PHPIDS 0.6.5 Path Disclosure / Information Leakage

Hello list! I want to warn you about Full path disclosure and Information Leakage vulnerabilities in PHPIDS. ------------------------- Affected products: ------------------------- Vulnerable are PHPIDS 0.6.5 and previous versions. ---------- Details: ---------- Full path disclosure WASC-13:...

PrestaShop 1.3.6 Path Disclosure

Vulnerability ID: HTB22837 Reference: http://www.htbridge.ch/advisory/pathdisclosureinprestashop.html Product: PrestaShop Vendor: PrestaShop http://www.prestashop.com/ Vulnerable Version: Prestashop 1.3.6 final Vendor Notification: 17 February 2011 Vulnerability Type: Path disclosure Risk level:...

Fedora 15 : phpMyAdmin-3.3.9.2-1.fc15 (2011-1282)

Changes for 3.3.9.1 2011-02-08 - security Path disclosure, see PMASA-2011-1 - http://www.phpmyadmin.net/homepage/security/PMASA-201 1-1.php Changes for 3.3.9.2 2011-02-11 - security SQL injection, see PMASA-2011-2 - http://www.phpmyadmin.net/homepage/security/PMASA-201 1-2.php Note that Tenable...

HTB22837: Path disclosure in PrestaShop

Vulnerability ID: HTB22837 Reference: http://www.htbridge.ch/advisory/pathdisclosureinprestashop.html Product: PrestaShop Vendor: PrestaShop http://www.prestashop.com/ Vulnerable Version: Prestashop 1.3.6 final Vendor Notification: 17 February 2011 Vulnerability Type: Path disclosure Risk level:...

Tribiq CMS 5.2.7b Path Disclosure

Vulnerability ID: HTB22857 Reference: http://www.htbridge.ch/advisory/fullpathdisclosureintribiqcms.html Product: Tribiq CMS Vendor: Tribal Limited http://tribiq.com/ Vulnerable Version: 5.2.7b and probably prior versions Vendor Notification: 17 February 2011 Vulnerability Type: Path disclosure...

HTB22857: Path disclosure in Tribiq CMS

Vulnerability ID: HTB22857 Reference: http://www.htbridge.ch/advisory/fullpathdisclosureintribiqcms.html Product: Tribiq CMS Vendor: Tribal Limited http://tribiq.com/ Vulnerable Version: 5.2.7b and probably prior versions Vendor Notification: 17 February 2011 Vulnerability Type: Path disclosure...

Уязвимости в PHPIDS

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Full path disclosure и Information Leakage уязвимостях в PHPIDS. Full path disclosure WASC-13: http://site/script.php?p=’ При отправке "атакующего" запроса такого как с одиночной кавычкой к любому php-скрипту на сайте с PHPIDS выводится полный пут...

Bitweaver 2.8.0 - Multiple Vulnerabilities

exploit title: Path Disclosure bitweaver 2.8 date: 25.o2.2o11 author: lemlajt software : bitweaver version: 2.8 tested on: linux cve : Path Disclosure bitweaver 2.8 PoC : http://localhost/www/cmsadmins/bitweaver2.8.1/bitweaver/kernel/admin/index.php?page=%27 sql injection in bitweaver 2.8 PoC : 1...

Bitweaver 2.8.0 - Multiple Vulnerabilities

Bitweaver 2.8.0 - Multiple Vulnerabilities exploit title: Path Disclosure bitweaver 2.8 date: 25.o2.2o11 author: lemlajt software : bitweaver version: 2.8 tested on: linux cve : Path Disclosure bitweaver 2.8 PoC :...

Bitweaver 2.8.1 Cross Site Scripting / SQL Injection

exploit title: Path Disclosure bitweaver 2.8 date: 25.o2.2o11 author: lemlajt software : bitweaver version: 2.8 tested on: linux cve : Path Disclosure bitweaver 2.8 PoC : http://localhost/www/cmsadmins/bitweaver2.8.1/bitweaver/kernel/admin/index.php?page=%27 sql injection in bitweaver 2.8 PoC : 1...

Mingle Forum WordPress Plugin 1.0.28 Cross Site Scripting / Path Disclosure

================================== Vulnerability ID: HTB22849 Reference: http://www.htbridge.ch/advisory/pathdisclosureinmingleforumwordpressplugin.html Product: Mingle Forum wordpress plugin Vendor: Cartpauj http://cartpauj.com/ Vulnerable Version: 1.0.28 Vendor Notification: 15 February 2011...

NextGEN Gallery WordPress Plugin 1.7.3 Path Disclosure

Vulnerability ID: HTB22862 Reference: http://www.htbridge.ch/advisory/pathdisclosureinnextgengallerywordpressplugin.html Product: NextGEN Gallery wordpress plugin Vendor: Alex Rabe http://alexrabe.de/ Vulnerable Version: 1.7.3 Vendor Notification: 15 February 2011 Vulnerability Type: Path...

Fedora 13 : phpMyAdmin-3.3.9.2-1.fc13 (2011-1373)

Changes for 3.3.9.1 2011-02-08 - security Path disclosure, see PMASA-2011-1 - http://www.phpmyadmin.net/homepage/security/PMASA-201 1-1.php Changes for 3.3.9.2 2011-02-11 - security SQL injection, see PMASA-2011-2 - http://www.phpmyadmin.net/homepage/security/PMASA-201 1-2.php Note that Tenable...

HTB22862: Path disclosure in NextGEN Gallery wordpress plugin

Vulnerability ID: HTB22862 Reference: http://www.htbridge.ch/advisory/pathdisclosureinnextgengallerywordpressplugin.html Product: NextGEN Gallery wordpress plugin Vendor: Alex Rabe http://alexrabe.de/ Vulnerable Version: 1.7.3 Vendor Notification: 15 February 2011 Vulnerability Type: Path...

HTB22849: Path disclosure in Mingle Forum wordpress plugin

Vulnerability ID: HTB22849 Reference: http://www.htbridge.ch/advisory/pathdisclosureinmingleforumwordpressplugin.html Product: Mingle Forum wordpress plugin Vendor: Cartpauj http://cartpauj.com/ Vulnerable Version: 1.0.28 Vendor Notification: 15 February 2011 Vulnerability Type: Path disclosure...

Fedora 14 : phpMyAdmin-3.3.9.2-1.fc14 (2011-1408)

Changes for 3.3.9.1 2011-02-08 - security Path disclosure, see PMASA-2011-1 - http://www.phpmyadmin.net/homepage/security/PMASA-201 1-1.php Changes for 3.3.9.2 2011-02-11 - security SQL injection, see PMASA-2011-2 - http://www.phpmyadmin.net/homepage/security/PMASA-201 1-2.php Note that Tenable...

Уязвимости в phpMyAdmin

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Brute Force и Full path disclosure уязвимостях в phpMyAdmin. CVE id: CVE-2011-0986. Brute Force WASC-11: http://site/phpmyadmin/ В форме логина нет защиты от Brute Force атак. Full path disclosure WASC-13: http://site/phpmyadmin/readme.php если не...

Wordpress Plugin Comment Rating 2.9.23 Multiple Vulnerabilities

Exploit for php platform in category web applications ================================= Vulnerability ID: HTB22842 Reference: http://www.htbridge.ch/advisory/pathdisclosureincommentratingwordpressplugin.html Product: Comment Rating wordpress plugin Vendor: Bob King http://wealthynetizen.com/...

Multiple Vulnerabilities in Lazyest Gallery

High-Tech Bridge SA Security Research Lab has discovered vulnerabilities in Lazyest Gallery which could be exploited to perform cross-site scripting attacks and disclose potentially sensitive information. 1 Cross-site scripting XSS vulnerability in Lazyest Gallery The vulnerability exists due to...

WordPress Plugin Comment Rating 2.9.23 - Multiple Vulnerabilities

WordPress Plugin Comment Rating 2.9.23 - Multiple Vulnerabilities Source: http://packetstormsecurity.org/files/view/98660/commentrating-sqldisclose.txt ================================= Vulnerability ID: HTB22842 Reference:...