XSS vulnerability in Rumba CMS tags

Vulnerability ID: HTB22591 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinrumbacms.html Product: Rumba CMS Vendor: Rumba Netware Ltd. http://rumbacms.com Vulnerable Version: 2.4 and Probably Prior Versions Vendor Notification: 18 August 2010 Vulnerability Type: Stored XSS Cross Site...

TCMS 100728 Cross Site Scripting / Local File Inclusion / SQL Injection

===================================== Vulnerability ID: HTB22571 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityintcms.html Product: TCMS Vendor: Target CMS http://targetcms.com/ Vulnerable Version: 100728 and Probably Prior Versions Vendor Notification: 09 August 2010...

Flock Browser 3.0.0 - Malformed Bookmark HTML Injection

source: https://www.securityfocus.com/bid/42556/info Flock Browser is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browse...

[DCA-0005] Baby POP Server DoS

DCA-0005 Software - Baby POP Server Vendor Product Description - In the past I have done several projects related to e-mail POP3/SMTP/IMAP4. One of the problems at least in my company is that there are never good test servers available. So that's why I decided to create this simple POP3 server,...

ACollab Multiple Vulnerabilities

Exploit for php platform in category web applications ================================ ACollab Multiple Vulnerabilities ================================ www.BugReport.ir AmnPardaz Security Research Team Title: ACollab Multiple Vulnerabilities Vendor: http://www.atutor.ca/acollab Vulnerable Versio...

Eden Platform 27.07.2010 Cross Site Scripting

======================================= Vulnerability ID: HTB22538 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinedenplatform.html Product: Eden Platform Vendor: Preation http://www.preation.com/ Vulnerable Version: Current at 27.07.2010 and Probably Prior Versions Vendor...

Windows Live Messenger <= 14.0.8117 Animation Remote Denial of Service

Exploit for windows platform in category dos / poc ====================================================================== Windows Live Messenger for the msnlib library / Original msnbot example that I modded = Description: Windows Live Messenger is prone to a Denial of Service attack. By sending...

XSS vulnerability in BXR search

Vulnerability ID: HTB22505 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinbxrsearch.html Product: BXR Vendor: Hulihan Applications http://hulihanapplications.com/projects/bxr Vulnerable Version: 0.6.8 and Probably Prior Versions Vendor Notification: 22 July 2010 Vulnerability Type:...

DT Centrepiece 4.5 - Cross-Site Scripting Security Bypass

DT Centrepiece 4.5 - Cross-Site Scripting Security Bypass source: https://www.securityfocus.com/bid/42243/info DT Centrepiece is prone to multiple cross-site scripting vulnerabilities and multiple security-bypass vulnerabilities. An attacker may leverage the cross-site scripting issues to execute...

XSS vulnerability in Campsite

Vulnerability ID: HTB22494 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincampsite.html Product: Campsite Vendor: Sourcefabric o.p.s http://www.sourcefabric.org/ Vulnerable Version: 3.3.6 and Probably Prior Versions Vendor Notification: 16 July 2010 Vulnerability Type: XSS Cross Sit...

FuseTalk Forums 4.0 Cross Site Scripting

XSS vulnerability in FuseTalk Forums ------------------------------------- Vulnerability ID: Month Of Full Disclosure 1 = MOFD1 ------------------------------------ Product: FuseTalk ------------------------------------- Vendor: FuseTalk Inc...

Jira Cross Site Scripting and Information Disclosure Vulnerabilities

Atlassian JIRA is prone to multiple cross-site scripting vulnerabilities and an information disclosure vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Xerver 4.32 Source Disclosure and HTTP Authentication Bypass

Exploit for windows platform in category remote exploits ============================================================ Xerver 4.32 Source Disclosure and HTTP Authentication Bypass ============================================================ Exploit Title: Xerver Source Disclosure and HTTP Auth...

Impact Software AdPeeps - Cross-Site Scripting / HTML Injection

source: https://www.securityfocus.com/bid/42071/info Impact Software Ad Peeps is prone to multiple cross-site scripting vulnerabilities and multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content...

httpdx Multiple Vulnerabilities

This host is installed with httpdx and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbhttpdxmultvuln.nasl 5306 2017-02-16 09:00:16Z teissa $ httpdx Multiple Vulnerabilities Authors: Sooraj KS Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net Th...

sNews 1.7 - index.php?category SQL Injection

sNews 1.7 - index.php?category SQL Injection sNews v1.7 index.php?category SQL Injection Vulnerability Author : CoBRa21 Author Web Page : http://www.ipbul.org Dork: "Powered by sNews" Sql Injection: http://localhost/path/index.php?category=-3 union select 0,version,2,3,4,5,6,7,8 Thanks...

XSS vulnerability in Spitfire

Vulnerability ID: HTB22485 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinspitfire2.html Product: Spitfire Vendor: Claus Muus http://spitfire.clausmuus.de/ Vulnerable Version: 1.0.336 and Probably Prior Versions Vendor Notification: 08 July 2010 Vulnerability Type: XSS Cross Site...

Quick &#039;n Easy FTP Server 3.9.1 - &#039;USER&#039; Remote Buffer Overflow

source: https://www.securityfocus.com/bid/42186/info Quick 'n Easy FTP Server is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input before copying it to an insufficiently sized memory buffer. An attacker can exploit this iss...

XSS vulnerability in FestOS

Vulnerability ID: HTB22472 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinfestos.html Product: FestOS Vendor: Skypanther Studios, Inc http://festengine.org/ Vulnerable Version: 2.3b and Probably Prior Versions Vendor Notification: 01 July 2010 Vulnerability Type: XSS Cross Site...

XSS vulnerability in Pixie

Vulnerability ID: HTB22468 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinpixie.html Product: Pixie Vendor: Toggle Labs Ltd http://www.getpixie.co.uk/ Vulnerable Version: 1.0.4 and Probably Prior Versions Vendor Notification: 01 July 2010 Vulnerability Type: XSS Cross Site Scripting...