Visale XSS vuln.

Visale XSS vuln. Vuln. discovered by : r0t Date: 19 april 2006 vendor:http://www.visale.com/ affected versions: 1.0 and previous orginal advisory:http://pridels.blogspot.com/2006/04/visale-xss-vuln.html Vuln. Description: Visale contains a flaw that allows a remote cross site scripting attack. Th...

[SA19654] Boardsolution "keyword" Cross-Site Scripting Vulnerability

TITLE: Boardsolution "keyword" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA19654 VERIFY ADVISORY: http://secunia.com/advisories/19654/ CRITICAL: Less critical IMPACT: Cross Site Scripting, Exposure of system information WHERE: From remote SOFTWARE: Boardsolution 1.x...

ModernBill multiple SQL inj. vuln.

ModernBill multiple SQL inj. vuln. Vuln. discovered by : r0t Date: 18 april 2006 vendor:www.moderngigabyte.com product link: www.moderngigabyte.net/modernbill/index.htm?ref=homeofmodernbill affected versions:4.3.2 and previous orginal advisory:...

xFlow v5.x multiple vuln.

xFlow v5.x multiple vuln. Vuln. discovered by : r0t Date: 18 april 2006 vendorlink:http://www.skymarx.com/affiliatesoftware.html affected versions:v5.46.11 and previous orginal advisory: http://pridels.blogspot.com/2006/04/xflow-v5x-multiple-vuln.html Product info: After over five years of...

[SA19637] RateIt "rateit_id" SQL Injection Vulnerability

TITLE: RateIt "rateitid" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA19637 VERIFY ADVISORY: http://secunia.com/advisories/19637/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: RateIt 2.x http://secunia.com/product/9357/ DESCRIPTION: Aliaksandr...

[Full-disclosure] Secunia Research: Adobe Document Server for Reader Extensions Multiple Vulnerabilities

====================================================================== Secunia Research 13/04/2006 Adobe Document Server for Reader Extensions Multiple Vulnerabilities ====================================================================== Table of Contents Affected...

Bugzero XSS vuln.

Bugzero XSS vuln. Vuln. discovered by : r0t unsecured-systems Date: 1 april 2006 vendor:http://www.websina.com/bugzero/ affected versions:V.4.3.1 and also development version. Bugzero contains a flaws that allows a remote cross site scripting attacks. Those flaws exists because input passed to...

realestateZONE 4.2 Multiple XSS vuln.

realestateZONE 4.2 Multiple XSS vuln. Vuln. discovered by : r0t Date: 28 march 2006 vendor:http://www.fusionzone.com/applications/realestate/ affected versions:v.4.2 and prior original advisory:http://pridels.blogspot.com/2006/03/realestatezone-42-multiple-xss-vuln.html Vuln. Description:...

Connect Daily Web Calendar Software Multiple XSS vuln.

Connect Daily Web Calendar Software Multiple XSS vuln. Vuln. discovered by : r0t Date: 27 march 2006 vendor:http://www.mhsoftware.com/connectdaily.htm affected versions:3.2.9 and prior orginal advisory:http://pridels.blogspot.com/2006/03/connect-daily-multiple-xss-vuln.html Vuln. description:...

[SA19393] Calender Express Cross-Site Scripting Vulnerability

TITLE: Calender Express Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA19393 VERIFY ADVISORY: http://secunia.com/advisories/19393/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Calendar Express 2.x http://secunia.com/product/5508/ DESCRIPTION:...

BlankOL XSS vuln.

BlankOL XSS vuln. Vuln. discovered by : r0t Date: 27 march 2006 vendor:http://www.blankol.com/ affected versions: 1 and prior orginal advisory:http://pridels.blogspot.com/2006/03/blankol-xss-vuln.html Vuln. description: BlankOL contains a flaw that allows a remote cross site scripting attack. Thi...

E-School Management System XSS vuln. and Web Quiz pro XSS vuln.

E-School Management System XSS vuln. Vuln. discovered by : r0t Date: 27 march 2006 vendor:www.calorisplanitia.com/e-school-management-system.aspx affected versions: 1.0 and prior orginal advisory: http://pridels.blogspot.com/2006/03/e-school-management-system-xss-vuln.html Vuln. description:...

[SA19379] CoMoblog "img.php" Cross-Site Scripting Vulnerability

TITLE: CoMoblog "img.php" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA19379 VERIFY ADVISORY: http://secunia.com/advisories/19379/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: CoMoblog 1.x http://secunia.com/product/8906/ DESCRIPTION: FarhadKey ha...

[SA19359] AnyPortal(php) "F" Directory Traversal Vulnerability

TITLE: AnyPortalphp "F" Directory Traversal Vulnerability SECUNIA ADVISORY ID: SA19359 VERIFY ADVISORY: http://secunia.com/advisories/19359/ CRITICAL: Moderately critical IMPACT: System access, Exposure of sensitive information, Manipulation of data WHERE: From remote SOFTWARE: AnyPortalphp 0.x...

[SA19155] HitHost Cross-Site Scripting and Directory Deletion

TITLE: HitHost Cross-Site Scripting and Directory Deletion SECUNIA ADVISORY ID: SA19155 VERIFY ADVISORY: http://secunia.com/advisories/19155/ CRITICAL: Less critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: HitHost 1.x http://secunia.com/product/8604/...

[SA19101] bitweaver "title" Script Insertion Vulnerability

TITLE: bitweaver "title" Script Insertion Vulnerability SECUNIA ADVISORY ID: SA19101 VERIFY ADVISORY: http://secunia.com/advisories/19101/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: bitweaver 1.x http://secunia.com/product/8545/ DESCRIPTION: Kiki has...

NZ Ecommerce SQL&XSS vuln.

Vuln. discovered by : r0t Date: 2 march 2006 vendor: www.digitalbuilder.co.nz/ProductCodeNZEcommerce.asp affected version: latest Orginal advisory: http://pridels.blogspot.com/2006/03/nz-ecommerce-sqlxss-vuln.html 1.XSS Input passed to the "action" parameter in "index.php" isn't properly sanitise...

[SA18714] DEV web management system "City/Region" Script Insertion

TITLE: DEV web management system "City/Region" Script Insertion SECUNIA ADVISORY ID: SA18714 VERIFY ADVISORY: http://secunia.com/advisories/18714/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: DEV web management system 1.x http://secunia.com/product/6685/...

[SA18903] iUser Ecommerce common.php File Inclusion Vulnerability

TITLE: iUser Ecommerce common.php File Inclusion Vulnerability SECUNIA ADVISORY ID: SA18903 VERIFY ADVISORY: http://secunia.com/advisories/18903/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: iUser Ecommerce 2.x http://secunia.com/product/8175/ DESCRIPTION: ReZEN ha...

[SA19007] Calcium "EventText" Script Insertion Vulnerability

TITLE: Calcium "EventText" Script Insertion Vulnerability SECUNIA ADVISORY ID: SA19007 VERIFY ADVISORY: http://secunia.com/advisories/19007/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Calcium 3.x http://secunia.com/product/8330/ DESCRIPTION: KeyShore a...