CuteSITE CMS 1.5.0 SQL Injection

Vulnerability ID: HTB22396 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityincutesitecms.html Product: CuteSITE CMS Vendor: AMT Company Vulnerable Version: 1.5.0 and Probably Prior Versions Vendor Notification: 20 May 2010 Vulnerability Type: SQL Injection Status: Not Fixed,...

CuteSITE CMS 1.5.0 Cross Site Request Forgery

Vulnerability ID: HTB22395 Reference: http://www.htbridge.ch/advisory/xsrfcsrfincutesitecms.html Product: CuteSITE CMS Vendor: AMT Company Vulnerable Version: 1.5.0 and Probably Prior Versions Vendor Notification: 20 May 2010 Vulnerability Type: CSRF Cross-Site Request Forgery Status: Not Fixed,...

boastMachine 3.1 Cross Site Scripting

Vulnerability ID: HTB22399 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinboastmachine.html Product: boastMachine Vendor: Kailash Nadh Vulnerable Version: 3.1 and Probably Prior Versions Vendor Notification: 20 May 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed,...

EMO Realty Manager - SQL Injection

EMO Realty Manager - SQL Injection Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:EMO Realty Manager SQLi Vulnerable Published: 2010-06-08 Vendor url:http://emophp.com Price:249$ Platform: Unix, Linux , Windows Greetz to:Sid3^effects, aaNumb, M4n0j and to all ICW members...

XSS vulnerability in boastMachine

Vulnerability ID: HTB22399 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinboastmachine.html Product: boastMachine Vendor: Kailash Nadh Vulnerable Version: 3.1 and Probably Prior Versions Vendor Notification: 20 May 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed,...

XSS vulnerability in CuteSITE CMS

Vulnerability ID: HTB22397 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincutesitecms.html Product: CuteSITE CMS Vendor: AMT Company Vulnerable Version: 1.5.0 and Probably Prior Versions Vendor Notification: 20 May 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed,...

Vastal I-Tech SQL Injection

IN THE NAME OF GOD Vastal I-Tech SQL Injection Vulnerability Author : HELLBOY Tested on Lunix CVE : N/A Email : [email protected] Dork : inurl:"viewgroup.php?groupid=" Exploit : http://site/viewgroup.php?groupid=SQLI EXAM:...

Cross-site Request Forgery (CSRF) Vulnerabilities in eFront

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in eFront which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in eFront 1.1 The vulnerability exists due to insufficient validation of the request origin in...

Vastal I-Tech SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================= Vastal I-Tech SQL Injection Vulnerability ========================================= IN THE NAME OF GOD Vastal I-Tech SQL Injection Vulnerability Author : HELLBOY Tested on Lunix CVE : N/A Email :...

Vastal I-Tech - SQL Injection

IN THE NAME OF GOD Vastal I-Tech SQL Injection Vulnerability Author : HELLBOY Tested on Lunix CVE : N/A Email : [email protected] Dork : inurl:"viewgroup.php?groupid=" Exploit : http://site/viewgroup.php?groupid=SQLI EXAM:...

Vastal I-Tech - SQL Injection

Vastal I-Tech - SQL Injection IN THE NAME OF GOD Vastal I-Tech SQL Injection Vulnerability Author : HELLBOY Tested on Lunix CVE : N/A Email : [email protected] Dork : inurl:"viewgroup.php?groupid=" Exploit : http://site/viewgroup.php?groupid=SQLI EXAM:...

SQL injection vulnerability in ImpressPages CMS

Vulnerability ID: HTB22384 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinimpresspagescms.html Product: ImpressPages CMS Vendor: Apro Media Vulnerable Version: 1.0.4 and Probably Prior Versions Vendor Notification: 12 May 2010 Vulnerability Type: SQL Injection Status: Fixed...

Alsco Web Design And I-Tech SQL Injection

Title:- ALSCO WEBDESIGN & I-TECH view.php SQL Injection Vulnerability Date:-2010/05/30 Author:- BLack Revenge Email:- [email protected] ======================================= GreeTz:- D3viL H4ck3r & PrincE oF IrAq & EvEry IraQi + Arab-exploit.com =======================================...

ImpressPages CMS 1.0.4 sort_field SQL Injection

Vulnerability ID: HTB22385 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinimpresspagescms1.html Product: ImpressPages CMS Vendor: Apro Media Vulnerable Version: 1.0.4 and Probably Prior Versions Vendor Notification: 12 May 2010 Vulnerability Type: SQL Injection Status: Fixe...

XSS vulnerability in 360 Web Manager

Vulnerability ID: HTB22377 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityin360webmanager.html Product: 360 Web Manager Vendor: 360 Web Manager Vulnerable Version: 3.0 Vendor Notification: 10 May 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed, Vendor Alerted,...

SQL injection vulnerability in 360 Web Manager

Vulnerability ID: HTB22379 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityin360webmanager1.html Product: 360 Web Manager Vendor: 360 Web Manager Vulnerable Version: 3.0 Vendor Notification: 10 May 2010 Vulnerability Type: SQL Injection Status: Not Fixed, Vendor Alerted,...

Biz Continuity Outweighs Data Breaches: Study

Data security and breach prevention ranks low as a risk factor for most big technical companies, according to new research that identifies the most widespread concerns among the 100 largest U.S. public technology companies. Read the full article. CSO...

XSS vulnerability in gpEasy CMS

Vulnerability ID: HTB22370 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityingpeasycms.html Product: gpEasy CMS Vendor: gpeasy Vulnerable Version: 1.6.2 and Probably Prior Versions Vendor Notification: 05 May 2010 Vulnerability Type: XSS Cross Site Scripting Status: Fixed by Vendor Ris...

SQL injection vulnerability in LiSK CMS

Vulnerability ID: HTB22373 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinliskcms1.html Product: LiSK CMS Vendor: Createch-group Vulnerable Version: 4.4 Vendor Notification: 06 May 2010 Vulnerability Type: SQL Injection Status: Not Fixed, Vendor Alerted, Awaiting Vendor...

LiSK CMS 4.4 - SQL Injection

Vulnerability ID: HTB22373 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinliskcms1.html Product: LiSK CMS Vendor: Createch-group Vulnerable Version: 4.4 Vendor Notification: 06 May 2010 Vulnerability Type: SQL Injection Status: Not Fixed, Vendor Alerted, Awaiting Vendor...