FTP Commander Deluxe 9.20 Directory Traversal

Vulnerability ID: HTB22513 Reference: http://www.htbridge.ch/advisory/directorytraversalvulnerabilityinftpcommanderdeluxe.html Product: FTP Commander Deluxe Vendor: InternetSoft Corporation http://www.internet-soft.com/ftpcomm.htm Vulnerable Version: 9.20 and Probably Prior Versions Vendor...

XSS vulnerability in Theeta CMS

Vulnerability ID: HTB22488 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityintheetacms1.html Product: Theeta CMS Vendor: MN Tech Solutions http://www.mntechsolutions.net/ Vulnerable Version: 0.0 Vendor Notification: 12 July 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not...

Multiple Vulnerabilities in CMS Source

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in CMS Source, which could be exploited to perform cross-site scripting and SQL Injection attacks and compromise vulnerable system. 1 Cross-site scripting XSS vulnerabilities in CMS Source 1.1 The vulnerability exis...

Theeta CMS Cross Site Scripting / SQL Injection

Vulnerability ID: HTB22487 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityintheetacms.html Product: Theeta CMS Vendor: MN Tech Solutions http://www.mntechsolutions.net/ Vulnerable Version: 0.0 Vendor Notification: 12 July 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not...

XSS vulnerability in Theeta CMS

Vulnerability ID: HTB22489 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityintheetacms2.html Product: Theeta CMS Vendor: MN Tech Solutions Vulnerable Version: 0.0 Vendor Notification: 12 July 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed, Vendor Alerted, Awaiting...

SQL injection vulnerability in Theeta CMS

Vulnerability ID: HTB22490 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityintheetacms.html Product: Theeta CMS Vendor: MN Tech Solutions http://www.mntechsolutions.net/ Vulnerable Version: 0.0 Vendor Notification: 12 July 2010 Vulnerability Type: SQL Injection Status: Not...

XSS vulnerability in Theeta CMS

Vulnerability ID: HTB22487 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityintheetacms.html Product: Theeta CMS Vendor: MN Tech Solutions http://www.mntechsolutions.net/ Vulnerable Version: 0.0 Vendor Notification: 12 July 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not...

Multiple Cross-site Scripting (XSS) Vulnerabilities in allinta CMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in allinta CMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerabilities in allinta CMS 1.1 The vulnerability exists due to input sanitation error in the "langURL"...

XSS vulnerability in Spitfire

Vulnerability ID: HTB22485 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinspitfire2.html Product: Spitfire Vendor: Claus Muus http://spitfire.clausmuus.de/ Vulnerable Version: 1.0.336 and Probably Prior Versions Vendor Notification: 08 July 2010 Vulnerability Type: XSS Cross Site...

Directory Traversal Vulnerability in Frigate 3 FTP Client

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Frigate 3 built-in FTP client which could be exploited to execute arbitrary code on vulnerable system. 1 Directory Traversal Vulnerability in Frigate 3 FTP Client: CVE-2010-3097 The vulnerability exists due to insufficient...

Cross-site Request Forgery (CSRF) in Open blog

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Open blog which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery vulnerabilities in Open blog: CVE-2010-3025 1.1 The vulnerability exists due to insufficient validati...

Multiple Vulnerabilities in Amethyst

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Amethyst which could be exploited to perform cross-site scripting, script insertion and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerability in Amethyst The vulnerability exists due to inp...

id Software id Tech 4 Engine - 'idGameLocal::GetGameStateObject()' Remote Code Execution

source: https://www.securityfocus.com/bid/41001/info id Tech 4 Engine is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service conditio...

Directory Traversal Vulnerability in 32bit FTP Client

High-Tech Bridge SA Security Research Lab has discovered vulnerability in 32bit FTP Client which could be exploited to execute arbitrary code on vulnerable system. 1 Directory Traversal Vulnerability in 32bit FTP Client The vulnerability exists due to insufficient sanitation of the downloaded...

Pixie 1.0.4 Cross Site Request Forgery / Cross Site Scripting

Vulnerability ID: HTB22469 Reference: http://www.htbridge.ch/advisory/storedxssvulnerabilityinpixie.html Product: Pixie Vendor: Toggle Labs Ltd http://www.getpixie.co.uk/ Vulnerable Version: 1.0.4 and Probably Prior Versions Vendor Notification: 01 July 2010 Vulnerability Type: Stored XSS Cross...

XSS vulnerability in WebPress

Vulnerability ID: HTB22481 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinwebpress3.html Product: WebPress Vendor: YWP http://www.goywp.com/ Vulnerable Version: Current at 01.07.2010 and Probably Prior Versions Vendor Notification: 01 July 2010 Vulnerability Type: XSS Cross Site...

XSS vulnerability in WebPress

Vulnerability ID: HTB22479 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinwebpress1.html Product: WebPress Vendor: YWP http://www.goywp.com/ Vulnerable Version: Current at 01.07.2010 and Probably Prior Versions Vendor Notification: 01 July 2010 Vulnerability Type: XSS Cross Site...

phpwcms 1.4.5 Cross Site Request Forgery / Cross Site Scripting

================================== Vulnerability ID: HTB22475 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinphpwcms.html Product: phpwcms Vendor: Oliver Georgi http://www.phpwcms.de/ Vulnerable Version: 1.4.5 and Probably Prior Versions Vendor Notification: 01 July 2010 Vulnerabili...

Pligg 1.0.4 Cross Site Scripting

Vulnerability ID: HTB22467 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinpliggsearchmodule.html Product: Pligg Vendor: Pligg, LLC http://www.pligg.com/demo/ Vulnerable Version: 1.0.4 and Probably Prior Versions Vendor Notification: 01 July 2010 Vulnerability Type: XSS Cross Site...

FestOS 2.3b Cross Site Scripting

Vulnerability ID: HTB22473 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinfestos1.html Product: FestOS Vendor: Skypanther Studios, Inc http://festengine.org/ Vulnerable Version: 2.3b and Probably Prior Versions Vendor Notification: 01 July 2010 Vulnerability Type: Stored XSS Cross...