Cells Blog CMS 1.1 - Multiple Web Vulnerabilities

Cells Blog CMS 1.1 - Multiple Web Vulnerabilities Title: ====== Cells Blog CMS v1.1 - Multiple Web Vulnerabilites Date: ===== 2012-06-05 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=591 VL-ID: ===== 591 Common Vulnerability Scoring System:...

QuickBlog CMS 0.8 SQL Injection / Cross Site Scripting

Title: ====== QuickBlog v0.8 CMS - Multiple Web Vulnerabilities Date: ===== 2012-05-12 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=567 VL-ID: ===== 567 Common Vulnerability Scoring System: ==================================== 6.5 Introduction: ============= QuickBlo...

Squirrelcart Cart Shop 3.3.4 - Multiple Web Vulnerabilities

Title: ====== Squirrelcart Cart Shop v3.3.4 - Multiple Web Vulnerabilities Date: ===== 2012-06-04 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=592 VL-ID: ===== 592 Common Vulnerability Scoring System: ==================================== 3.5 Introduction: ===========...

iBoutique eCommerce v4.0 - Multiple Web Vulnerabilities

Document Title: =============== iBoutique eCommerce v4.0 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=594 Release Date: ============= 2012-06-08 Vulnerability Laboratory ID VL-ID: ==================================== 594...

CVE-2012-2144

Session fixation vulnerability in OpenStack Dashboard Horizon folsom-1 and 2012.1 allows remote attackers to hijack web sessions via the sessionid cookie...

PT-2012-6309

Name of the Vulnerable Software and Affected Versions OpenStack Dashboard Horizon versions folsom-1 through 2012.1 Description A session fixation issue allows remote attackers to hijack web sessions via the sessionid cookie. Recommendations For OpenStack Dashboard Horizon versions folsom-1 throug...

Cells Blog CMS v1.1 - Multiple Web Vulnerabilities

Document Title: =============== Cells Blog CMS v1.1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=591 Release Date: ============= 2012-06-04 Vulnerability Laboratory ID VL-ID: ==================================== 591 Comm...

Hexamail Server 4.4.5 - Persistent Cross-Site Scripting

Title: Hexamail Server meal.txt XSS pop up alert'Hi, what is this?'; root@bt:/ Send email to the victim: root@bt:/ sendemail -f [email protected] -t [email protected] -xu [email protected] \ -xp bob123 -u "Want some meal..?" -o message-file=meal.txt -s mail.example.com Vendor timeline ===============...

Jabong.com Cross Site Scripting

Website: www.jabong.com Vulnerability: Session Hijacking VIA XSS Criticality: Moderate to Risky Author: Karthik R a.k.a 3psil0nlambda www.epsilonlambda.wordpress.org --------------------------------------------------- About the site: Jabong.com is a young and vibrant company that aims to provide...

Squirrelcart Cart Shop v3.3.4 - Multiple Web Vulnerabilities

Document Title: =============== Squirrelcart Cart Shop v3.3.4 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=592 Release Date: ============= 2012-06-03 Vulnerability Laboratory ID VL-ID: ===================================...

Interspire Shopping Cart v6 - Multiple Web Vulnerabilities

Document Title: =============== Interspire Shopping Cart v6 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=593 Release Date: ============= 2012-06-02 Vulnerability Laboratory ID VL-ID: ====================================...

Syneto UTM WAF v1.5.1 - Multiple Web Vulnerabilities

Document Title: =============== Syneto UTM WAF v1.5.1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=586 Release Date: ============= 2012-05-30 Vulnerability Laboratory ID VL-ID: ==================================== 586...

Syneto UTM WAF v1.5.1 - Multiple Web Vulnerabilities

Document Title: =============== Syneto UTM WAF v1.5.1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=586 Release Date: ============= 2012-05-30 Vulnerability Laboratory ID VL-ID: ==================================== 586...

Blackboard Mobile Learn v3.0 - Persistent Web Vulnerability

Document Title: =============== Blackboard Mobile Learn v3.0 - Persistent Web Vulnerability References Source: ==================== http://www.blackboard.com/Platforms/Learn/Overview.aspx Release Date: ============= 2012-05-28 Vulnerability Laboratory ID VL-ID: ===================================...

CVE-2011-3188

The 1 IPv4 and 2 IPv6 implementations in the Linux kernel before 3.1 use a modified MD4 algorithm to generate sequence numbers and Fragment Identification values, which makes it easier for remote attackers to cause a denial of service disrupted networking or hijack network sessions by predicting...

CVE-2011-3188

The 1 IPv4 and 2 IPv6 implementations in the Linux kernel before 3.1 use a modified MD4 algorithm to generate sequence numbers and Fragment Identification values, which makes it easier for remote attackers to cause a denial of service disrupted networking or hijack network sessions by predicting...

CVE-2011-3188: Undefined Security Weakness

The 1 IPv4 and 2 IPv6 implementations in the Linux kernel before 3.1 use a modified MD4 algorithm to generate sequence numbers and Fragment Identification values, which makes it easier for remote attackers to cause a denial of service disrupted networking or hijack network sessions by predicting...

Igaware UTM WAF v9.2.0-2 - Multiple Vulnerabilities

Document Title: =============== Igaware UTM WAF v9.2.0-2 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=569 Release Date: ============= 2012-05-17 Vulnerability Laboratory ID VL-ID: ==================================== 569...

Dolphin CS 1.5 Android|iPhone - Multiple Vulnerabilities

Document Title: =============== Dolphin CS 1.5 Android|iPhone - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=566 Release Date: ============= 2012-05-17 Vulnerability Laboratory ID VL-ID: ==================================== 56...

Boonex Dolphin v7.0.9 CMS - Multiple Web Vulnerabilities

Document Title: =============== Boonex Dolphin v7.0.9 CMS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=565 Changeset 16256 Release Date: ============= 2012-05-17 Vulnerability Laboratory ID VL-ID:...