CMS WebManager-Pro 7.4.3 Code Execution / Cross Site Request Forgery

Hello list! I want to warn you about Remote Code Execution and Cross-Site Request Forgery vulnerabilities in CMS WebManager-Pro. This CMS is widely using at different web sites, including security and government sites. ------------------------- Affected products: -------------------------...

eSitesBuilder Cross Site Scripting / Path Disclosure / SQL Injection

Hello Full-Disclosure! I want to warn you about multiple vulnerabilities in eSitesBuilder. After previous vulnerabilities in eSitesBuilder SecurityVulns ID:10940, which I wrote earlier in June, there are Insufficient Anti-automation, Cross-Site Scripting, SQL Injection and Full path disclosure...

Cimy Counter For Wordpress Full Path Disclosure / Cross Site Scripting

Hello Full-Disclosure! I want to warn you about security vulnerabilities in plugin Cimy Counter for WordPress. ----------------------------- Advisory: Vulnerabilities in Cimy Counter for WordPress ----------------------------- URL: http://websecurity.com.ua/4170/ -----------------------------...

Insufficient Authentication vulnerability in Acer notebooks

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Insufficient Authentication уязвимости в ноутбуках Acer. Уязвимость я обнаружил 28.04.2009 на двух моих ноутбуках. На данных ноутбуках используется Windows XP Home Rus, в случае других ОС уязвимость также может присутствовать. В Windows XP Home в...

Vulnerabilities in Yandex.Server

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting уязвимостях в локальном поисковике Яndex.Server. Уязвимости в параметрах query и within в главном скрипте. XSS: http://site/search/?query=223E3Cscript3Ealertdocument.cookie3C/script3E...