559 matches found
Multiple Vulnerabilities in MiniBB
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in MiniBB which could be exploited to perform script insertion and SQL injection attacks. 1 Script insertion vulnerability in MiniBB Input passed to the "url" BBCode tag is not properly sanitized. A remote attacker...
Multiple Vulnerabilities in eoCMS
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in eoCMS which could be exploited to perform script insertion and SQL injection attacks, gain access to sensitive information and compromise vulnerable system. 1 Script insertion vulnerability in eoCMS An input...
Cross-site Request Forgery (CSRF) Vulnerabilities in MemHT Portal
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in MemHT Portal which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in MemHT Portal 1.1 The vulnerability exists due to insufficient validation of the request...
Cross-site Request Forgery (CSRF) Vulnerabilities in sNews
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in sNews which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in sNews 1.1 The vulnerability exists due to insufficient validation of the request origin in...
Multiple Vulnerabilities in Elxis CMS
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Elxis CMS which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerabilities in Elxis CMS The vulnerability exists due to input sanitation error in the...
Cross-site Request Forgery (CSRF) Vulnerabilities in Mystic
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Mystic which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in Mystic 1.1 The vulnerability exists due to insufficient validation of the request origin in...
XSS in i-Web Suite
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in i-Web Suite which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerability in i-Web Suite The vulnerability exists due to input sanitation error in th...
Cross-site Scripting (XSS) Vulnerability in WebsiteBaker
High-Tech Bridge SA Security Research Lab has discovered vulnerability in WebsiteBaker which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in WebsiteBaker The vulnerability exists due to input sanitation error in the "websitefooter" parameter...
Multiple XSS in Hero Framework
High-Tech Bridge Security Research Lab discovered two XSS vulnerabilities in Hero Framework, which can be exploited to perform cross-site scripting attacks against vulnerable application. 1 Multiple XSS in Hero Framework: CVE-2013-2649 1.1 The vulnerability exists due to insufficient sanitisation...
Multiple Vulnerabilities in webERP
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in webERP, which can be exploited to perform information disclosure, cross-site scripting and SQL injection attacks. 1 Cross-Site Scripting XSS vulnerabilities in webERP Input appended to the URL in multiple files i...
Cross-site Request Forgery (CSRF) Vulnerabilities in phpList
High-Tech Bridge SA Security Research Lab has discovered vulnerabilities in phpList which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF vulnerabilities in phpList 1.1 The vulnerability exists due to insufficient validation of the request origi...
Multiple Vulnerabilities in Dalbum
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Dalbum which could be exploited to perform cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerability in Dalbum The vulnerability exists due to input sanitation error in...
Multiple Vulnerabilities in WP-StarsRateBox
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in WP-StarsRateBox WordPress Plugin which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerability in WP-StarsRateBox The vulnerability exists due to inp...
Multiple Vulnerabilities in phpAlbum.net
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in phpAlbum.net which could be exploited to perform cross-site scripting and cross-site request forgery attacks and compromise vulnerable system. 1 Cross-site scripting XSS vulnerability in phpAlbum.net The...
Cross-site Scripting (XSS) Vulnerabilities in Rating-Widget
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Rating-Widget WordPress plugin which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerabilities in Rating-Widget 1.1 The vulnerability exists due to input sanitation...
Multiple Vulnerabilities in Mingle Forum wordpress plugin
High-Tech Bridge SA Security Research Lab has discovered vulnerabilities in Mingle Forum wordpress plugin which could be exploited to perform script insertion attacks and disclose potentially sensitive information. 1 Script insertion vulnerability in Mingle Forum wordpress plugin Input passed to...
Installation Path Disclosure Weakness in Flatnux
High-Tech Bridge SA Security Research Lab has discovered a weakness in Flatnux which could be exploited to gain access to potentially sensitive information. 1 Installation path disclosure weakness in Flatnux The weakness exists due to application reveals the full path to installation directory in...
Installation Path Disclosure Weakness in Coppermine
High-Tech Bridge SA Security Research Lab has discovered a weakness in Coppermine which could be exploited to gain access to potentially sensitive information. 1 Installation path disclosure weakness in Coppermine The weakness exists due to application reveals the full path to installation...
Cross-site Request Forgery (CSRF) Vulnerabilities in Kandidat CMS
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Kandidat CMS which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in Kandidat CMS 1.1 The vulnerability exists due to insufficient validation of the request...
Multiple vulnerabilities in TCMS
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Target CMS TCMS, which could be exploited to perform cross-site scripting and SQL Injection attacks, read arbitrary files and compromise vulnerable system. 1 Cross-site scripting XSS vulnerabilities in TCMS 1.1 A...
Cross-site Scripting (XSS) Vulnerability in MAXdev
High-Tech Bridge SA Security Research Lab has discovered vulnerability in MAXdev which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in MAXdev The vulnerability exists due to input sanitation error in the "sid" parameter in modules.php. A...
SQL Injection Vulnerabilities in Mac's CMS
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Mac's CMS which could be exploited to perform SQL injection attacks. 1 SQL injection vulnerability in Mac's CMS 1.1 The vulnerability exists due to input sanitation errors in the “commentId” parameter in index.ph...
Cross-site Scripting (XSS) Vulnerabilities in synType CMS
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in synType CMS which could be exploited to perform cross-site scripting and script insertion attacks. 1 Cross-site scripting XSS vulnerability in synType CMS The vulnerability exists due to input sanitation error in...
Cross-site Request Forgery (CSRF) Vulnerabilities in eFront
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in eFront which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in eFront 1.1 The vulnerability exists due to insufficient validation of the request origin in...
Local File Inclusion Vulnerability in TeamCal Pro
High-Tech Bridge SA Security Research Lab has discovered vulnerabilities in TeamCal Pro which could be exploited to compromise vulnerable system. 1 Local file inclusion vulnerability in TeamCal Pro The vulnerability exists due to input sanitation error in the "lang" parameter in index.php. A remo...
Remote File Inclusion Vulnerability in ACal
High-Tech Bridge SA Security Research Lab has discovered vulnerability in ACal which could be exploited to compromise vulnerable system. 1 Remote file inclusion vulnerability in ACal Input passed to the "path" parameter in embed/day.php and embed/month.php scripts is not properly sanitized before...
Multiple Vulnerabilities in phpGraphy
High-Tech Bridge SA Security Research Lab has discovered vulnerabilities in phpGraphy which could be exploited to perform cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerability in phpGraphy The vulnerability exists due to input sanitation error in th...
Cross-site Scripting (XSS) Vulnerability in WonderCMS
High-Tech Bridge SA Security Research Lab has discovered vulnerability in WonderCMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in WonderCMS The vulnerability exists due to input sanitation error in the "content" parameter in...
Multiple Vulnerabilities in CompactCMS
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in CompactCMS which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerabilities in CompactCMS 1.1 The vulnerability exists due to input sanitation error i...
Cross-site Scripting (XSS) Vulnerability in Edit-X CMS
High-Tech Bridge SA Security Research Lab has discovered vulnerability in Edit-X CMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Edit-X CMS The vulnerability exists due to input sanitation error in the "searchtext" parameter in...
Cross-site Request Forgery (CSRF) Vulnerabilities in Onyx
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Onyx which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in Onyx 1.1 The vulnerability exists due to insufficient validation of the request origin in...
Multiple Cross-site Scripting (XSS) Vulnerabilities in allinta CMS
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in allinta CMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerabilities in allinta CMS 1.1 The vulnerability exists due to input sanitation error in the "langURL"...
Cross-site Scripting (XSS) Vulnerability in Vosao CMS
High-Tech Bridge SA Security Research Lab has discovered vulnerability in Vosao CMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Vosao CMS The vulnerability exists due to input sanitation error in the " id" parameter in...
Cross-site Scripting Vulnerabilities in Pretty Link WordPress Plugin
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Pretty Link WordPress Plugin which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerabilities in Pretty Link WordPress Plugin 1.1 Input passed via the "mindate" GET...
Cross-site Scripting Vulnerabilities in Open-Realty
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Open-Realty, which can be exploited to perform cross-site scripting attacks. 1 Cross-site scripting vulnerabilities in Open-Realty 1.1 Input passed via the "name", "email", "friendemail", "subject", "message" POS...
Cross-site Scripting (XSS) Vulnerabilities in TTChat
High-Tech Bridge SA Security Research Lab has discovered two vulnerabilities in TTChat which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerabilities in TTChat The vulnerability exists due to input sanitation error in the "msg" parameter in default.ph...
Cross-site Request Forgery (CSRF) Vulnerabilities in BlogBird
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in BlogBird which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in BlogBird 1.1 The vulnerability exists due to insufficient validation of the request origin in...
Script Insertion Vulnerabilities in ArtGK CMS
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in ArtGK CMS which could be exploited to perform script insertion attacks. 1 Script insertion vulnerabilities in ArtGK CMS 1.1 Input passed to the "content" parameter in cms/classes/CForm.php is not properly sanitiz...
Cross-site Scripting (XSS) Vulnerability in Gekko Web Builderer
High-Tech Bridge SA Security Research Lab has discovered vulnerability in Gekko Web Builder which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Gekko Web Builder The vulnerability exists due to input sanitation error in the "app" parameter...
Multiple vulnerabilities in BugFree
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in BugFree which can be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerabilities in BugFree 1.1 Input passed via the "ActionType" GET parameter to Bug.php is not properly sanitis...
Cross-site Request Forgery (CSRF) in VCalendar
High-Tech Bridge SA Security Research Lab has discovered vulnerability in VCalendar which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in VCalendar The vulnerability exists due to insufficient validation of the request origin in...
Cross-site Scripting (XSS) Vulnerability in WebCalendar
High-Tech Bridge SA Security Research Lab has discovered vulnerability in WebCalendar which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in WebCalendar The vulnerability exists due to input sanitation error in the "lastlogin" parameter in...
Cross-site Request Forgery (CSRF) in Feng Office
High-Tech Bridge SA Security Research Lab has discovered vulnerability in Feng Office which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in Feng Office The vulnerability exists due to insufficient validation of the request origin in index.php...
Multiple Vulnerabilities in Wikipad
High-Tech Bridge SA Security Research Lab has discovered vulnerabilities in Wikipad which could be exploited to perform cross-site scripting and cross-site request forgery attacks and disclose potentially sensitive information. 1 Cross-site scripting XSS vulnerability in Wikipad The vulnerability...
Cross-site Request Forgery (CSRF) Vulnerabilities in osCmax
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in osCmax which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in osCmax 1.1 The vulnerability exists due to insufficient validation of the request origin in...
Cross-site Scripting (XSS) Vulnerabilities in PHP Calendar Basic
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in PHP Calendar Basic which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerabilities in PHP Calendar Basic 1.1 The vulnerability exists due to input sanitation errors in...
Cross-site Scripting (XSS) Vulnerability in BackupPC
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in BackupPC which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerabilities in BackupPC The vulnerability exists due to input sanitation error in multiple parameters in...
Script Insertion Vulnerabilities in Noah's Classifieds
High-Tech Bridge SA Security Research Lab has discovered vulnerabilities in Noah's Classifieds which could be exploited to perform script insertion attacks. 1 Script insertion vulnerability in Noah's Classifieds Input passed to the "col18", "description" and "titlePrefix" parameter in index.php i...
Cross-site Scripting (XSS) Vulnerability in Inline Gallery
High-Tech Bridge SA Security Research Lab has discovered vulnerability in Inline Gallery WordPress plugin which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Inline Gallery The vulnerability exists due to input sanitation error in the " do...
Installation Path Disclosure Weakness in MyBB
High-Tech Bridge SA Security Research Lab has discovered a weakness in MyBB which could be exploited to gain access to potentially sensitive information. 1 Installation path disclosure weakness in MyBB The weakness exists due to application reveals the full path to installation directory in an...