Acuity CMS 2.6.x (ASP) XSS vuln.

Acuity CMS 2.6.x ASP XSS vuln. Vuln. discovered by : r0t Date: 17 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/acuity-cms-26x-asp-xss-vuln.html vendor:http://www.acuitycms.com/ affected version:2.6.2 Product Description: Acuity CMS is a highly affordable, very easy to use conten...

Amaxus vuln.

Amaxus vuln. Vuln. discovered by : r0t Date: 17 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/amaxus-vuln.html vendor:http://www.boxuk.com/ affected version: 3 and prior About Amaxus Amaxus is Box UK's XML Content Management System, currently delivering hundreds of thousands of...

EPiX™ Search query XSS vuln.

EPiX™ Search query XSS vuln. Vuln. discovered by : r0t Date: 17 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/epix-search-query-xss-vuln.html vendor:http://www.go-epix.net/ affected version:3.1.2 and prior Product Description: EPIX is a low cost portal solution with CMS...

AtlantForum XSS vuln.

AtlantForum XSS vuln. Vuln. discovered by : r0t Date: 15 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/atlantforum-xss-vuln.html vendor:www.atlantpro.com/atlfm.html affected version:4.02 and prior, also AtlantForum Lite and AtlantForum Pro can have same vuln. Product Description:...

paFileDB Extreme Edition SQL inj

paFileDB Extreme Edition SQL inj Vuln. discovered by : r0t Date: 16 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/pafiledb-extreme-edition-sql-inj.html vendor:http://pafiledb.byethost15.com/ affected version:RC 5 and prior Product Description: The core of this script is based on...

DCForum XSS vuln.

DCForum XSS vuln. Vuln. discovered by : r0t Date: 15 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/dcforum-xss-vuln.html vendor:www.dcscripts.com/dcforum.shtml affected version: 6.25 and prior Product Description: DCForum a complete bulletin board system from DCScripts. Its main...

Link Up Gold vuln.

Link Up Gold vuln. Vuln. dicovered by : r0t Date: 13 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/link-up-gold-vuln.html vendor:http://www.phpwebscripts.com/linkupgold/ affected version:2.5 and prior Product Description: An unique script for running your own linksite/search...

DreamPoll SQL inj.

DreamPoll SQL inj. Vuln. dicovered by : r0t Date: 14 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/dreampoll-sql-inj.html vendor:http://dreamlevels.com/dreampoll.php affected version: 3.0 final and prior Product Description: DreamPoll is an enhanced version of Advanced Poll Build...

WikkaWiki XSS vuln.

WikkaWiki XSS vuln. Vuln. dicovered by : r0t Date: 14 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/wikkawiki-xss-vuln.html vendor:http://wikka.jsnx.com/ affected version:1.1.6.0 and prior Product Description: WikkaWiki is a lightweight and flexible wiki engine allowing easy...

PhpWebGallery multiple SQL inj.

PhpWebGallery multiple SQL inj. Vuln. dicovered by : r0t Date: 13 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/phpwebgallery-multiple-sql-inj.html vendor:http://www.phpwebgallery.net/ affected version: 1.5.1 and prior Product Description: PhpWebGallery is a image gallery with a...

PHP JackKnife XSS vuln.

PHP JackKnife XSS vuln. Vuln. dicovered by : r0t Date: 13 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/php-jackknife-xss-vuln.html vendor:http://www.phpjk.com/ affected version: 2.21 and prior Product Description: PHP JackKnife is an easily set-up, fast, feature-rich photo galle...

Ideal BB.NET 1.3 XSS vuln

Ideal BB.NET 1.3 XSS vuln Vuln. dicovered by : r0t Date: 6 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/ideal-bbnet-13-xss-vuln.html vendor:www.idealscience.com/site/products/idealbb.net.aspx affected version: 1.3 and prior Product Description: It is a powerful bulletin board...

Magic List pro 2.5 SQL inj. vuln.

Magic List pro 2.5 SQL inj. vuln. Vuln. dicovered by : r0t Date: 6 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/magic-list-pro-25-sql-inj-vuln.html vendor:www.cfmagic.com/products/magiclistpro.cfm affected version:2.5 Product Description: Magic List Pro is our full-featured opt-...

1- Search XSS vuln.

1- Search XSS vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/1-search-xss-vuln.html vendor:http://www.1-script.com/1search/ affected version:1.80 and prior Product Description: An advanced site search script written with search engines...

Cars Portal v1.x SQL injection.

Cars Portal v1.x SQL injection. Vuln. dicovered by : r0t Date: 5 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/cars-portal-v1x-sql-injection.html vendor:http://software.getcar.biz/ affected version:v1.1 and prior Product Description: Cars Portal is a software solution for running...

Solupress News XSS vuln

Solupress News XSS vuln Vuln. dicovered by : r0t Date: 3 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/solupress-news-xss-vuln.html Vendor:http://www.inspironetworks.com/solupress/solupressnews.html affected version:1.0 and prior Product Description: Solupress News is a...

KBase Express SQL inj. vuln.

KBase Express SQL inj. vuln. Vuln. dicovered by : r0t Date: 29 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/kbase-express-sql-inj-vuln.html Vendor:http://www.sensationdesigns.com/products/scripts/kbaseexpress/ affected version: 1.0.0 and prior Product Description: KBase Express ...

88Script's Event Calendar v2.0 SQL inj. vuln.

88Script's Event Calendar v2.0 SQL inj. vuln. Vuln. dicovered by : r0t Date: 29 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/88scripts-event-calendar-v20-sql-inj.html Vendor:http://www.88scripts.com/ affected version: v2.0 and prior Product Description: A simple yet elegant even...

Google API Search XSS vuln.

Google API Search XSS vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/google-api-search-xss-vuln.html Vendor:http://www.wwwsearchsolutions.com/google.php affected version:v1.3.1 and prior Product Description: With this script you can be up an...

Geeklog 1.4.x Full Path Disclosure vuln.

Geeklog 1.4.x Full Path Disclosure vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/geeklog-14x-full-path-disclosure-vuln.html Vendor:http://www.geeklog.net/ affected version:1.4.0 Beta 1 and prior Product Description: Geeklog is a Web Portal...