CLscript CMS v3.0 - Multiple Web Vulnerabilities

Title: ====== CLscript CMS v3.0 - Multiple Web Vulnerabilities Date: ===== 2012-05-16 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=574 VL-ID: ===== 574 Common Vulnerability Scoring System: ==================================== 8.6 Introduction: ============= With the...

NGS00162 Patch Notification: Symantec Message Filter Session Hijacking via session fixation

High Risk Vulnerability in Symantec Message Filter 2 July 2012 Ben Williams of NCC Group has discovered a High risk vulnerability in Symantec Message Filter Impact: Session Hijacking via session fixation Versions affected: Symantec Message Filter Version 6.3 An updated version of the software has...

CVE-2012-0301

Session fixation vulnerability in Brightmail Control Center in Symantec Message Filter 6.3 allows remote attackers to hijack web sessions via unspecified vectors...

Freeside SelfService CGI|API 2.3.3 Cross Site Scripting / SQL Injection

Title: ====== Freeside SelfService CGI|API 2.3.3 - Multiple Vulnerabilities Date: ===== 2012-06-14 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=614 VL-ID: ===== 614 Common Vulnerability Scoring System: ==================================== 6.5 Introduction:...

PT-2012-2477

Name of the Vulnerable Software and Affected Versions Symantec Message Filter version 6.3 Description A session fixation issue in the Brightmail Control Center component allows remote attackers to hijack web sessions. The exact vectors used for the attack are not specified. Recommendations For...

PT-2012-2479

Name of the Vulnerable Software and Affected Versions Symantec Message Filter version 6.3 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities in the Brightmail Control Center component. These vulnerabilities allow remote attackers to hijack the authentication o...

Freeside SelfService CGI|API 2.3.3 - Multiple Vulnerabilities

Exploit for php platform in category web applications Title: ====== Freeside SelfService CGI|API 2.3.3 - Multiple Vulnerabilities Common Vulnerability Scoring System: ==================================== 6.5 Introduction: ============= Billing, ticketing, reporting and configuration for employees...

CLscript CMS v3.0 SQL Injection

Exploit for php platform in category web applications Title: ====== CLscript CMS v3.0 - Multiple Web Vulnerabilities Common Vulnerability Scoring System: ==================================== 8.6 Introduction: ============= With the professionally developed Classified-Portal CLscript 3.0 can...

AVAVoIP v1.5.12 - Multiple Web Vulnerabilities

Document Title: =============== AVAVoIP v1.5.12 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=437 Release Date: ============= 2012-06-28 Vulnerability Laboratory ID VL-ID: ==================================== 611 Common...

PT-2012-3996

Name of the Vulnerable Software and Affected Versions Apache Roller versions prior to 5.0.1 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities in the admin/editor console. These vulnerabilities allow remote attackers to hijack the authentication of admins or...

SMF Board v2.0.2 - Multiple Web Vulnerabilities

Document Title: =============== SMF Board v2.0.2 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=596 Release Date: ============= 2012-06-25 Vulnerability Laboratory ID VL-ID: ==================================== 624 Common...

PBBoard v2.1.4 CMS - Multiple Web Vulnerabilities

Document Title: =============== PBBoard v2.1.4 CMS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=623 Release Date: ============= 2012-06-25 Vulnerability Laboratory ID VL-ID: ==================================== 625 Commo...

GLSA-201206-24 : Apache Tomcat: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201206-24 Apache Tomcat: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Apache Tomcat. Please review the CVE identifiers referenced below for details. Impact : The vulnerabilities allow an attacker to...

SMF Board v2.0.2 - Multiple Web Vulnerabilities

Document Title: =============== SMF Board v2.0.2 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=596 Release Date: ============= 2012-06-25 Vulnerability Laboratory ID VL-ID: ==================================== 624 Common...

VamCart v0.9 CMS - Multiple Web Vulnerabilities

Document Title: =============== VamCart v0.9 CMS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=622 Release Date: ============= 2012-06-24 Vulnerability Laboratory ID VL-ID: ==================================== 622 Common...

Syneto EMail Protection v1.5.1 - Multiple Web Vulnerabilities

Document Title: =============== Syneto EMail Protection v1.5.1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=547 Release Date: ============= 2012-06-24 Vulnerability Laboratory ID VL-ID: ==================================...

VamCart v0.9 CMS - Multiple Web Vulnerabilities

Document Title: =============== VamCart v0.9 CMS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=622 Release Date: ============= 2012-06-24 Vulnerability Laboratory ID VL-ID: ==================================== 622 Common...

Anantasoft Gazelle CMS 1.0 Cross Site Scripting

/. /\ /\ /\ /\ / / // | | \ \ \ \ / / / /// / // / / / /// / // | / / \ | | | has ranked 2nd in the CMS Awards Popular Awards in the category SEO 2008. Anantasoft Gaselle CMS 1.0 is vulnerable to stored xss due to improper...

iBoutique eCommerce 4.0 SQL Injection / Cross Site Scripting

Title: ====== iBoutique eCommerce v4.0 - Multiple Web Vulnerabilites Date: ===== 2012-06-09 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=594 VL-ID: ===== 594 Common Vulnerability Scoring System: ==================================== 8 Introduction: =============...

iBoutique eCommerce 4.0 - Multiple Web Vulnerabilities

Title: ====== iBoutique eCommerce v4.0 - Multiple Web Vulnerabilites Date: ===== 2012-06-09 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=594 VL-ID: ===== 594 Common Vulnerability Scoring System: ==================================== 8 Introduction: =============...