Lucene search
+L
HtbridgeMost viewed

559 matches found

htbridge
htbridge
added 2010/09/27 12:00 a.m.42 views

Directory Traversal Vulnerability in CrossFTP Pro

High-Tech Bridge SA Security Research Lab has discovered vulnerability in CrossFTP Pro which could be exploited to execute arbitrary code on vulnerable system. 1 Directory Traversal Vulnerability in CrossFTP Pro: CVE-2010-4153 The vulnerability exists due to insufficient sanitation of the...

7.6CVSS7.8AI score0.01391EPSS
SaveExploits0Affected Software1
htbridge
htbridge
added 2010/06/14 12:00 a.m.42 views

Cross-site Scripting (XSS) Vulnerabilities in PortalApp

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in PortalApp which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in PortalApp 1.1 The vulnerability exists due to input sanitation error in multiple parameters ...

4.3CVSS6.1AI score0.02306EPSS
SaveExploits1Affected Software1
htbridge
htbridge
added 2012/11/21 12:00 a.m.41 views

Nero MediaHome Multiple Remote DoS Vulnerabilities

High-Tech Bridge Security Research Lab has discovered multiple DoS vulnerabilities in Nero Media Home server, which could be exploited by a malicious person to crash the server remotely. 1 Off-by-one errors in Nero MediaHome server: CVE-2012-5876 1.1 The vulnerability exists due to an off-by-one...

3.3CVSS6.8AI score0.07476EPSS
SaveExploits6Affected Software1
htbridge
htbridge
added 2012/09/12 12:00 a.m.41 views

Multiple vulnerabilities in Template CMS

High-Tech Bridge Security Research Lab discovered multiple vulnerabilities in Template CMS, which can be exploited to perform Cross-Site Scripting XSS and Сross-Site Request Forgery CSRF attacks. 1 Cross-Site Scripting XSS in Template CMS: CVE-2012-4901 Input passed via the "themeseditor" POST...

7.6CVSS0.5AI score0.02007EPSS
SaveExploits6Affected Software1
htbridge
htbridge
added 2012/06/25 12:00 a.m.41 views

Multiple vulnerabilities in Samsung Kies

High-Tech Bridge Security Research Lab has discovered multiple vulnerabilities in Samsung Kies synchronization utility that allows remote attacker to compromise affected system, execute and modify arbitrary files, modify arbitrary directories and modify System Registry with privileges of the...

6.8CVSS0.2AI score0.31563EPSS
SaveExploits3Affected Software1
htbridge
htbridge
added 2011/07/20 12:00 a.m.41 views

Cross-site Scripting (XSS) Vulnerabilities in eShop for Wordpress

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in eShop for Wordpress which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerabilities in eShop for Wordpress 1.1 The vulnerability exists due to input sanitation error i...

2.6CVSS6.5AI score
SaveExploits0Affected Software1
htbridge
htbridge
added 2011/05/25 12:00 a.m.41 views

Multiple Vulnerabilities in miniblog

High-Tech Bridge SA Security Research Lab has discovered vulnerabilities in miniblog which could be exploited to perform cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerabilities in miniblog 1.1 The vulnerability exists due to input sanitation error i...

5.1CVSS6.5AI score
SaveExploits0Affected Software1
htbridge
htbridge
added 2011/05/17 12:00 a.m.41 views

Multiple Vulnerabilities in LoudBlog

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in LoudBlog which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerability in LoudBlog The vulnerability exists due to input sanitation error in the "id"...

7.5CVSS7.4AI score
SaveExploits0Affected Software1
htbridge
htbridge
added 2011/04/21 12:00 a.m.41 views

Multiple Vulnerabilities in PHPDug

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in PHPDug which could be exploited to perform cross-site scripting, cross-site request forgery attacks. 1 Cross-site scripting vulnerabilities in PHPDug 1.1 The vulnerability exists due to input sanitation error in...

5.1CVSS7.2AI score
SaveExploits0Affected Software1
htbridge
htbridge
added 2011/03/01 12:00 a.m.41 views

Multiple Vulnerabilities in LotusCMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in LotusCMS which can be exploited to perform cross-site scripting and cross-site request forgery attacks and gain access to sensitive information. 1 Cross-site scripting XSS vulnerabilities in LotusCMS 1.1 The...

5.1CVSS6.8AI score
SaveExploits0Affected Software1
htbridge
htbridge
added 2011/02/15 12:00 a.m.41 views

Cross-site Scripting (XSS) Vulnerability in Question and Answer Forum

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Question and Answer Forum WordPress plugin which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Question and Answer Forum The vulnerability exists due to input...

4.3CVSS6AI score
SaveExploits0Affected Software1
htbridge
htbridge
added 2011/01/18 12:00 a.m.41 views

Multiple Vulnerabilities in Redaxscript

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Redaxscript which could be exploited to perform SQL injection attacks and gain access to sensitive information. 1 SQL injection vulnerabilities in Redaxscript The vulnerability exists due to input sanitation erro...

7.5CVSS8.8AI score
SaveExploits0Affected Software1
htbridge
htbridge
added 2010/11/16 12:00 a.m.41 views

Multiple Vulnerabilities in DynPG

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in DynPG which could be exploited to perform SQL injection attacks, disclose potentially sensitive information and compromise vulnerable system. 1 Installation path disclosure weakness in in DynPG: CVE-2010-4401 The...

7.6CVSS7.7AI score0.0561EPSS
SaveExploits4Affected Software1
htbridge
htbridge
added 2010/10/05 12:00 a.m.41 views

SQL Injection Vulnerability in DeluxeBB

High-Tech Bridge SA Security Research Lab has discovered vulnerability in DeluxeBB which could be exploited to execute arbitrary SQL commands in applications database. 1 SQL injection vulnerability in DeluxeBB: CVE-2010-4151 An input validation error exists in the "xthedateformat" parameter in...

7.5CVSS8AI score0.01181EPSS
SaveExploits2Affected Software1
htbridge
htbridge
added 2010/07/22 12:00 a.m.41 views

Multiple Vulnerabilities in BXR

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in BXR which could be exploited to perform cross-site scripting, cross-site request forgery and SQL injection attacks. 1 Cross-site scripting XSS vulnerability in BXR 1.1 The vulnerability exists due to input...

7.5CVSS7.6AI score0.01189EPSS
SaveExploits2Affected Software1
htbridge
htbridge
added 2010/06/14 12:00 a.m.41 views

Cross-site Scripting (XSS) Vulnerabilities in Grafik CMS

High-Tech Bridge SA Security Research Lab has discovered two vulnerabilities in Grafik CMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerabilities in Grafik CMS: CVE-2010-2615 The vulnerability exists due to input sanitation error in the...

2.6CVSS6AI score0.01452EPSS
SaveExploits2Affected Software1
htbridge
htbridge
added 2010/05/20 12:00 a.m.41 views

Multiple Vulnerabilities in CuteSITE CMS

High-Tech Bridge SA Security Research Lab has discovered three vulnerabilities in CuteSITE CMS which could be exploited to perform cross-site scripting and cross-site request forgery attacks and execute arbitrary SQL commands in applications database. 1 Cross-site scripting XSS vulnerability in...

6.5CVSS7.2AI score0.0172EPSS
SaveExploits4Affected Software1
htbridge
htbridge
added 2010/05/18 12:00 a.m.41 views

Multiple Vulnerabilities in LightNEasy CMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in LightNEasy CMS which could be exploited to perform script insertion, cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerability in LightNEasy CMS 1.1 The vulnerability...

5.1CVSS7AI score
SaveExploits0Affected Software1
htbridge
htbridge
added 2014/07/23 12:00 a.m.40 views

Reflected Cross-Site Scripting (XSS) in Jamroom

High-Tech Bridge Security Research Lab discovered vulnerability in Jamroom, which can be exploited to perform Cross-Site Scripting XSS attacks. 1 Reflected Cross-Site Scripting XSS in Jamroom: CVE-2014-5098 The vulnerability exists due to insufficient sanitization of user-supplied data after the...

4.3CVSS5.8AI score0.01864EPSS
SaveExploits3Affected Software1
htbridge
htbridge
added 2013/10/30 12:00 a.m.40 views

SQL Injection in Dokeos

High-Tech Bridge Security Research Lab discovered vulnerability in Dokeos, which can be exploited to perform SQL Injection attacks. 1 SQL Injection in Dokeos: CVE-2013-6341 The vulnerability exists due to insufficient validation of "language" HTTP GET parameter passed to "/index.php" script. A...

7.5CVSS8.1AI score0.02279EPSS
SaveExploits6Affected Software1
htbridge
htbridge
added 2012/11/21 12:00 a.m.40 views

FireFly Media Server Multiple Remote DoS Vulnerabilities

High-Tech Bridge Security Research Lab has discovered multiple remote denial of service DoS vulnerabilities in FireFly Media Server, which could be exploited by a malicious person to crash a remote server. 1 Multiple NULL pointer dereference vulnerabilities in FireFly Media Server: CVE-2012-5875...

5CVSS6.4AI score0.10814EPSS
SaveExploits6Affected Software1
htbridge
htbridge
added 2011/05/03 12:00 a.m.40 views

SQL Injection Vulnerability in SuperCali PHP Event Calendar

High-Tech Bridge SA Security Research Lab has discovered vulnerability in SuperCali PHP Event Calendar which could be exploited to perform SQL injection attacks. 1 SQL injection vulnerability in SuperCali PHP Event Calendar The vulnerability exists due to input sanitation errors in the "categoryi...

7.5CVSS8.6AI score
SaveExploits0Affected Software1
htbridge
htbridge
added 2011/04/19 12:00 a.m.40 views

SQL Injection Vulnerability in Shutter

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Shutter which could be exploited to perform SQL injection attacks. 1 SQL injection vulnerability in Shutter The vulnerability exists due to input sanitation errors in the "albumID" parameter in index.html. A remote attacker...

7.5CVSS8.5AI score
SaveExploits0Affected Software1
htbridge
htbridge
added 2011/02/17 12:00 a.m.40 views

Installation Path Disclosure Weakness in Tribiq CMS | HTB22857

High-Tech Bridge SA Security Research Lab has discovered a weakness in Tribiq CMS which could be exploited to gain access to potentially sensitive information. 1 Installation path disclosure weakness in Tribiq CMS: CVE-2011-2727 The weakness exists due to application reveals the full path to...

4.3CVSS6.4AI score0.01533EPSS
SaveExploits0Affected Software1
htbridge
htbridge
added 2011/01/13 12:00 a.m.40 views

Cross-site Request Forgery (CSRF) in KaiBB

High-Tech Bridge SA Security Research Lab has discovered vulnerability in KaiBB which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in KaiBB The vulnerability exists due to insufficient validation of the request origin in admin/core/account.ph...

5.1CVSS6.7AI score
SaveExploits0Affected Software1
htbridge
htbridge
added 2010/12/07 12:00 a.m.40 views

Cross-site Scripting (XSS) Vulnerability in ImpressCMS

High-Tech Bridge SA Security Research Lab has discovered vulnerability in ImpressCMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in ImpressCMS: CVE-2010-4616 The vulnerability exists due to input sanitation error in the...

2.6CVSS5.7AI score0.01107EPSS
SaveExploits1Affected Software1
htbridge
htbridge
added 2010/12/02 12:00 a.m.40 views

Multiple Vulnerabilities in HTML-EDIT CMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in HTML-EDIT CMS which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerability in HTML-EDIT CMS: CVE-2010-4610 The vulnerability exists due to input...

7.5CVSS7AI score0.02492EPSS
SaveExploits4Affected Software1
htbridge
htbridge
added 2010/09/20 12:00 a.m.40 views

Cross-site Scripting (XSS) Vulnerabilities in Docebo

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Docebo which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Docebo 1.1 The vulnerability exists due to input sanitation error in the "upsignature" paramete...

4.3CVSS6.3AI score
SaveExploits0Affected Software1
htbridge
htbridge
added 2010/08/02 12:00 a.m.40 views

Cross-site Request Forgery (CSRF) in pimcore

High-Tech Bridge SA Security Research Lab has discovered vulnerability in pimcore which could be exploited to perform cross-site request forgery attacks. 1 Cross-site Request Forgery CSRF in pimcore The vulnerability exists due to insufficient validation of the request origin in...

2.6CVSS7.3AI score
SaveExploits0Affected Software1
htbridge
htbridge
added 2010/07/01 12:00 a.m.40 views

Multiple Vulnerabilities in Pixie

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Pixie which could be exploited to perform cross-site scripting, script insertions and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerability in Pixie The vulnerability exists due to input...

7.5CVSS7.6AI score0.02388EPSS
SaveExploits2Affected Software1
htbridge
htbridge
added 2010/06/07 12:00 a.m.40 views

Cross-site Scripting (XSS) Vulnerabilities in odCMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in odCMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in odCMS 1.1 The vulnerability exists due to input sanitation error in the "content" parameter in...

4.3CVSS6.3AI score
SaveExploits0Affected Software1
htbridge
htbridge
added 2013/11/13 12:00 a.m.39 views

Cross-Site Scripting (XSS) in Jamroom

High-Tech Bridge Security Research Lab discovered vulnerability in Jamroom, which can be exploited to perform Cross-Site Scripting XSS attacks. 1 Cross-Site Scripting XSS in Jamroom: CVE-2013-6804 The vulnerability exists due to insufficient sanitisation of user-supplied data in "searchstring" HT...

4.3CVSS5.8AI score0.01206EPSS
SaveExploits3Affected Software1
htbridge
htbridge
added 2011/09/28 12:00 a.m.39 views

Multiple vulnerabilities in Tine 2.0

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Tine 2.0, which can be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerabilities in Tine 2.0 1.1 Input passed via the "lang" GET parameter to /library/idnaconvert/example.php i...

4.3CVSS6.4AI score
SaveExploits0Affected Software1
htbridge
htbridge
added 2011/05/17 12:00 a.m.39 views

Cross-site Scripting (XSS) Vulnerability in Happy Chat

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Happy Chat which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Happy Chat The vulnerability exists due to input sanitation error in the "nick" parameter in...

4.3CVSS6AI score
SaveExploits0Affected Software1
htbridge
htbridge
added 2011/04/12 12:00 a.m.39 views

Cross-site Scripting (XSS) Vulnerability in WP-Ajax-Recent-Posts

High-Tech Bridge SA Security Research Lab has discovered vulnerability in WP-Ajax-Recent-Posts which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in WP-Ajax-Recent-Posts The vulnerability exists due to input sanitation error in the "number"...

4.3CVSS6AI score
SaveExploits0Affected Software1
htbridge
htbridge
added 2011/02/24 12:00 a.m.39 views

Multiple Vulnerabilities in CosmoShop

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in CosmoShop which can be exploited to perform cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerabilities in CosmoShop 1.1 The vulnerability exists due to input sanitatio...

2.6CVSS6.7AI score
SaveExploits0Affected Software1
htbridge
htbridge
added 2010/10/21 12:00 a.m.39 views

Multiple Vulnerabilities in SweetRice CMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in SweetRice CMS which could be exploited to perform cross-site scripting and SQL injection attacks and change administrators password. 1 Cross-site scripting XSS vulnerability in SweetRice CMS The vulnerability...

7.5CVSS7.8AI score
SaveExploits0Affected Software1
htbridge
htbridge
added 2010/07/22 12:00 a.m.39 views

Directory Traversal Vulnerability in FTP Explorer

High-Tech Bridge SA Security Research Lab has discovered vulnerability in FTP Explorer which could be exploited to execute arbitrary code on vulnerable system. 1 Directory Traversal Vulnerability in FTP Explorer: CVE-2010-3101 The vulnerability exists due to insufficient sanitation of the...

7.6CVSS7.6AI score0.0152EPSS
SaveExploits0Affected Software1
htbridge
htbridge
added 2010/07/22 12:00 a.m.39 views

Cross-site Scripting (XSS) Vulnerability in Prado Portal

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Prado Portal which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Prado Portal: CVE-2010-4958 The vulnerability exists due to input sanitation error in the "page"...

4.3CVSS5.7AI score0.01348EPSS
SaveExploits1Affected Software1
htbridge
htbridge
added 2010/05/28 12:00 a.m.39 views

Multiple Vulnerabilities in Gazelle CMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Gazelle CMS which could be exploited to perform cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerability in Gazelle CMS The vulnerability exists due to input sanitatio...

5.1CVSS7AI score
SaveExploits0Affected Software1
htbridge
htbridge
added 2010/04/19 12:00 a.m.39 views

Cross-site Scripting Vulnerability in Acuity CMS

High-Tech Bridge SA Security Research Lab has discovered a vulnerability in Acuity CMS which could be exploited to perform cross-site scripting XSS attacks. 1 Cross-site scripting vulnerability in Acuity CMS Input sanitation error was found in the "page" parameter in /admin/pages/addpage.asp. A...

2.6CVSS6.1AI score
SaveExploits0Affected Software1
htbridge
htbridge
added 2012/05/30 12:00 a.m.38 views

Multiple vulnerabilities in web@all

High-Tech Bridge Security Research Lab has discovered multiple vulnerabilities in web@all, which can be exploited to perform Сross-Site Request Forgery CSRF and Cross-Site Scripting XSS attacks. 1 Сross-Site Request Forgery CSRF in web@all: CVE-2012-3231 1.1 The application allows authorized...

7.6CVSS6.8AI score0.01531EPSS
SaveExploits5Affected Software1
htbridge
htbridge
added 2011/11/30 12:00 a.m.38 views

Multiple vulnerabilities in OBM

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in OBM, which can be exploited to perform cross-site scripting, local file inclusion and SQL injection attacks and gain access to sensitive information. 1 Local File Inclusion in OBM 1.1 Input passed via the "module...

7.6CVSS8.2AI score
SaveExploits0Affected Software1
htbridge
htbridge
added 2011/05/05 12:00 a.m.38 views

Cross-site Scripting (XSS) Vulnerabilities in phpScheduleIt

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in phpScheduleIt which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerabilities in phpScheduleIt 1.1 The vulnerability exists due to input sanitation errors in URL in th...

4.3CVSS6.5AI score
SaveExploits0Affected Software1
htbridge
htbridge
added 2011/03/22 12:00 a.m.38 views

Multiple Vulnerabilities in UseBB

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in UseBB which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF vulnerabilities in UseBB 1.1 The vulnerability exists due to insufficient validation of the request...

7.1CVSS7.5AI score
SaveExploits0Affected Software1
htbridge
htbridge
added 2011/03/17 12:00 a.m.38 views

Installation Path Disclosure weakness in Tine 2.0

High-Tech Bridge SA Security Research Lab has discovered a weakness in Tine 2.0 which could be exploited to gain access to potentially sensitive information. 1 Installation path disclosure weakness in Tine 2.0: CVE-2011-1666 The weakness exists due to application reveals the full path to...

4.3CVSS6.5AI score0.01392EPSS
SaveExploits1Affected Software1
htbridge
htbridge
added 2010/12/28 12:00 a.m.38 views

Cross-site Request Forgery (CSRF) in whCMS

High-Tech Bridge SA Security Research Lab has discovered vulnerability in whCMS which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in whCMS The vulnerability exists due to insufficient validation of the request origin in admin/index.php. A...

5.1CVSS6.7AI score
SaveExploits0Affected Software1
htbridge
htbridge
added 2010/09/27 12:00 a.m.38 views

Directory Traversal Vulnerability in Robo-FTP

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Robo-FTP which could be exploited to execute arbitrary code on vulnerable system. 1 Directory Traversal Vulnerability in Robo-FTP: CVE-2010-4095 The vulnerability exists due to insufficient sanitation of the downloaded...

7.6CVSS7.6AI score0.01596EPSS
SaveExploits0Affected Software1
htbridge
htbridge
added 2010/09/22 12:00 a.m.38 views

Directory Traversal Vulnerability in FilterFTP

High-Tech Bridge SA Security Research Lab has discovered vulnerability in FilterFTP which could be exploited to execute arbitrary code on vulnerable system. 1 Directory Traversal Vulnerability in FilterFTP: CVE-2010-4790 The vulnerability exists due to insufficient sanitation of the downloaded...

7.6CVSS7.8AI score0.01137EPSS
SaveExploits1Affected Software1
htbridge
htbridge
added 2010/09/03 12:00 a.m.38 views

Multiple SQL injection vulnerabilities in e107

High-Tech Bridge SA Security Research Lab has discovered three SQL injection vulnerabilities in e107 which could lead to execution of arbitrary SQL commands in applications database. 1 SQL injection vulnerabilities in e107 1.1 An input validation error exists in the URL in /e107admin/wmessage.php...

6.5CVSS8.6AI score
SaveExploits0Affected Software1
Total number of security vulnerabilities559