XSS vulnerability in Auto CMS

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Auto CMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Auto CMS: CVE-2010-4882 The vulnerability exists due to input sanitation error in the "sitetitle"...

Directory Traversal Vulnerability in TurboFTP Server

High-Tech Bridge SA Security Research Lab has discovered vulnerability in TurboFTP Server which could be exploited to delete or execute arbitrary files on vulnerable system. 1 Directory Traversal Vulnerability in TurboFTP Server The vulnerability exists due to insufficient sanitation of the...

Cross-site Scripting (XSS) Vulnerability in CMSQLite

High-Tech Bridge SA Security Research Lab has discovered vulnerability in CMSQLite which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in CMSQLite The vulnerability exists due to input sanitation error in the "langId" parameter in...

Ashampoo 3D CAD Professional 3 ActiveX control Insecure Method

High-Tech Bridge SA Security Research Lab has discovered a vulnerability in Ashampoo 3D CAD Professional 3 ActiveX control which could be exploited to compromise vulnerable system. 1 Insecure method in Ashampoo 3D CAD Professional 3 ActiveX Control The vulnerability is caused due to the...

Cross-site Scripting (XSS) Vulnerability in FanUpdate

High-Tech Bridge SA Security Research Lab has discovered vulnerability in FanUpdate which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in FanUpdate The vulnerability exists due to input sanitation error in the "pageTitle" parameter in...

Kofax e-Transactions Sender Sendbox ActiveX Control Insecure Method

High-Tech Bridge SA Security Research Lab has discovered a vulnerability in Kofax e-Transactions Sender Sendbox, which can be exploited to overwrite arbitrary files. 1 Insecure method in Kofax e-Transactions Sender Sendbox ActiveX Control The vulnerability is caused due to the LEADeMail.LEADSmtp....

Cross-site Scripting (XSS) Vulnerability in AJAX Calendar

High-Tech Bridge SA Security Research Lab has discovered vulnerability in AJAX Calendar which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in AJAX Calendar The vulnerability exists due to input sanitation error in the "y" parameter in...

Cross-site Scripting (XSS) Vulnerabilities in Sodahead Polls

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Sodahead Polls which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerabilities in Sodahead Polls 1.1 The vulnerability exists due to input sanitation errors in the...

Multiple Vulnerabilities in Pivotx

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Pivotx which could be exploited to perform cross-site scripting attacks and disclose potentially sensitive information. 1 Cross-site scripting XSS vulnerabilities in Pivotx: CVE-2011-0772 1.1 The vulnerability...

Multiple Vulnerabilities in Energine

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Energine which could be exploited to perform cross-site request forgery and SQL injection attacks. 1 Cross-site request forgery CSRF in in Energine The vulnerability exists due to insufficient validation of the...

Multiple Vulnerabilities in PluXml

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in PluXml which could be exploited to perform cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerabilities in PluXml 1.1 The vulnerability exists due to input sanitation...

Multiple Vulnerabilities in CMS Source

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in CMS Source, which could be exploited to perform cross-site scripting and SQL Injection attacks and compromise vulnerable system. 1 Cross-site scripting XSS vulnerabilities in CMS Source 1.1 The vulnerability exis...

Cross-site Scripting (XSS) Vulnerabilities in eazyCMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in eazyCMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerabilities in eazyCMS 1.1 The vulnerability exists due to input sanitation error in the "pageid" parameter...

Multiple Vulnerabilities in DT Centrepiece

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in DT Centrepiece which could be exploited to perform cross-site scripting attacks and bypass certain security restrictions. 1 Cross-site scripting XSS vulnerabilities in DT Centrepiece 1.1 The vulnerability exists...

Directory Traversal Vulnerability in 32bit FTP Client

High-Tech Bridge SA Security Research Lab has discovered vulnerability in 32bit FTP Client which could be exploited to execute arbitrary code on vulnerable system. 1 Directory Traversal Vulnerability in 32bit FTP Client The vulnerability exists due to insufficient sanitation of the downloaded...

Multiple Vulnerabilities in phpwcms

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in phpwcms which could be exploited to perform cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerability in phpwcms The vulnerability exists due to input sanitation error ...

Cross-site Scripting (XSS) Vulnerability in DSite CMS

High-Tech Bridge SA Security Research Lab has discovered vulnerability in DSite CMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in DSite CMS The vulnerability exists due to input sanitation error in the "buttonname" parameter in...

Cross-site Scripting (XSS) Vulnerability in Taggon CMS

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Taggon CMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Taggon CMS The vulnerability exists due to input sanitation error in the multiple parameters in...

Multiple Vulnerabilities in DBHcms

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in DBHcms which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerabilities in DBHcms 1.1 The vulnerability exists due to input sanitation error in the...

Multiple Vulnerabilities in BloofoxCMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in BloofoxCMS which could be exploited to perform cross-site request forgery and SQL injection attacks. 1 Cross-site request forgery CSRF in BloofoxCMS The vulnerability exists due to insufficient validation of the...

Cross-site Scripting (XSS) Vulnerabilities in Webmedia Explorer

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Webmedia Explorer which could be exploited to perform cross-site scripting and script insertion attacks. 1 Cross-site scripting XSS vulnerability in Webmedia Explorer The vulnerability exists due to input...

Cross-site Scripting Vulnerability in 360 Web Manager

High-Tech Bridge SA Security Research Lab has discovered vulnerability in 360 Web Manager which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in 360 Web Manager The vulnerability exists due to input sanitation error in the "IDM" parameter in...

Multiple vulnerabilities in Help Desk Software

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Help Desk Software, which can be exploited to perform SQL injection, cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting vulnerabilities in Help Desk Software Input passed via the...

SQL injection in Social Slider

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Social Slider, which can be exploited to perform SQL injection attacks. 1 SQL Injection Vulnerability in Social Slider Input passed via the "rA" POST parameter to /wp-content/plugins/social-slider-2/ajax.php is not properly...

Open Redirect Weakness in MBoard

High-Tech Bridge SA Security Research Lab has discovered weakness in MBoard which could be exploited to perform phishing attacks. 1 Open redirect weakness in MBoard The weakness exists due to insufficient validation of the input data in the "url" parameter in go.php when redirecting users to...

Insecure Method in aTube Catcher ActiveX Control

High-Tech Bridge SA Security Research Lab has discovered vulnerability in aTube Catcher ActiveX Control which could be exploited to perform denial of service attacks. 1 Insecure method in aTube Catcher ActiveX Control The vulnerability exists due to existence of insecure method SaveDecrypted in t...

Multiple Vulnerabilities in Free Simple CMS

High-Tech Bridge SA Security Research Lab has discovered vulnerabilities in Free Simple CMS which could be exploited to perform cross-site scripting attacks and compromise vulnerable system. 1 Cross-site scripting XSS vulnerabilities in Free Simple CMS 1.1 The vulnerability exists due to input...

Cross-site Scripting (XSS) Vulnerability in Max's PHP Photo Album

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Max's PHP Photo Album which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Max's PHP Photo Album The vulnerability exists due to input sanitation error in the "id"...

Multiple Vulnerabilities in ZENphoto

High-Tech Bridge SA Security Research Lab has discovered vulnerabilities in ZENphoto which could be exploited to perform cross-site scripting attacks and disclose potentially sensitive information. 1 Cross-site scripting XSS vulnerability in ZENphoto The vulnerability exists due to input sanitati...

Multiple Vulnerabilities in Eleanor CMS

High-Tech Bridge SA Security Research Lab has discovered vulnerabilities in Eleanor CMS which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerability in Eleanor CMS The vulnerability exists due to input sanitation error in the...

Cross-site Scripting (XSS) Vulnerability in Spitfire

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Spitfire which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Spitfire The vulnerability exists due to input sanitation error in the " cmsusername " cookie in...

Installation Path Disclosure Weakness in bbPress

High-Tech Bridge SA Security Research Lab has discovered a weakness in bbPress which could be exploited to gain access to potentially sensitive information. 1 Installation path disclosure weakness in bbPress The weakness exists due to application reveals the full path to installation directory in...

Multiple Vulnerabilities in SyndeoCMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in SyndeoCMS which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerabilities in SyndeoCMS 1.1 The vulnerability exists due to input sanitation error in...

Cross-site Scripting (XSS) Vulnerabilities in Rating-Widget

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Rating-Widget WordPress plugin which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerabilities in Rating-Widget 1.1 The vulnerability exists due to input sanitation...

Multiple Vulnerabilities in 1 Flash Gallery wordpress plugin

High-Tech Bridge SA Security Research Lab has discovered vulnerabilities in 1 Flash Gallery wordpress plugin which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerability in 1 Flash Gallery wordpress plugin The vulnerability exists du...

Cross-site Request Forgery (CSRF) in Cambio

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Cambio which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in Cambio The vulnerability exists due to insufficient validation of the request origin in...

Cross-site Request Forgery (CSRF) Vulnerabilities in Amiro.CMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Amiro.CMS which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in Amiro.CMS 1.1 The vulnerability exists due to insufficient validation of the request origin i...

Cross-site Scripting (XSS) Vulnerabilities in WebPress

High-Tech Bridge SA Security Research Lab has discovered vulnerabilities in WebPress which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerabilities in WebPress 1.1 The vulnerability exists due to input sanitation error in the "idnummod" parameter in...

XSS vulnerability in Jaws

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Jaws which could be exploited to perform cross-site scripting XSS attacks. 1 Cross-site scripting vulnerability in Jaws The vulnerability exists due to input sanitation error in the "url" parameter in the "edit profile"...

Cross-site Request Forgery in e107

High-Tech Bridge SA Security Research Lab has discovered vulnerabilities in e107 which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in e107 The vulnerability exists due to insufficient verification of the request origin in...

Installation Path Disclosure Weakness in Flatnux

High-Tech Bridge SA Security Research Lab has discovered a weakness in Flatnux which could be exploited to gain access to potentially sensitive information. 1 Installation path disclosure weakness in Flatnux The weakness exists due to application reveals the full path to installation directory in...

Cross-site Scripting (XSS) Vulnerability in WonderCMS

High-Tech Bridge SA Security Research Lab has discovered vulnerability in WonderCMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in WonderCMS The vulnerability exists due to input sanitation error in the "content" parameter in...

Multiple Vulnerabilities in KaiBB

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in KaiBB which could be exploited to perform script insertions and SQL injection attacks. 1 Script insertion vulnerability in KaiBB Input passed to the "url" BBCode tag is not properly sanitized. A remote attacker c...

Local File Inclusion Vulnerability in Exponent CMS

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Exponent CMS which could be exploited to include and execute arbitrary local files on the target system. 1 Local file inclusion in Exponent CMS Input passed to the "module" parameter in podcast.php and rss.php is not proper...

Multiple Vulnerabilities in MiniBB

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in MiniBB which could be exploited to perform script insertion and SQL injection attacks. 1 Script insertion vulnerability in MiniBB Input passed to the "url" BBCode tag is not properly sanitized. A remote attacker...

Multiple Vulnerabilities in eoCMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in eoCMS which could be exploited to perform script insertion and SQL injection attacks, gain access to sensitive information and compromise vulnerable system. 1 Script insertion vulnerability in eoCMS An input...

Cross-site Request Forgery (CSRF) Vulnerabilities in MemHT Portal

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in MemHT Portal which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in MemHT Portal 1.1 The vulnerability exists due to insufficient validation of the request...

Cross-site Request Forgery (CSRF) Vulnerabilities in sNews

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in sNews which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in sNews 1.1 The vulnerability exists due to insufficient validation of the request origin in...

Installation Path Disclosure Weakness in Tribiq CMS | HTB22640

High-Tech Bridge SA Security Research Lab has discovered a weakness in Tribiq CMS which could be exploited to gain access to potentially sensitive information. 1 Installation path disclosure weakness in Tribiq CMS The weakness exists due to application reveals the full path to installation...

Cross-site Request Forgery (CSRF) in Lara

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Lara which could be exploited to perform cross-site request forgery attacks. 1 Cross-site Request Forgery CSRF in Lara The vulnerability exists due to insufficient validation of the request origin in ui/changepassword. A...