Pixelpost 1.7.3 Cross Site Scripting / Disclosure

================================ Vulnerability ID: HTB22794 Reference: http://www.htbridge.ch/advisory/pathdisclousureinpixelpost.html Product: Pixelpost Vendor: Pixelpost http://www.pixelpost.org/ Vulnerable Version: 1.7.3 Vendor Notification: 11 January 2011 Vulnerability Type: Path disclousure...

Pivotx 2.2.0 Cross Site Scripting / Path Disclosure

================================== Vulnerability ID: HTB22788 Reference: http://www.htbridge.ch/advisory/xssinpivotx.html Product: Pivotx Vendor: Pivotx Team http://pivotx.net/ Vulnerable Version: 2.2.0 Vendor Notification: 11 January 2011 Vulnerability Type: XSS Cross Site Scripting Status:...

Path disclosure in Energine

Vulnerability ID: HTB22784 Reference: http://www.htbridge.ch/advisory/pathdisclosureinenergine.html Product: Energine Vendor: Energine http://www.energine.org/ Vulnerable Version: 2.3.8 and probably prior versions Vendor Notification: 28 December 2010 Vulnerability Type: Path disclosure Status: N...

Path disclousure in phpMySport

Vulnerability ID: HTB22773 Reference: http://www.htbridge.ch/advisory/pathdisclousureinphpmysport.html Product: phpMySport Vendor: phpMySport http://phpmysport.sourceforge.net/ Vulnerable Version: 1.4 Vendor Notification: 21 December 2010 Vulnerability Type: Path disclosure Status: Not Fixed,...

Path disclousure in ocPortal

Vulnerability ID: HTB22761 Reference: http://www.htbridge.ch/advisory/pathdisclousureinocportal.html Product: ocPortal Vendor: ocProducts Ltd http://ocportal.com Vulnerable Version: 5.0.3 Vendor Notification: 15 December 2010 Vulnerability Type: Path disclosure Status: Not Fixed, Vendor Alerted,...

Habari Multiple Vulnerabilities

Habari is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Habari Blog Multiple Vulnerabilities

Exploit for php platform in category web applications Vulnerability ID: HTB22732 Reference: http://www.htbridge.ch/advisory/pathdisclosureinhabari.html Product: Habari Vendor: Habari http://habariproject.org/en/ Vulnerable Version: 0.6.5 Vendor Notification: 02 December 2010 Vulnerability Type:...

HTML-EDIT CMS 3.1.8 Cross Site Scripting / Path Disclosure / SQL Injection

Vulnerability ID: HTB22734 Reference: http://www.htbridge.ch/advisory/sqlinjectioninhtmleditcms.html Product: HTML-EDIT CMS Vendor: html-edit web services http://www.html-edit.org/ Vulnerable Version: 3.1.8 Vendor Notification: 02 December 2010 Vulnerability Type: SQL Injection Status: Fixed by...

Habari Blog - Multiple Vulnerabilities

Habari Blog - Multiple Vulnerabilities Vulnerability ID: HTB22732 Reference: http://www.htbridge.ch/advisory/pathdisclosureinhabari.html Product: Habari Vendor: Habari http://habariproject.org/en/ Vulnerable Version: 0.6.5 Vendor Notification: 02 December 2010 Vulnerability Type: Path disclosure...

GetSimple CMS 2.03 Path Disclosure

Vulnerability ID: HTB22730 Reference: http://www.htbridge.ch/advisory/pathdisclosureingetsimplecms.html Product: GetSimple CMS Vendor: http://get-simple.info/ http://get-simple.info/ Vulnerable Version: 2.03 Vendor Notification: 02 December 2010 Vulnerability Type: Path disclosure Status: Not...

Path disclosure in HTML-EDIT CMS

Vulnerability ID: HTB22736 Reference: http://www.htbridge.ch/advisory/pathdisclosureinhtmleditcms.html Product: HTML-EDIT CMS Vendor: html-edit web services http://www.html-edit.org/ Vulnerable Version: 3.1.8 Vendor Notification: 02 December 2010 Vulnerability Type: Path disclosure Status: Fixed ...

Path disclosure in Habari

Vulnerability ID: HTB22732 Reference: http://www.htbridge.ch/advisory/pathdisclosureinhabari.html Product: Habari Vendor: Habari http://habariproject.org/en/ Vulnerable Version: 0.6.5 Vendor Notification: 02 December 2010 Vulnerability Type: Path disclosure Status: Fixed by Vendor Risk level: Low...

html-edit CMS - Multiple Vulnerabilities

Vulnerability ID: HTB22734 Reference: http://www.htbridge.ch/advisory/sqlinjectioninhtmleditcms.html Product: HTML-EDIT CMS Vendor: html-edit web services http://www.html-edit.org/ Vulnerable Version: 3.1.8 Vendor Notification: 02 December 2010 Vulnerability Type: SQL Injection Status: Fixed by...

Habari Blog - Multiple Vulnerabilities

Vulnerability ID: HTB22732 Reference: http://www.htbridge.ch/advisory/pathdisclosureinhabari.html Product: Habari Vendor: Habari http://habariproject.org/en/ Vulnerable Version: 0.6.5 Vendor Notification: 02 December 2010 Vulnerability Type: Path disclosure Status: Fixed by Vendor Risk level: Low...

Path disclosure in BIGACE Web CMS

Vulnerability ID: HTB22690 Reference: http://www.htbridge.ch/advisory/pathdisclosureinbigacewebcms.html Product: BIGACE Web CMS Vendor: Kevin Papst http://www.bigace.de/ Vulnerable Version: 2.7.3 Vendor Notification: 02 November 2010 Vulnerability Type: Path disclosure Status: Not Fixed, Vendor...

CVE-2009-5019

Web Wiz NewsPad stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/NewsPad.mdb...

Improper access control

Web Wiz NewsPad stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/NewsPad.mdb...

Path disclosure in Enano CMS

Vulnerability ID: HTB22708 Reference: http://www.htbridge.ch/advisory/pathdisclosureinenanocms.html Product: Enano CMS Vendor: enanocms.org http://enanocms.org/ Vulnerable Version: 1.1.7pl1 Vendor Notification: 16 November 2010 Vulnerability Type: Path disclosure Status: Fixed by Vendor Risk leve...

Apache Tomcat Examples Web Root Path Disclosure

The instance of Apache Tomcat listening on the remote host is affected by an information disclosure vulnerability. An attacker is able to determine the Tomcat application's web root path by requesting any one of numerous example files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Path disclosure in CLANSPHERE

Vulnerability ID: HTB22692 Reference: http://www.htbridge.ch/advisory/pathdisclosureinclansphere.html Product: CLANSPHERE Vendor: csphere.eu http://www.csphere.eu/ Vulnerable Version: 2010.0 Final Vendor Notification: 02 November 2010 Vulnerability Type: Path disclosure Status: Fixed by Vendor Ri...