HTB22864: XSS vulnerability in xtcModified

Vulnerability ID: HTB22864 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinxtcmodified1.html Product: xtcModified Vendor: xtcModified Team http://www.xtc-modified.org/ Vulnerable Version: 1.05 and probably prior versions Vendor Notification: 17 February 2011 Vulnerability Type: Store...

NextGEN Gallery WordPress Plugin 1.7.3 Path Disclosure

Vulnerability ID: HTB22862 Reference: http://www.htbridge.ch/advisory/pathdisclosureinnextgengallerywordpressplugin.html Product: NextGEN Gallery wordpress plugin Vendor: Alex Rabe http://alexrabe.de/ Vulnerable Version: 1.7.3 Vendor Notification: 15 February 2011 Vulnerability Type: Path...

WP Forum Server 1.6.5 Wordpress Plugin SQL Injection Vulnerability

Exploit for php platform in category web applications Product: WP Forum Server wordpress plugin Vendor: VastHTML Vulnerable Version: 1.6.5 Vendor Notification: 10 February 2011 Vulnerability Type: SQL Injection Risk level: High Credit: High-Tech Bridge SA - Ethical Hacking & Penetration Testing...

Air Files v2.6 for iPhone / iPod touch, Directory Traversal

Exploit for hardware platform in category remote exploits Exploit Title: Air Files v2.6 for iPhone / iPod touch, Directory Traversal Date: 02/24/2011 Author: email protected, Sunlight, email protected Software Link : http://itunes.apple.com/kr/app/filer-lite-download-view-manage/id339732484?mt=8...

Share v1.0 for iPhone / iPod touch, Directory Traversal

Exploit for hardware platform in category remote exploits Exploit Title: Share v1.0 for iPhone / iPod touch, Directory Traversal Date: 02/24/2011 Author: email protected, Sunlight, email protected Software Link : http://itunes.apple.com/kr/app/filer-lite-download-view-manage/id350671847?mt=8...

iOS myDBLite 1.1.10 - Directory Traversal

iOS myDBLite 1.1.10 - Directory Traversal Exploit Title : myDBLite v1.1.10 for iPhone / iPod touch, Directory Traversal Date: 02/24/2011 Author: R3d@l3rt, Sp@2K, Sp@2K, Sunlight, H@ckk3y Software Link: http://itunes.apple.com/kr/app/mydb-lite/id335521112?mt=8 Version: 1.1.10 Tested on: iPhone, iP...

WordPress Plugin IWantOneButton 3.0.1 - Multiple Vulnerabilities

WordPress Plugin IWantOneButton 3.0.1 - Multiple Vulnerabilities Vulnerability ID: HTB22846 Reference: http://www.htbridge.ch/advisory/sqlinjectioniniwantonebuttonwordpres splugin.html Product: IWantOneButton wordpress plugin Vendor: Daniel Sands http://www.danielsands.co.cc/ Vulnerable Version:...

iSO Filer Lite 2.1.0 - Directory Traversal

iSO Filer Lite 2.1.0 - Directory Traversal Exploit Title: Filer Lite v2.1.0 for iPhone / iPod touch, Directory Traversal Date: 02/24/2011 Author: R3d@l3rt, Sp@2K, Sunlight, H@ckk3y Software Link : http://itunes.apple.com/kr/app/filer-lite-download-view-manage/id350939597?mt=8 Version: 2.1.0 Teste...

Z-Vote 1.1 Wordpress Plugin SQL Injection Vulnerability

Exploit for php platform in category web applications Vulnerability ID: HTB22839 Reference: http://www.htbridge.ch/advisory/sqlinjectioninzvotewordpressplugin.html Product: Z-Vote wordpress plugin Vendor: 140hours http://wordpress.org/extend/plugins/z-vote/ Vulnerable Version: 1.1 Vendor...

FtpDisc v1.0 for iPhone / iPod touch, Directory Traversal

Exploit for hardware platform in category remote exploits Exploit Title: FtpDisc v1.0 for iPhone / iPod touch, Directory Traversal Date: 02/22/2011 Author: email protected, email protected, Sunlight Software Link: http://itunes.apple.com/kr/app/ftpdisc-lite-pdf-reader/id329157971?mt=8 Version: 1....

SideBooks v1.0 for iPhone / iPod touch, Directory Traversal

Exploit for hardware platform in category remote exploits Exploit Title: SideBooks v1.0 for iPhone / iPod touch, Directory Traversal Date: 02/22/2011 Author: email protected, email protected, Sunlight, Hackkey Software Link: http://itunes.apple.com/kr/app/sidebooks/id409777225?mt=8 Version: 1.0...

WordPress Plugin Z-Vote 1.1 - SQL Injection

Source: http://packetstormsecurity.org/files/view/98671/zvote-sql.txt Vulnerability ID: HTB22839 Reference: http://www.htbridge.ch/advisory/sqlinjectioninzvotewordpressplugin.html Product: Z-Vote wordpress plugin Vendor: 140hours http://wordpress.org/extend/plugins/z-vote/ Vulnerable Version: 1.1...

HTB22841: SQL Injection in Comment Rating wordpress plugin

Vulnerability ID: HTB22841 Reference: http://www.htbridge.ch/advisory/sqlinjectionincommentratingwordpressplugin.html Product: Comment Rating wordpress plugin Vendor: Bob King http://wealthynetizen.com/ Vulnerable Version: 2.9.23 Vendor Notification: 08 February 2011 Vulnerability Type: SQL...

HTB22843: Path disclosure in GD Star Rating wordpress plugin

Vulnerability ID: HTB22843 Reference: http://www.htbridge.ch/advisory/pathdisclosureingdstarratingwordpressplugin.html Product: GD Star Rating wordpress plugin Vendor: Milan Petrovic http://www.gdstarrating.com/ Vulnerable Version: 1.9.7 Vendor Notification: 08 February 2011 Vulnerability Type:...

CDNVote 0.4.1 SQL Injection

Vulnerability ID: HTB22845 Reference: http://www.htbridge.ch/advisory/sqlinjectionincdnvotewordpressplugin.html Product: cdnvote wordpress plugin Vendor: Nakahira http://www.crossdrive.net/ Vulnerable Version: 0.4.1 Vendor Notification: 08 February 2011 Vulnerability Type: SQL Injection Risk leve...

iOS SideBooks 1.0 - Directory Traversal

Exploit Title: SideBooks v1.0 for iPhone / iPod touch, Directory Traversal Date: 02/22/2011 Author: R3d@l3rt, Sp@2K, Sunlight, Hackkey Software Link: http://itunes.apple.com/kr/app/sidebooks/id409777225?mt=8 Version: 1.0 Tested on: iPhone, iPod 3GS with 4.2.1 firmware There is directory traversal...

Cisco Security Agent Management Console st_upload File Creation

The Management Console webagent.exe in Cisco Security Agent 5.1, 5.2, and 6.0 before 6.0.2.145 allows remote attackers to create arbitrary files and execute arbitrary code via unspecified parameters in a crafted stupload request. Recent assessments: wchen-r7 at September 12, 2019 6:07pm UTC...

DSA-2164-1 shadow - missing input sanitization

Bulletin has no description...

HTB22824: SQL Injection in Seo Panel

Vulnerability ID: HTB22824 Reference: http://www.htbridge.ch/advisory/sqlinjectioninseopanel1.html Product: Seo Panel Vendor: http://www.seopanel.in/ http://www.seopanel.in/ Vulnerable Version: 2.2.0 Vendor Notification: 01 February 2011 Vulnerability Type: SQL Injection Risk level: High Credit:...

Seo Panel 2.2.0 - SQL Injection

Vulnerability ID: HTB22824 Reference: http://www.htbridge.ch/advisory/sqlinjectioninseopanel1.html Product: Seo Panel Vendor: http://www.seopanel.in/ http://www.seopanel.in/ Vulnerable Version: 2.2.0 Vendor Notification: 01 February 2011 Vulnerability Type: SQL Injection Risk level: High Credit:...