4355 matches found
Plogger 1.0 RC1 Cross Site Scripting / Path Disclosure
================================ Vulnerability ID: HTB22926 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinplogger.html Product: Plogger Vendor: Plogger Team http://www.plogger.org/ Vulnerable Version: 1.0 RC1 Vendor Notification: 29 March 2011 Vulnerability Type: XSS Risk level:...
Уязвимости в теме The Gazette Edition для WordPress
Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting, Full path disclosure, Abuse of Functionality и Denial of Service уязвимостях в теме The Gazette Edition для WordPress. Это коммерческий шаблон для WP. XSS WASC-08:...
HTB22918: Path disclosure in phpCollab
Vulnerability ID: HTB22918 Reference: http://www.htbridge.ch/advisory/pathdisclosureinphpcollab.html Product: phpCollab Vendor: phpCollab Team http://www.php-collab.org/ Vulnerable Version: 2.5 and probably prior versions Vendor Notification: 24 March 2011 Vulnerability Type: Path disclosure Risk...
HTB22915: Path disclosure in Joomla
Vulnerability ID: HTB22915 Reference: http://www.htbridge.ch/advisory/pathdisclosureinjoomla.html Product: Joomla Vendor: http://www.joomla.org/ http://www.joomla.org/ Vulnerable Version: 1.6.1 Vendor Notification: 24 March 2011 Vulnerability Type: Path disclosure Risk level: Low Credit: High-Tec...
The Gazette Edition Cross Site Scripting
Hello list! I want to warn you about Cross-Site Scripting, Full path disclosure, Abuse of Functionality and Denial of Service vulnerabilities in The Gazette Edition theme for WordPress. It's commercial theme for WP by WooThemes. ------------------------- Affected products: -----------------------...
Уязвимости в теме Live Wire Edition для WordPress
Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting, Full path disclosure, Abuse of Functionality и Denial of Service уязвимостях в теме Live Wire Edition для WordPress. Это коммерческий шаблон для WP. XSS WASC-08:...
HTB22920: Path disclosure in Viscacha
Vulnerability ID: HTB22920 Reference: http://www.htbridge.ch/advisory/pathdisclosureinviscacha.html Product: Viscacha Vendor: MaMo Net http://www.viscacha.org Vulnerable Version: 0.8.1 Vendor Notification: 24 March 2011 Vulnerability Type: Path disclosure Risk level: Low Credit: High-Tech Bridge ...
Viscacha 0.8.1 Multiple Vulnerabilities
Exploit for php platform in category web applications Product: Viscacha Vendor: MaMo Net http://www.viscacha.org Vulnerable Version: 0.8.1 Vendor Notification: 24 March 2011 Vulnerability Type: SQL Injection Risk level: High Credit: High-Tech Bridge SA - Ethical Hacking & Penetration Testing...
viscacha 0.8.1 - Multiple Vulnerabilities
viscacha 0.8.1 - Multiple Vulnerabilities Vulnerability ID: HTB22921 Reference: http://www.htbridge.ch/advisory/sqlinjectioninviscacha.html Product: Viscacha Vendor: MaMo Net http://www.viscacha.org Vulnerable Version: 0.8.1 Vendor Notification: 24 March 2011 Vulnerability Type: SQL Injection Ris...
viscacha 0.8.1 - Multiple Vulnerabilities
Vulnerability ID: HTB22921 Reference: http://www.htbridge.ch/advisory/sqlinjectioninviscacha.html Product: Viscacha Vendor: MaMo Net http://www.viscacha.org Vulnerable Version: 0.8.1 Vendor Notification: 24 March 2011 Vulnerability Type: SQL Injection Risk level: High Credit: High-Tech Bridge SA ...
Live Wire 2.3.1 XSS / Disclosure / Denial Of Service
Hello list! I want to warn you about Cross-Site Scripting, Full path disclosure, Abuse of Functionality and Denial of Service vulnerabilities in Live Wire Edition theme for WordPress. It's commercial theme for WP by WooThemes. ------------------------- Affected products: -------------------------...
Viscacha 0.8.1 XSS / SQL Injection / Path Disclosure
================================== Vulnerability ID: HTB22921 Reference: http://www.htbridge.ch/advisory/sqlinjectioninviscacha.html Product: Viscacha Vendor: MaMo Net http://www.viscacha.org Vulnerable Version: 0.8.1 Vendor Notification: 24 March 2011 Vulnerability Type: SQL Injection Risk level...
Path Disclosure Weakness in 4images
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in 4images which could be exploited to disclose potentially sensitive information. 1 Path disclosure weakness in 4images The weakness is caused by incorrect handling of exceptions in includes/pageheader.php and...
Multiple Vulnerabilities in ZENphoto
High-Tech Bridge SA Security Research Lab has discovered vulnerabilities in ZENphoto which could be exploited to perform cross-site scripting attacks and disclose potentially sensitive information. 1 Cross-site scripting XSS vulnerability in ZENphoto The vulnerability exists due to input sanitati...
phpCollab 2.5 XSRF / XSS / Path Disclosure
================================= Vulnerability ID: HTB22918 Reference: http://www.htbridge.ch/advisory/pathdisclosureinphpcollab.html Product: phpCollab Vendor: phpCollab Team http://www.php-collab.org/ Vulnerable Version: 2.5 and probably prior versions Vendor Notification: 24 March 2011...
Joomla! 1.6 < 1.6.1 Multiple Vulnerabilities (deprecated)
Binary data 5878.prm...
HTB22909: Path disclosure in Tine 2.0
Vulnerability ID: HTB22909 Reference: http://www.htbridge.ch/advisory/pathdisclosureintine20.html Product: Tine 2.0 Vendor: Metaways Infosystems GmbH http://www.tine20.org/ Vulnerable Version: Neele 2011-01-2 Vendor Notification: 17 March 2011 Vulnerability Type: Path disclosure Status: Fixed by...
HTB22905: Path disclosure in Wordpress
Vulnerability ID: HTB22905 Reference: http://www.htbridge.ch/advisory/pathdisclosureinwordpress.html Product: Wordpress Vendor: http://wordpress.org/ http://wordpress.org/ Vulnerable Version: 3.1 Vendor Notification: 15 March 2011 Vulnerability Type: Path disclosure Status: Not Fixed Risk level:...
HTB22904: Path disclosure in bbPress
Vulnerability ID: HTB22904 Reference: http://www.htbridge.ch/advisory/pathdisclosureinbbpress.html Product: bbPress Vendor: http://bbpress.org http://bbpress.org Vulnerable Version: 1.0.3 Vendor Notification: 15 March 2011 Vulnerability Type: Path disclosure Risk level: Low Credit: High-Tech Brid...
Уязвимости в Artefact St. CMS
Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting, Brute Force и Full path disclosure уязвимостях в системе Artefact St. CMS. Это украинская коммерческая CMS. XSS WASC-08: http://site/search/?s=3Cscript3Ealertdocument.cookie3C/script3E Brute Force WASC-11: http://site/admin/...