www.flatnux.altervista.org/ Vulnerable Version: flatnux-2011-01.26 and probably prior versions Vendo...

Coppermine 1.5.12 Path Disclosure

Vulnerability ID: HTB22836 Reference: http://www.htbridge.ch/advisory/pathdisclosureincoppermine.html Product: Coppermine Vendor: The Coppermine Dev Team http://coppermine-gallery.net/ Vulnerable Version: 1.5.12 and probably prior versions Vendor Notification: 03 February 2011 Vulnerability Type:...

Уязвимости в Drupal

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Full path disclosure и Insufficient Anti-automation уязвимостях в Drupal. Full path disclosure WASC-13: При POST запросе к странице с формой с использованием кириллического символа, выводится сообщение про ошибку, в котором выводится полный путь в...

HTB22834: Path disclosure in FlatnuX

Vulnerability ID: HTB22834 Reference: http://www.htbridge.ch/advisory/pathdisclosureinflatnux.html Product: FlatNux Vendor: Alessandro Vernassa http://www.flatnux.altervista.org/ Vulnerable Version: flatnux-2011-01.26 and probably prior versions Vendor Notification: 03 February 2011 Vulnerability...

HTB22836: Path disclosure in Coppermine

Vulnerability ID: HTB22836 Reference: http://www.htbridge.ch/advisory/pathdisclosureincoppermine.html Product: Coppermine Vendor: The Coppermine Dev Team http://coppermine-gallery.net/ Vulnerable Version: 1.5.12 and probably prior versions Vendor Notification: 03 February 2011 Vulnerability Type:...