Tangora™ Portal CMS XSS vuln.

Tangora™ Portal CMS XSS vuln. Vuln. discovered by : r0t Date: 21 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/tangora-portal-cms-xss-vuln.html vendor:http://www.tangora.com/ affected version:4.0 and prior Product Description: Tangora™ Portal CMS makes it easy for small and...

FarCry XSS vuln.

FarCry XSS vuln. Vuln. discovered by : r0t Date: 17 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/farcry-xss-vuln.html vendor:http://farcry.daemon.com.au/ affected version:3.0 and prior Product Description: FarCry is an open source Content Management System CMS, originally...

ECTOOLS - Onlineshop XSS

ECTOOLS - Onlineshop XSS Vuln. discovered by : r0t Date: 15 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/ectools-onlineshop-xss.html vendor:http://www.ectools.de/ affected version:1.0 and prior Product Description: ECTOOLS Onlineshop contains a trackingsystem, to let your...

The CITY Shop XSS vuln.

The CITY Shop XSS vuln. Vuln. discovered by : r0t Date: 14 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/city-shop-xss-vuln.html vendor:http://www.nightmedia.net/shop/ affected version:1.3 and prior Product Description: The CITY Shop is one of the most advanced, and certainly the...

ClickCartPro (CCP) XSS vuln.

ClickCartPro CCP XSS vuln. Vuln. discovered by : r0t Date: 14 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/clickcartpro-ccp-xss-vuln.html vendor:http://www.clickcartpro.com/ affected version:5.1 and prior Product Description: CCP is a full featured shopping cart engine that will...

CKGOLD XSS vuln.

CKGOLD XSS vuln. Vuln. dicovered by : r0t Date: 14 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/ckgold-xss-vuln.html vendor:http://www.cartkeeper.com/ affected version:latest Product Description: CKGOLD - E-Commerce Shopping Cart Solution The CKGold system is a feature rich...

mantis -- "view_filters_page.php" cross-site scripting vulnerability

r0t reports: Mantis contains a flaw that allows a remote cross site scripting attack. This flaw exists because input passed to "targetfield" parameter in "viewfilterspage.php" isn't properly sanitised before being returned to the user. This could allow a user to create a specially crafted URL tha...

Mantis bugtracking system XSS vuln.

Mantis bugtracking system XSS vuln. Vuln. dicovered by : r0t Date: 13 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/mantis-bugtracking-system-xss-vuln.html vendor:http://www.mantisbt.org/ affected version: 1.0.0rc3,1.0.0rc2 and prior Product Description: Mantis is a web-based...

IISWorks ASP KnowledgeBase 2.x XSS vuln.

IISWorks ASP KnowledgeBase 2.x XSS vuln. Vuln. dicovered by : r0t Date: 6 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/iisworks-asp-knowledgebase-2x-xss-vuln.html vendor:http://www.iisworks.com/aspkb/ affected version:2.x and prior Product Description: 100 ASP based Knowledge ba...

A-FAQ SQL inj. vuln.

A-FAQ SQL inj. vuln. Vuln. dicovered by : r0t Date: 6 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/faq-sql-inj-vuln.html vendor:http://www.alanward.net/afaq affected version:1.0 and prior Product Description: A-FAQ is an ASP application used for managing a database of questions...

HobSR SQL inj. vuln

HobSR SQL inj. vuln Vuln. dicovered by : r0t Date: 5 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/hobsr-sql-inj-vuln.html vendor:www.hobosworld.com/scripts.php?id=5 affected version:1.0 and prior Product Description: HobSR is an top sites script where users sign up to have their...

Blog System v1.2 SQL inj. vuln.

Blog System v1.2 SQL inj. vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/blog-system-v12-sql-inj-vuln.html vendor:http://www.netartmedia.net/blogsystem/ affected version:v1.2 and prior Product Description: Blog System allows you to launch and...

MyTemplateSite XSS vuln.

MyTemplateSite XSS vuln. Vuln. dicovered by : r0t Date: 3 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/mytemplatesite-xss-vuln.html vendor:http://www.infinetsoftware.com/products/mts/default.asp affected version: 1.2 and prior Product Description: Create your own template site...

QualityPPC XSS vuln.

QualityPPC XSS vuln. Vuln. dicovered by : r0t Date: 1 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/qualityppc-xss-vuln.html Vendor:http://www.qualityebiz.com/main/qppc.php affected version:1553 and prior Product Description: QualityPPC has the latest technology which offers you...

Confluence – the Enterprise Wiki, XSS vuln.

Confluence – the Enterprise Wiki, XSS vuln. Vuln. dicovered by : r0t Date: 2 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/confluence-enterprise-wiki-xss-vuln.html Vendor:http://www.atlassian.com/software/confluence/ affected version: 2.0.1 Build:321 Nov 28, 2005 Product...

Lore SQL inj. vuln.

Lore SQL inj. vuln. Vuln. dicovered by : r0t Date: 1 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/lore-sql-inj-vuln.html Vendor:http://www.pineappletechnologies.com/products/lore/ affected version: Tested on 1.5.4 Product Description: Lore is a professional knowledge base...

Netzbrett 1.5.1 SQL inj. vuln.

Netzbrett 1.5.1 SQL inj. vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 orginal advisory:http://pridels.blogspot.com/2005/11/netzbrett-151-sql-inj-vuln.html Vendor:http://www.weaverslave.ws/index.32.html affected version: 1.5.1 and prior Product Description: Netzbrett is a Web board / forum...

RevenuePilot Search Engine XSS vuln.

RevenuePilot Search Engine XSS vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/revenuepilot-search-engine-xss-vuln.html Vendor:http://www.wwwsearchsolutions.com/revenuepilot.php affected version:v1.2.0 and prior Product Description: With this...

DRZES HMS 3.2 Multiple vuln.

DRZES HMS 3.2 - Hosting Management System -multiple SQL inj. vuln. and XSS vuln. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/drzes-hms-32-multiple-vuln.html Vendor:http://drzes.com/ affected version:3.2 and prior Product description: Increase...

[SA17736] SmartPPC Pro "username" Cross-Site Scripting Vulnerability

TITLE: SmartPPC Pro "username" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA17736 VERIFY ADVISORY: http://secunia.com/advisories/17736/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: SmartPPC Pro http://secunia.com/product/6215/ DESCRIPTION: BiPiHaC...