HTB22880: XSS vulnerability in CosmoShop

Vulnerability ID: HTB22880 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincosmoshop1.html Product: CosmoShop Vendor: Zaunz Publishing GmbH http://www.cosmoshop.de/ Vulnerable Version: ePRO V10.05.00 Vendor Notification: 24 February 2011 Vulnerability Type: Stored XSS Cross Site...

HTB22878: XSS vulnerability in CosmoShop

Vulnerability ID: HTB22878 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincosmoshop.html Product: CosmoShop Vendor: Zaunz Publishing GmbH http://www.cosmoshop.de/ Vulnerable Version: ePRO V10.05.00 Vendor Notification: 24 February 2011 Vulnerability Type: Stored XSS Cross Site...

Wordpress GRAND Flash Album Gallery 0.55 Plugin Multiple Vulnerabilities

Exploit for php platform in category web applications Product: GRAND Flash Album Gallery wordpress plugin Vendor: Sergey Pasyuk http://codeasily.com/ Vulnerable Version: 0.55 Vendor Notification: 22 February 2011 Vulnerability Type: SQL Injection Risk level: High Credit: High-Tech Bridge SA -...

PhotoSmash 1.0.1 Cross Site Scripting

Vulnerability ID: HTB22867 Reference: http://www.htbridge.ch/advisory/xssinphotosmashwordpressplugin.html Product: PhotoSmash wordpress plugin Vendor: Byron Bennett http://smashly.net/ Vulnerable Version: 1.0.1 Vendor Notification: 22 February 2011 Vulnerability Type: XSS Cross Site Scripting...

1 Flash Gallery 0.2.5 Cross Site Scripting / SQL Injection

===================================== Vulnerability ID: HTB22869 Reference: http://www.htbridge.ch/advisory/sqlinjectionin1flashgallerywordpressplugin.html Product: 1 Flash Gallery wordpress plugin Vendor: 1plugin.com http://1plugin.com/ Vulnerable Version: 0.2.5 Vendor Notification: 22 February...

WordPress Plugin GRAND Flash Album Gallery 0.55 - Multiple Vulnerabilities

Vulnerability ID: HTB22870 Reference: http://www.htbridge.ch/advisory/sqlinjectioningrandflashalbumgalle rywordpressplugin.html Product: GRAND Flash Album Gallery wordpress plugin Vendor: Sergey Pasyuk http://codeasily.com/ Vulnerable Version: 0.55 Vendor Notification: 22 February 2011...

GRAND Flash Album Gallery 0.55 SQL Injection / File Disclosure

=============================== Vulnerability ID: HTB22871 Reference: http://www.htbridge.ch/advisory/filecontentdisclosureingrandflashalbumgallerywordpressplugin.html Product: GRAND Flash Album Gallery wordpress plugin Vendor: Sergey Pasyuk http://codeasily.com/ Vulnerable Version: 0.55 Vendor...

HTB22860: SQL Injection in WP Forum wordpress plugin

Vulnerability ID: HTB22860 Reference: http://www.htbridge.ch/advisory/sqlinjectioninwpforumwordpressplugin2.html Product: WP Forum wordpress plugin Vendor: Fredrik Fahlstad http://www.fahlstad.se/ Vulnerable Version: 1.7.8 Vendor Notification: 15 February 2011 Vulnerability Type: SQL Injection Ri...

IWantOneButton 3.0.1 Wordpress Plugin Multiple Vulnerabilities

Exploit for php platform in category web applications Product: IWantOneButton wordpress plugin Vendor: Daniel Sands http://www.danielsands.co.cc/ Vulnerable Version: 3.0.1 Vendor Notification: 10 February 2011 Vulnerability Type: SQL Injection Risk level: High Credit: High-Tech Bridge SA - Ethica...

WordPress Plugin IWantOneButton 3.0.1 - Multiple Vulnerabilities

WordPress Plugin IWantOneButton 3.0.1 - Multiple Vulnerabilities Vulnerability ID: HTB22846 Reference: http://www.htbridge.ch/advisory/sqlinjectioniniwantonebuttonwordpres splugin.html Product: IWantOneButton wordpress plugin Vendor: Daniel Sands http://www.danielsands.co.cc/ Vulnerable Version:...

Wordpress Plugin Comment Rating 2.9.23 Multiple Vulnerabilities

Exploit for php platform in category web applications ================================= Vulnerability ID: HTB22842 Reference: http://www.htbridge.ch/advisory/pathdisclosureincommentratingwordpressplugin.html Product: Comment Rating wordpress plugin Vendor: Bob King http://wealthynetizen.com/...

WordPress Plugin IWantOneButton 3.0.1 - Multiple Vulnerabilities

Vulnerability ID: HTB22846 Reference: http://www.htbridge.ch/advisory/sqlinjectioniniwantonebuttonwordpres splugin.html Product: IWantOneButton wordpress plugin Vendor: Daniel Sands http://www.danielsands.co.cc/ Vulnerable Version: 3.0.1 Vendor Notification: 10 February 2011 Vulnerability Type: S...

HTB22847: XSS in IWantOneButton wordpress plugin

Vulnerability ID: HTB22847 Reference: http://www.htbridge.ch/advisory/xssiniwantonebuttonwordpressplugin.html Product: IWantOneButton wordpress plugin Vendor: Daniel Sands http://www.danielsands.co.cc/ Vulnerable Version: 3.0.1 Vendor Notification: 10 February 2011 Vulnerability Type: XSS Cross...

IWantOneButton 3.0.1 Cross Site Scripting / SQL Injection

================================= Vulnerability ID: HTB22846 Reference: http://www.htbridge.ch/advisory/sqlinjectioniniwantonebuttonwordpressplugin.html Product: IWantOneButton wordpress plugin Vendor: Daniel Sands http://www.danielsands.co.cc/ Vulnerable Version: 3.0.1 Vendor Notification: 10...

WordPress Plugin Comment Rating 2.9.23 - Multiple Vulnerabilities

WordPress Plugin Comment Rating 2.9.23 - Multiple Vulnerabilities Source: http://packetstormsecurity.org/files/view/98660/commentrating-sqldisclose.txt ================================= Vulnerability ID: HTB22842 Reference:...

WordPress Plugin Z-Vote 1.1 - SQL Injection

Source: http://packetstormsecurity.org/files/view/98671/zvote-sql.txt Vulnerability ID: HTB22839 Reference: http://www.htbridge.ch/advisory/sqlinjectioninzvotewordpressplugin.html Product: Z-Vote wordpress plugin Vendor: 140hours http://wordpress.org/extend/plugins/z-vote/ Vulnerable Version: 1.1...

Starbox 2.0.4 Path Disclosure

Vulnerability ID: HTB22840 Reference: http://www.htbridge.ch/advisory/pathdisclosureinstarboxvotingwordpressplugin.html Product: Starbox Voting wordpress plugin Vendor: jigen.he http://www.sealedbox.cn/ Vulnerable Version: 2.0.4 Vendor Notification: 08 February 2011 Vulnerability Type: Path...

HTB22841: SQL Injection in Comment Rating wordpress plugin

Vulnerability ID: HTB22841 Reference: http://www.htbridge.ch/advisory/sqlinjectionincommentratingwordpressplugin.html Product: Comment Rating wordpress plugin Vendor: Bob King http://wealthynetizen.com/ Vulnerable Version: 2.9.23 Vendor Notification: 08 February 2011 Vulnerability Type: SQL...

GD Star Rating 1.9.7 Cross Site Scripting / Path Disclosure

===================================== Vulnerability ID: HTB22843 Reference: http://www.htbridge.ch/advisory/pathdisclosureingdstarratingwordpressplugin.html Product: GD Star Rating wordpress plugin Vendor: Milan Petrovic http://www.gdstarrating.com/ Vulnerable Version: 1.9.7 Vendor Notification: ...

CDNVote 0.4.1 SQL Injection

Vulnerability ID: HTB22845 Reference: http://www.htbridge.ch/advisory/sqlinjectionincdnvotewordpressplugin.html Product: cdnvote wordpress plugin Vendor: Nakahira http://www.crossdrive.net/ Vulnerable Version: 0.4.1 Vendor Notification: 08 February 2011 Vulnerability Type: SQL Injection Risk leve...