559 matches found
Cross-site Scripting (XSS) Vulnerabilities in XOOPS
High-Tech Bridge SA Security Research Lab has discovered vulnerabilities in XOOPS which could be exploited to perform cross-site scripting and script insertion attacks. 1 Cross-site scripting XSS vulnerabilities in XOOPS: CVE-2011-4565 The vulnerability exists due to input sanitation error in the...
Multiple Vulnerabilities in miniblog
High-Tech Bridge SA Security Research Lab has discovered vulnerabilities in miniblog which could be exploited to perform cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerabilities in miniblog 1.1 The vulnerability exists due to input sanitation error i...
Multiple Vulnerabilities in PHPDug
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in PHPDug which could be exploited to perform cross-site scripting, cross-site request forgery attacks. 1 Cross-site scripting vulnerabilities in PHPDug 1.1 The vulnerability exists due to input sanitation error in...
Multiple Vulnerabilities in Eclime
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Eclime which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerability in Eclime: CVE-2010-4852 The vulnerability exists due to input sanitation error ...
Installation Path Disclosure Weakness in CLANSPHERE
High-Tech Bridge SA Security Research Lab has discovered a weakness in CLANSPHERE which could be exploited to gain access to potentially sensitive information. 1 Installation path disclosure weakness in CLANSPHERE The weakness exists due to application reveals the full path to installation...
Directory Traversal Vulnerability in CrossFTP Pro
High-Tech Bridge SA Security Research Lab has discovered vulnerability in CrossFTP Pro which could be exploited to execute arbitrary code on vulnerable system. 1 Directory Traversal Vulnerability in CrossFTP Pro: CVE-2010-4153 The vulnerability exists due to insufficient sanitation of the...
Cross-site Request Forgery (CSRF) in pimcore
High-Tech Bridge SA Security Research Lab has discovered vulnerability in pimcore which could be exploited to perform cross-site request forgery attacks. 1 Cross-site Request Forgery CSRF in pimcore The vulnerability exists due to insufficient validation of the request origin in...
Multiple Vulnerabilities in Pixie
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Pixie which could be exploited to perform cross-site scripting, script insertions and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerability in Pixie The vulnerability exists due to input...
Cross-site Scripting (XSS) Vulnerabilities in Grafik CMS
High-Tech Bridge SA Security Research Lab has discovered two vulnerabilities in Grafik CMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerabilities in Grafik CMS: CVE-2010-2615 The vulnerability exists due to input sanitation error in the...
Multiple Vulnerabilities in CuteSITE CMS
High-Tech Bridge SA Security Research Lab has discovered three vulnerabilities in CuteSITE CMS which could be exploited to perform cross-site scripting and cross-site request forgery attacks and execute arbitrary SQL commands in applications database. 1 Cross-site scripting XSS vulnerability in...
Multiple Vulnerabilities in LightNEasy CMS
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in LightNEasy CMS which could be exploited to perform script insertion, cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerability in LightNEasy CMS 1.1 The vulnerability...
Reflected Cross-Site Scripting (XSS) in Jamroom
High-Tech Bridge Security Research Lab discovered vulnerability in Jamroom, which can be exploited to perform Cross-Site Scripting XSS attacks. 1 Reflected Cross-Site Scripting XSS in Jamroom: CVE-2014-5098 The vulnerability exists due to insufficient sanitization of user-supplied data after the...
Cross-Site Scripting (XSS) in Jamroom
High-Tech Bridge Security Research Lab discovered vulnerability in Jamroom, which can be exploited to perform Cross-Site Scripting XSS attacks. 1 Cross-Site Scripting XSS in Jamroom: CVE-2013-6804 The vulnerability exists due to insufficient sanitisation of user-supplied data in "searchstring" HT...
Nero MediaHome Multiple Remote DoS Vulnerabilities
High-Tech Bridge Security Research Lab has discovered multiple DoS vulnerabilities in Nero Media Home server, which could be exploited by a malicious person to crash the server remotely. 1 Off-by-one errors in Nero MediaHome server: CVE-2012-5876 1.1 The vulnerability exists due to an off-by-one...
Multiple vulnerabilities in Tine 2.0
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Tine 2.0, which can be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerabilities in Tine 2.0 1.1 Input passed via the "lang" GET parameter to /library/idnaconvert/example.php i...
Cross-site Scripting (XSS) Vulnerabilities in eShop for Wordpress
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in eShop for Wordpress which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerabilities in eShop for Wordpress 1.1 The vulnerability exists due to input sanitation error i...
Multiple Vulnerabilities in LoudBlog
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in LoudBlog which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerability in LoudBlog The vulnerability exists due to input sanitation error in the "id"...
SQL Injection Vulnerability in SuperCali PHP Event Calendar
High-Tech Bridge SA Security Research Lab has discovered vulnerability in SuperCali PHP Event Calendar which could be exploited to perform SQL injection attacks. 1 SQL injection vulnerability in SuperCali PHP Event Calendar The vulnerability exists due to input sanitation errors in the "categoryi...
SQL Injection Vulnerability in Shutter
High-Tech Bridge SA Security Research Lab has discovered vulnerability in Shutter which could be exploited to perform SQL injection attacks. 1 SQL injection vulnerability in Shutter The vulnerability exists due to input sanitation errors in the "albumID" parameter in index.html. A remote attacker...
Multiple Vulnerabilities in LotusCMS
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in LotusCMS which can be exploited to perform cross-site scripting and cross-site request forgery attacks and gain access to sensitive information. 1 Cross-site scripting XSS vulnerabilities in LotusCMS 1.1 The...
Cross-site Scripting (XSS) Vulnerability in Question and Answer Forum
High-Tech Bridge SA Security Research Lab has discovered vulnerability in Question and Answer Forum WordPress plugin which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Question and Answer Forum The vulnerability exists due to input...
Multiple Vulnerabilities in Redaxscript
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Redaxscript which could be exploited to perform SQL injection attacks and gain access to sensitive information. 1 SQL injection vulnerabilities in Redaxscript The vulnerability exists due to input sanitation erro...
Multiple Vulnerabilities in HTML-EDIT CMS
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in HTML-EDIT CMS which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerability in HTML-EDIT CMS: CVE-2010-4610 The vulnerability exists due to input...
Multiple Vulnerabilities in DynPG
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in DynPG which could be exploited to perform SQL injection attacks, disclose potentially sensitive information and compromise vulnerable system. 1 Installation path disclosure weakness in in DynPG: CVE-2010-4401 The...
SQL Injection Vulnerability in DeluxeBB
High-Tech Bridge SA Security Research Lab has discovered vulnerability in DeluxeBB which could be exploited to execute arbitrary SQL commands in applications database. 1 SQL injection vulnerability in DeluxeBB: CVE-2010-4151 An input validation error exists in the "xthedateformat" parameter in...
Multiple Vulnerabilities in BXR
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in BXR which could be exploited to perform cross-site scripting, cross-site request forgery and SQL injection attacks. 1 Cross-site scripting XSS vulnerability in BXR 1.1 The vulnerability exists due to input...
Cross-site Scripting (XSS) Vulnerabilities in odCMS
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in odCMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in odCMS 1.1 The vulnerability exists due to input sanitation error in the "content" parameter in...
SQL Injection in Dokeos
High-Tech Bridge Security Research Lab discovered vulnerability in Dokeos, which can be exploited to perform SQL Injection attacks. 1 SQL Injection in Dokeos: CVE-2013-6341 The vulnerability exists due to insufficient validation of "language" HTTP GET parameter passed to "/index.php" script. A...
FireFly Media Server Multiple Remote DoS Vulnerabilities
High-Tech Bridge Security Research Lab has discovered multiple remote denial of service DoS vulnerabilities in FireFly Media Server, which could be exploited by a malicious person to crash a remote server. 1 Multiple NULL pointer dereference vulnerabilities in FireFly Media Server: CVE-2012-5875...
Cross-site Scripting (XSS) Vulnerability in Happy Chat
High-Tech Bridge SA Security Research Lab has discovered vulnerability in Happy Chat which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Happy Chat The vulnerability exists due to input sanitation error in the "nick" parameter in...
Installation Path Disclosure Weakness in Tribiq CMS | HTB22857
High-Tech Bridge SA Security Research Lab has discovered a weakness in Tribiq CMS which could be exploited to gain access to potentially sensitive information. 1 Installation path disclosure weakness in Tribiq CMS: CVE-2011-2727 The weakness exists due to application reveals the full path to...
Cross-site Request Forgery (CSRF) in KaiBB
High-Tech Bridge SA Security Research Lab has discovered vulnerability in KaiBB which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in KaiBB The vulnerability exists due to insufficient validation of the request origin in admin/core/account.ph...
Cross-site Scripting (XSS) Vulnerability in ImpressCMS
High-Tech Bridge SA Security Research Lab has discovered vulnerability in ImpressCMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in ImpressCMS: CVE-2010-4616 The vulnerability exists due to input sanitation error in the...
Cross-site Scripting (XSS) Vulnerabilities in Docebo
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Docebo which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Docebo 1.1 The vulnerability exists due to input sanitation error in the "upsignature" paramete...
Multiple Vulnerabilities in Gazelle CMS
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Gazelle CMS which could be exploited to perform cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerability in Gazelle CMS The vulnerability exists due to input sanitatio...
Multiple vulnerabilities in web@all
High-Tech Bridge Security Research Lab has discovered multiple vulnerabilities in web@all, which can be exploited to perform Сross-Site Request Forgery CSRF and Cross-Site Scripting XSS attacks. 1 Сross-Site Request Forgery CSRF in web@all: CVE-2012-3231 1.1 The application allows authorized...
Cross-site Scripting (XSS) Vulnerabilities in phpScheduleIt
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in phpScheduleIt which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerabilities in phpScheduleIt 1.1 The vulnerability exists due to input sanitation errors in URL in th...
Cross-site Scripting (XSS) Vulnerability in WP-Ajax-Recent-Posts
High-Tech Bridge SA Security Research Lab has discovered vulnerability in WP-Ajax-Recent-Posts which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in WP-Ajax-Recent-Posts The vulnerability exists due to input sanitation error in the "number"...
Multiple Vulnerabilities in UseBB
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in UseBB which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF vulnerabilities in UseBB 1.1 The vulnerability exists due to insufficient validation of the request...
Multiple Vulnerabilities in CosmoShop
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in CosmoShop which can be exploited to perform cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerabilities in CosmoShop 1.1 The vulnerability exists due to input sanitatio...
Cross-site Request Forgery (CSRF) in whCMS
High-Tech Bridge SA Security Research Lab has discovered vulnerability in whCMS which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in whCMS The vulnerability exists due to insufficient validation of the request origin in admin/index.php. A...
Multiple Vulnerabilities in SweetRice CMS
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in SweetRice CMS which could be exploited to perform cross-site scripting and SQL injection attacks and change administrators password. 1 Cross-site scripting XSS vulnerability in SweetRice CMS The vulnerability...
Multiple SQL injection vulnerabilities in e107
High-Tech Bridge SA Security Research Lab has discovered three SQL injection vulnerabilities in e107 which could lead to execution of arbitrary SQL commands in applications database. 1 SQL injection vulnerabilities in e107 1.1 An input validation error exists in the URL in /e107admin/wmessage.php...
SQL Injection Vulnerability in SyntaxCMS
High-Tech Bridge SA Security Research Lab has discovered vulnerability in SyntaxCMS which could be exploited to execute arbitrary SQL commands in applications database. 1 SQL injection vulnerability in SyntaxCMS An input validation error exists in the "rowsperpage" parameter in...
Directory Traversal Vulnerability in FTP Explorer
High-Tech Bridge SA Security Research Lab has discovered vulnerability in FTP Explorer which could be exploited to execute arbitrary code on vulnerable system. 1 Directory Traversal Vulnerability in FTP Explorer: CVE-2010-3101 The vulnerability exists due to insufficient sanitation of the...
Cross-site Scripting (XSS) Vulnerability in Prado Portal
High-Tech Bridge SA Security Research Lab has discovered vulnerability in Prado Portal which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Prado Portal: CVE-2010-4958 The vulnerability exists due to input sanitation error in the "page"...
SQL injection Vulnerabilities in WebDB
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in WebDB which could be exploited to perform SQL injection attacks. 1 SQL injection vulnerabilities in WebDB 1.1 The vulnerability exists due to input sanitation errors in the multiple parameters in loisweb/index.as...
Multiple Vulnerabilities in gpEasy CMS
High-Tech Bridge SA Security Research Lab has discovered two vulnerabilities in gpEasy CMS which could be exploited to perform cross-site scripting and cross-sire request forgery attacks. 1 Cross-site scripting vulnerability in gpEasy CMS: CVE-2010-2038 The vulnerability exists due to input...
Cross-site Scripting Vulnerability in Acuity CMS
High-Tech Bridge SA Security Research Lab has discovered a vulnerability in Acuity CMS which could be exploited to perform cross-site scripting XSS attacks. 1 Cross-site scripting vulnerability in Acuity CMS Input sanitation error was found in the "page" parameter in /admin/pages/addpage.asp. A...
Multiple vulnerabilities in OBM
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in OBM, which can be exploited to perform cross-site scripting, local file inclusion and SQL injection attacks and gain access to sensitive information. 1 Local File Inclusion in OBM 1.1 Input passed via the "module...