[SA18923] Leif M. Wright's Blog Multiple Vulnerabilities

TITLE: Leif M. Wright's Blog Multiple Vulnerabilities SECUNIA ADVISORY ID: SA18923 VERIFY ADVISORY: http://secunia.com/advisories/18923/ CRITICAL: Highly critical IMPACT: Security Bypass, Cross Site Scripting, Exposure of sensitive information, System access WHERE: From remote SOFTWARE: Leif M...

[SA18805] DB_eSession "deleteSession()" Function SQL Injection

TITLE: DBeSession "deleteSession" Function SQL Injection SECUNIA ADVISORY ID: SA18805 VERIFY ADVISORY: http://secunia.com/advisories/18805/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: DBeSession 1.x http://secunia.com/product/8010/ DESCRIPTION: James...

[SA18759] Unknown Domain Shoutbox Two Vulnerabilities

TITLE: Unknown Domain Shoutbox Two Vulnerabilities SECUNIA ADVISORY ID: SA18759 VERIFY ADVISORY: http://secunia.com/advisories/18759/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: Unknown Domain Shoutbox 1.x...

[SA18683] SoftMaker Shop resultat.asp Cross-Site Scripting

TITLE: SoftMaker Shop resultat.asp Cross-Site Scripting SECUNIA ADVISORY ID: SA18683 VERIFY ADVISORY: http://secunia.com/advisories/18683/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: SoftMaker Shop http://secunia.com/product/7406/ DESCRIPTION: Preben Nylkken...

[SA18620] phpBB Rlink Module "url" Cross-Site Scripting Vulnerability

TITLE: phpBB Rlink Module "url" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA18620 VERIFY ADVISORY: http://secunia.com/advisories/18620/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Rlink 1.x module for phpBB http://secunia.com/product/7185/...

WAXTRAPP XSS vuln.

WAXTRAPP XSS vuln. Vuln. discovered by : r0t Date: 22 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/waxtrapp-xss-vuln.html vendor:http://www.waxtrapp.com affected version:3.0.x already tested on 3.0.1 and previous versions. Product Description: WAXTRAPP is a development platform...

The CITY Shop XSS vuln.

The CITY Shop XSS vuln. Vuln. discovered by : r0t Date: 14 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/city-shop-xss-vuln.html vendor:http://www.nightmedia.net/shop/ affected version:1.3 and prior Product Description: The CITY Shop is one of the most advanced, and certainly the...

CKGOLD XSS vuln.

CKGOLD XSS vuln. Vuln. dicovered by : r0t Date: 14 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/ckgold-xss-vuln.html vendor:http://www.cartkeeper.com/ affected version:latest Product Description: CKGOLD - E-Commerce Shopping Cart Solution The CKGold system is a feature rich...

Netzbrett 1.5.1 SQL inj. vuln.

Netzbrett 1.5.1 SQL inj. vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 orginal advisory:http://pridels.blogspot.com/2005/11/netzbrett-151-sql-inj-vuln.html Vendor:http://www.weaverslave.ws/index.32.html affected version: 1.5.1 and prior Product Description: Netzbrett is a Web board / forum...

RevenuePilot Search Engine XSS vuln.

RevenuePilot Search Engine XSS vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/revenuepilot-search-engine-xss-vuln.html Vendor:http://www.wwwsearchsolutions.com/revenuepilot.php affected version:v1.2.0 and prior Product Description: With this...

[SA17602] VP-ASP Shopping Cart "UserName" Cross-Site Scripting Vulnerability

TITLE: VP-ASP Shopping Cart "UserName" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA17602 VERIFY ADVISORY: http://secunia.com/advisories/17602/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: VP-ASP Shopping Cart 5.x http://secunia.com/product/1832/...

[SA17552] ACID Cross-Site Scripting and SQL Injection Vulnerabilities

TITLE: ACID Cross-Site Scripting and SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA17552 VERIFY ADVISORY: http://secunia.com/advisories/17552/ CRITICAL: Less critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: ACID 0.9.x http://secunia.com/product/1369/...

[SA17117] aeNovo Cross-Site Scripting and SQL Injection Vulnerabilities

TITLE: aeNovo Cross-Site Scripting and SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA17117 VERIFY ADVISORY: http://secunia.com/advisories/17117/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: aeNovo...

[SA16371] FunkBoard Multiple Cross-Site Scripting Vulnerabilities

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

[SECURITY] [DSA 627-1] New namazu2 packages fix cross-site scripting vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 627-1 [email protected] http://www.debian.org/security/ Martin Schulze January 6th, 2005 http://www.debian.org/security/faq -...