Multiple Vulnerabilities in Entrans

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Entrans which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerability in Entrans: CVE-2010-4932 The vulnerability exists due to input sanitation erro...

XSS vulnerability in ArtGK CMS

Vulnerability ID: HTB22588 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinartgkcms1.html Product: ArtGK CMS Vendor: ArtGK http://artgk-cms.ru/ Vulnerable Version: 2009-08-28 16:00:00 and Probably Prior Versions Vendor Notification: 18 August 2010 Vulnerability Type: XSS Cross Site...

vbShout 5.2.2 Remote/Local File Inlcusion Vulnerability

Exploit for php platform in category web applications ======================================================= vbShout 5.2.2 Remote/Local File Inlcusion Vulnerability ======================================================= + + Title: vbShout 5.2.2 Remote/Local File Inlcusion Mod/Admin + Author:...

Rumba CMS 2.4 Cross Site Scripting

================================== Vulnerability ID: HTB22591 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinrumbacms.html Product: Rumba CMS Vendor: Rumba Netware Ltd. http://rumbacms.com Vulnerable Version: 2.4 and Probably Prior Versions Vendor Notification: 18 August 2010...

Auto CMS 1.6 Cross Site Scripting

Vulnerability ID: HTB22564 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinautocms.html Product: Auto CMS Vendor: Roberto Aleman http://ventics.com/autocms/ Vulnerable Version: 1.6 and Probably Prior Versions Vendor Notification: 09 August 2010 Vulnerability Type: XSS Cross Site...

Webmatic 3.0.5 Cross Site Request Forgery / Cross Site Scripting

==================================== Vulnerability ID: HTB22568 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinwebmatic.html Product: Webmatic Vendor: Valarsoft http://www.valarsoft.com/ Vulnerable Version: 3.0.5 and Probably Prior Versions Vendor Notification: 09 August 2010...

MAXdev 1.0.83 Cross Site Scripting

Vulnerability ID: HTB22563 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinmaxdev.html Product: MAXdev Vendor: MAXdev http://www.maxdev.it/ Vulnerable Version: 1.0.83 and Probably Prior Versions Vendor Notification: 05 August 2010 Vulnerability Type: XSS Cross Site Scripting Status:...

Multiple Vulnerabilities in SantaFox

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in SantaFox which could be exploited to perform cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerability in SantaFox: CVE-2010-3463 The vulnerability exists due to input...

Cross-site Request Forgery (CSRF) Vulnerabilities in Amiro.CMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Amiro.CMS which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in Amiro.CMS 1.1 The vulnerability exists due to insufficient validation of the request origin i...

Short Passwords Open To Brute Force Attacks

A password of less than seven characters will soon be “hopelessly inadequate” even if it contains symbols as well as alphanumerical characters, according to computer scientists at the Georgia Tech Research Institute. Read the full article. The Register...

XSS vulnerability in CMS Source

Vulnerability ID: HTB22551 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincmssource2.html Product: CMS Source Vendor: Proud Daddy Web Design http://www.prouddaddy.net/ Vulnerable Version: Current at 28.07.2010 and Probably Prior Versions Vendor Notification: 28 July 2010 Vulnerabili...

Edit-X CMS Cross Site Scripting

Vulnerability ID: HTB22542 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityineditxcms.html Product: Edit-X CMS Vendor: Edit-X, Inc. http://www.edit-x.com/ Vulnerable Version: Current at 27.07.2010 and Probably Prior Versions Vendor Notification: 27 July 2010 Vulnerability Type: XSS Cro...

eazyCMS Cross Site Scripting

=========================================== Vulnerability ID: HTB22553 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityineazycms.html Product: eazyCMS Vendor: eazycms.com http://eazycms.com/ Vulnerable Version: Current at 28.07.2010 and Probably Prior Versions Vendor Notification: 28...

i-Web Suite SQL Injection / Cross Site Scripting

========================================= Vulnerability ID: HTB22544 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityiniwebsuite.html Product: i-Web Suite Vendor: immediaC world wide Inc http://www.immediac.com/ Vulnerable Version: Current at 27.07.2010 and Probably Prior Versions Vend...

Eden Platform 27.07.2010 Cross Site Scripting

======================================= Vulnerability ID: HTB22538 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinedenplatform.html Product: Eden Platform Vendor: Preation http://www.preation.com/ Vulnerable Version: Current at 27.07.2010 and Probably Prior Versions Vendor...

XSS vulnerability in allinta CMS

Vulnerability ID: HTB22528 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinallintacms.html Product: Allinta CMS Vendor: Allinta http://www.allinta.com/ Vulnerable Version: Current at 22.07.2010 and Probably Prior Versions Vendor Notification: 26 July 2010 Vulnerability Type: XSS Cros...

XSS vulnerability in DT Centrepiece

Vulnerability ID: HTB22521 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityindtcentrepiece2.html Product: DT Centrepiece Vendor: DT Services http://www.dt.net.nz/ Vulnerable Version: 4.5 and Probably Prior Versions Vendor Notification: 22 July 2010 Vulnerability Type: XSS Cross Site...

XSS vulnerability in DiamondList

Vulnerability ID: HTB22518 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityindiamondlist1.html Product: DiamondList Vendor: Hulihan Applications http://hulihanapplications.com/projects/diamondlist Vulnerable Version: 0.1.6 and Probably Prior Versions Vendor Notification: 22 July 2010...

XSS vulnerability in DT Centrepiece

Vulnerability ID: HTB22520 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityindtcentrepiece1.html Product: DT Centrepiece Vendor: DT Services http://www.dt.net.nz/ Vulnerable Version: 4.5 and Probably Prior Versions Vendor Notification: 22 July 2010 Vulnerability Type: XSS Cross Site...

Campsite 3.3.6 Cross Site Scripting

=============================================================== Vulnerability ID: HTB22494 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincampsite.html Product: Campsite Vendor: Sourcefabric o.p.s http://www.sourcefabric.org/ Vulnerable Version: 3.3.6 and Probably Prior Versions...