[SA22211] WWWthreads "Cat" Cross-Site Scripting Vulnerabilities

TITLE: WWWthreads "Cat" Cross-Site Scripting Vulnerabilities SECUNIA ADVISORY ID: SA22211 VERIFY ADVISORY: http://secunia.com/advisories/22211/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: WWWthreads http://secunia.com/product/9471/ DESCRIPTION: Root3rH3ll has...

[SA21536] TikiWiki "highlight" Cross-Site Scripting Vulnerability

TITLE: TikiWiki "highlight" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA21536 VERIFY ADVISORY: http://secunia.com/advisories/21536/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: TikiWiki 1.x http://secunia.com/product/3356/ DESCRIPTION: Thomas...

barracudaExec.txt

Severity: High - Full system compromise possible Date: 04 August 2006 Discovered by: Matthew Hall [email protected] Credits for original discovery to Greg Sinclair Discovered on: 03 Aug 2006 Summary: Lack of input sanitisation in the Linux based Barracuda spam firewall web interface allows executio...

[MajorSecurity #23] BLOG:CMS <= 4.0.0j - XSS and cookie disclosure

MajorSecurity 23 BLOG:CMS = 4.0.0j - XSS and cookie disclosure ------------------------------------------------------------------- Software: BLOG:CMS Version: 4.0.0j Type: Cross site scripting Made public: July, 22th 2006 Vendor: F-ART AGENCY, Ltd. - Radek Hulбn Page: http://blogcms.com/ Credits:...

[MajorSecurity #25] Advanced Guestbook 2.4 for phpBB - Multiple XSS and SQL-Injection Vulnerabilities

MajorSecurity 25 Advanced Guestbook 2.4 for phpBB - Multiple XSS and SQL-Injection Vulnerabilities ---------------------------------------------------------------------------------------- Software: Advanced Guestbook for phpBB Version: 2.4 Type: Cross site scripting + SQL Injection Made public:...

ASP Stats Generator 2.1.1 - SQL Injection

ASP Stats Generator 2.1.1 - SQL Injection /------------------------------------------------ IHS Public advisory -------------------------------------------------/ ASP Stats Generator SQL-ASP injection - Code Excution ASP Stats Generator is a powerful website counter, completely written in ASP...

[SA20583] Cabacos Web CMS "suchtext" Parameter Cross-Site Scripting

---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...

[MajorSecurity #11]OpenCMS<= 6.2.1 - XSS

MajorSecurity 11OpenCMS= 6.2.1 - XSS ------------------------------------------ Software: OpenCMS Version: =6.2.1 Type: Cross site scripting Date: June, 10th 2006 Vendor: Alkacon Software GmbH Page: http://www.alkacon.com http://www.opencms.org/opencms/en/ Credits: ----------------------------...

FreeBSD : phpldapadmin -- XSS and Script Insertion vulnerabilities (6d78202e-e2f9-11da-8674-00123ffe8333)

Secunia reports : phpLDAPadmin have some vulnerabilities, which can be exploited by malicious users to conduct script insertion attacks and by malicious people to conduct cross-site scripting attacks. 1 Some input isn't properly sanitised before being returned to the user. This can be exploited t...

[SA20030] MultiCalendars "calsids" Parameter SQL Injection Vulnerability

TITLE: MultiCalendars "calsids" Parameter SQL Injection Vulnerability SECUNIA ADVISORY ID: SA20030 VERIFY ADVISORY: http://secunia.com/advisories/20030/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: MultiCalendars 3.x http://secunia.com/product/9842/...

albinator <= 2.0.8 Remote File Inclusion Vuln and XSS

albinator = 2.0.8 Remote File Inclusion Vuln and XSS Vuln. discovered by :VietMafia & r0t Pridels Sec Crew Date: 3 may 2006 vendor:http://www.albinator.com/ affected versions:2.8 and prior orginal advisory:http://pridels.blogspot.com/2006/05/albinator-208-remote-file-inclusion.html Vuln...

[SA19913] phpkb Knowledge Base "searchkeyword" Cross-Site Scripting

TITLE: phpkb Knowledge Base "searchkeyword" Cross-Site Scripting SECUNIA ADVISORY ID: SA19913 VERIFY ADVISORY: http://secunia.com/advisories/19913/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: phpkb Knowledge Base 1.x http://secunia.com/product/9697/...

CyberBuild vuln.

CyberBuild vuln. Vuln. discovered by : r0t Date: 1 may 2006 vendorlink:www.smartwin.com.au/cyberbuild.htm affected versions:last orginal advisory:http://pridels.blogspot.com/2006/05/cyberbuild-vuln.html Vuln. Description: 1. SQL injection. CyberOffice Warehouse Builder contains a flaw that allows...

Pinnacle Cart XSS

Pinnacle Cart XSS Vuln. discovered by : r0t Date: 30 april 2006 vendorlink:http://www.pinnaclecart.com/ affected versions:3.33 and prior orginal advisory:http://pridels.blogspot.com/2006/04/pinnacle-cart-xss.html Vuln. Description: Pinnacle Cart contains a flaw that allows a remote cross site...

RT: Request Tracker vuln.

RT: Request Tracker vuln. Vuln. discovered by : r0t Date: 30 april 2006 vendor:www.bestpractical.com/?rt=3.5.HEAD affected versions:RT 3.5.HEAD orginal advisory: http://pridels.blogspot.com/2006/04/rt-request-tracker-vuln.html Vuln. Description: RT contains a flaw that may lead to an unauthorized...

Kmail <=2.3 vuln.

Kmail =2.3 vuln. Vulnerability discovered by : r0t Date: 28 april 2006 vendorlink:www.webofall.com/displaynews.php?id=4 affected versions:2.3 and prior orginal advisory:http://pridels.blogspot.com/2006/04/kmail-23-vuln.html Vuln. Description: 1. Multiple Cross-Site Scripting attack vulnerabilitie...

Open WebMail <=2.51 XSS vuln.

Open WebMail =2.51 XSS vuln. Vulnerability discovered by : r0t Date: 27 april 2006 vendorlink:http://openwebmail.org/ affected versions:2.51 and prior orginal advisory: http://pridels.blogspot.com/2006/04/open-webmail-251-xss-vuln.html Vuln. Description: Open WebMail contains a flaw that allows a...

QuickEStore 7.9 vuln.

QuickEStore 7.9 vuln. Vuln. discovered by : r0t Date: 25 april 2006 vendorlink:www.quickestore.com affected versions:7.9 and previous orginal advisory:http://pridels.blogspot.com/2006/04/quickestore-79-vuln.html Vuln. Description: 1. SQL Injection vuln. QuickEStore contains a flaw that allows a...

[SA19723] @1 Table Publisher Script Insertion Vulnerability

TITLE: @1 Table Publisher Script Insertion Vulnerability SECUNIA ADVISORY ID: SA19723 VERIFY ADVISORY: http://secunia.com/advisories/19723/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: @1 Table Publisher http://secunia.com/product/9472/ DESCRIPTION: Jericho ha...

phpldapadmin -- Cross-Site Scripting and Script Insertion vulnerabilities

Secunia reports: phpLDAPadmin have some vulnerabilities, which can be exploited by malicious users to conduct script insertion attacks and by malicious people to conduct cross-site scripting attacks. 1 Some input isn't properly sanitised before being returned to the user. This can be exploited to...