Drupal Panels Module 6.x PHP Code Execution Vulnerability

A vulnerability has been reported in Panels module for Drupal, which can be exploited by malicious users to compromise a vulnerable system. Certain unspecified input is not properly sanitised before being used in the import functionality. This can be exploited to execute arbitrary PHP code...

XSS vulnerability in LiSK CMS

Vulnerability ID: HTB22372 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinproduct.html Product: LiSK CMS Vendor: Createch-group Vulnerable Version: 4.4 Vendor Notification: 05 May 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed, Vendor Alerted, Awaiting Vendor...

XSS vulnerability in NPDS REvolution

Vulnerability ID: HTB22365 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinnpdsrevolution.html Product: NPDS REvolution Vendor: NPDS Vulnerable Version: REvolution 10.02 and Probably Prior Versions Vendor Notification: 01 May 2010 Vulnerability Type: XSS Cross Site Scripting Status:...

XSS vulnerability in JComments, Joomla

Vulnerability ID: HTB22368 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinjcommentsjoomla.html Product: JComments Vendor: JoomlaTune .com Vulnerable Version: 2.1.0.0 07/08/2009 and Probably Prior Versions Vendor Notification: 04 May 2010 Vulnerability Type: XSS Cross Site Scripting...

SA-CONTRIB-2010-054 - Storm - Cross Site Scripting (XSS)

The Storm project provides a group of modules for project management and billing. The module displays data entered by users without sanitising it, allowing for a cross site scripting XSS attack that may lead to a malicious user gaining full administrative access. Versions affected Storm project f...

forum (topic_detail.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ==================================================== forum topicdetail.php SQL Injection Vulnerability ==================================================== !===========================================================================! forum/...

DynamiXgate Affiliate Store Builder Cross Site Scripting

Vulnerability ID: HTB22362 Reference: http://www.htbridge.ch/advisory/xssindynamixgate.html Product: DynamiXgate Affiliate Store Builder Vendor: DynamiXgate Team Vulnerable Version: Current version at 2010, April Vendor Notification: 27 April 2010 Vulnerability Type: XSS Cross Site Scripting...

XSS vulnerability in EasyPublish CMS

Vulnerability ID: HTB22358 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinadvancedpoll.html Product: Advanced Poll Vendor: Chi Kien Uong Vulnerable Version: 2.08 and Probably Prior Versions Vendor Notification: 23 April 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not...

XSS vulnerability in Advanced Poll

Vulnerability ID: HTB22358 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinadvancedpoll.html Product: Advanced Poll Vendor: Chi Kien Uong Vulnerable Version: 2.08 and Probably Prior Versions Vendor Notification: 23 April 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not...

XSS vulnerability in EasyPublish CMS

Vulnerability ID: HTB22356 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityineasypublishcms.html Product: EasyPublish CMS Vendor: Escio AS Vulnerable Version: Current at 23.04.2010 and Probably Prior Versions Vendor Notification: 23 April 2010 Vulnerability Type: XSS Cross Site Scripti...

XSS in DynamiXgate Affiliate Store Builder

Vulnerability ID: HTB22362 Reference: http://www.htbridge.ch/advisory/xssindynamixgate.html Product: DynamiXgate Affiliate Store Builder Vendor: DynamiXgate Team Vulnerable Version: Current version at 2010, April Vendor Notification: 27 April 2010 Vulnerability Type: XSS Cross Site Scripting...

Spaceacre SQL Injection

Spaceacre Multiple SQL Injection Vulnerability by Wiro Sablenk aka Gendenk vendor :http://www.spaceacre.com/ dork: "Designed by Spaceacre" poc: http://target/cat1.php?catID=SQL http://target/cat2.php?catID=SQL http://target/cat3.php?catID=SQL http://target/cat4.php?catID=SQL...

EasyPublish CMS Cross Site Scripting

Vulnerability ID: HTB22356 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityineasypublishcms.html Product: EasyPublish CMS Vendor: Escio AS Vulnerable Version: Current at 23.04.2010 and Probably Prior Versions Vendor Notification: 23 April 2010 Vulnerability Type: XSS Cross Site Scripti...

Multiple Vulnerabilities in LiSK CMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in LiSK CMS which could be exploited to perform cross-site scripting attacks and execute arbitrary SQL commands in applications database. 1 Cross-site scripting XSS vulnerability in LiSK CMS: CVE-2010-2013 The...

XSS in eliteCMS

Vulnerability ID: HTB22354 Reference: http://www.htbridge.ch/advisory/xssinelitecms.html Product: eliteCMS Vendor: Elite Graphix Vulnerable Version: 1.01 and Probably Prior Versions Vendor Notification: 18 April 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed, Vendor Alerted,...

The multi-mode Server-bug warning-the black bar safety net

Find the configuration file, read the web site directory under the config. asp config.php conn. asp inc directory find a high-privilege account and password For example: the root password SA password. // CH the following variables, according to the space provided of the account parameters to...

Drupal Privatemsg Module Security Bypass Security Issue

No description provided by source. A security issue has been reported in the Privatemsg module for Drupal, which can be exploited by malicious users to bypass certain security restrictions. The security issue exists due to improper access permission checks in the Email Notification...

XSS in Microsoft SharePoint Server 2007

Vulnerability ID: HTB22350 Reference: http://www.htbridge.ch/advisory/xssinmicrosoftsharepointserver2007.html Product: Microsoft SharePoint Server 2007 Vendor: Microsoft Corporation Vulnerable Version: 12.0.0.6421 and Probably Prior Versions Vendor Notification: 12 April 2010 Vulnerability Type:...

XSS vulnerability in Zikula Application Framework

Vulnerability ID: HTB22349 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinzikulaapplicationframework1.html Product: Zikula Application Framework Vendor: Zikula Software Foundation Vulnerable Version: 1.2.2 and Probably Prior Versions Vendor Notification: 13 April 2010 Vulnerability...

XSS vulnerability in Jaws

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Jaws which could be exploited to perform cross-site scripting XSS attacks. 1 Cross-site scripting vulnerability in Jaws The vulnerability exists due to input sanitation error in the "url" parameter in the "edit profile"...