559 matches found
Cross-site Scripting (XSS) Vulnerability in Redirection WordPress Plugin
High-Tech Bridge SA Security Research Lab has discovered vulnerability in Redirection WordPress Plugin which can be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Redirection WordPress Plugin Input passed via the "id" GET parameter to...
IDrive Online Backup ActiveX control Insecure Method
High-Tech Bridge SA Security Research Lab has discovered vulnerability in IDrive Online Backup ActiveX control, which can be exploited to overwrite arbitrary files. 1 Insecure method in IDrive Online Backup ActiveX Control The vulnerability is caused due to the UniBasicPack.UniTextBox...
Cross-site Scripting (XSS) Vulnerability in WP-Ajax-Recent-Posts
High-Tech Bridge SA Security Research Lab has discovered vulnerability in WP-Ajax-Recent-Posts which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in WP-Ajax-Recent-Posts The vulnerability exists due to input sanitation error in the "number"...
Multiple Vulnerabilities in Podcast Generator
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Podcast Generator which could be exploited to perform cross-site scripting attacks, disclose potentially sensitive information and compromise vulnerable system. 1 Cross-site scripting vulnerability in Podcast...
Cross-site Request Forgery (CSRF) in whCMS
High-Tech Bridge SA Security Research Lab has discovered vulnerability in whCMS which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in whCMS The vulnerability exists due to insufficient validation of the request origin in admin/index.php. A...
Local File Inclusion Vulnerability in LightNEasy CMS
High-Tech Bridge SA Security Research Lab has discovered vulnerability in LightNEasy CMS which could be exploited to include and execute arbitrary local files on the target system. 1 Local file inclusion in LightNEasy CMS Input passed to the "setlanguage" variable in addons/contact/main.php is no...
Directory Traversal Vulnerability in FTPGetter
High-Tech Bridge SA Security Research Lab has discovered vulnerability in FTPGetter which could be exploited to execute arbitrary code on vulnerable system. 1 Directory Traversal Vulnerability in FTPGetter: CVE-2010-3103 The vulnerability exists due to insufficient sanitation of the downloaded...
Directory Traversal Vulnerability in SmartFTP
High-Tech Bridge SA Security Research Lab has discovered vulnerability in SmartFTP which could be exploited to execute arbitrary code on vulnerable system. 1 Directory Traversal Vulnerability in SmartFTP: CVE-2010-3099 The vulnerability exists due to insufficient sanitation of the downloaded...
Multiple Vulnerabilities in Theeta CMS
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Theeta CMS which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting vulnerabilities XSS in Theeta CMS 1.1 The vulnerability exists due to input sanitation error i...
Cross-site Scripting (XSS) Vulnerabilities in CruxCMS
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in CruxCMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in CruxCMS: CVE-2008-0700 The vulnerability exists due to input sanitation error in the "search"...
SQL injection Vulnerabilities in WebDB
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in WebDB which could be exploited to perform SQL injection attacks. 1 SQL injection vulnerabilities in WebDB 1.1 The vulnerability exists due to input sanitation errors in the multiple parameters in loisweb/index.as...
Cross-site Scripting Vulnerability in razorCMS
High-Tech Bridge SA Security Research Lab has discovered vulnerability in razorCMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in razorCMS: CVE-2010-5051 The vulnerability exists due to input sanitation error in the "content" paramete...
Cross-site request forgery (CSRF) in ocPortal
High-Tech Bridge SA Security Research Lab has discovered vulnerability in ocPortal which could be exploited to perform CSRF attacks. 1 Cross-site request forgery CSRF ocPortal The vulnerability exists due to insufficient validation of the request origin in /site/index.php. A remote attacker can...
Cross-site Scripting (XSS) Vulnerability in Advanced Poll
High-Tech Bridge SA Security Research Lab has discovered vulnerability in Advanced Poll which could be exploited to perform cross-site scripting XSS attacks. 1 Cross-site scripting vulnerability in Advanced Poll: CVE-2010-2003 An input sanitation error was found in the "mysqlhost" parameter in...
Multiple SQL Injection vulnerabilities in ClipBucket
High-Tech Bridge Security Research Lab discovered multiple vulnerabilities in ClipBucket, which can be exploited to perform SQL Injection attacks. 1 Multiple SQL Injections in ClipBucket: CVE-2012-5849 1.1 The vulnerability exists due to improper sanitation of input in multiple parameters within...
Cross-site Scripting (XSS) Vulnerability WP Events Calendar
High-Tech Bridge SA Security Research Lab has discovered vulnerability in WP Events Calendar, which can be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in WP Events Calendar Input passed via the "ECid" GET parameter to /wp-admin/admin.php when "page"...
Multiple Vulnerabilities in ThreeDify Designer ActiveX Control
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in ThreeDify Designer ActiveX Control which could be exploited to compromise vulnerable system. 1 Buffer overflow vulnerabilities in ThreeDify Designer ActiveX Control 1.1 Boundary error exists in the "cmdExport"...
Cross-site Scripting Vulnerabilities in N-13 News
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in N-13 News, which can be exploited to perform cross-site scripting attacks. 1 Cross-site scripting vulnerabilities in N-13 News 1.1 Input passed via the GET "id" parameter to index.php is not properly sanitised...
Cross-site Scripting (XSS) Vulnerability in (e)2 interactive Photo Gallery
High-Tech Bridge SA Security Research Lab has discovered vulnerability in e2 interactive Photo Gallery which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in e2 interactive Photo Gallery The vulnerability exists due to input sanitation error ...
Installation Path Disclosure weakness in Tine 2.0
High-Tech Bridge SA Security Research Lab has discovered a weakness in Tine 2.0 which could be exploited to gain access to potentially sensitive information. 1 Installation path disclosure weakness in Tine 2.0: CVE-2011-1666 The weakness exists due to application reveals the full path to...
Cross-site Scripting (XSS) Vulnerabilities in Photopad
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Photopad which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerabilities in Photopad: CVE-2011-1063 1.1 The vulnerability exists due to input sanitation errors in the...
Information Disclosure Vulnerability in Arctic Fox CMS
High-Tech Bridge SA Security Research Lab has discovered vulnerabilities in Arctic Fox CMS which could be exploited to disclose potentially sensitive information. 1 Information disclosure vulnerability in Arctic Fox CMS The vulnerability exists due to insufficient handling of error messages in th...
Cross-site Request Forgery (CSRF) Vulnerabilities in PHP MicroCMS
High-Tech Bridge SA Security Research Lab has discovered vulnerabilities in PHP MicroCMS which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF vulnerabilities in PHP MicroCMS 1.1 The vulnerability exists due to insufficient validation of the...
Cross-site Scripting (XSS) Vulnerability in WPTouch Wordpress Plugin
High-Tech Bridge SA Security Research Lab has discovered vulnerability in WPTouch Wordpress Plugin which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in WPTouch Wordpress Plugin: CVE-2010-4779 The vulnerability exists due to input sanitation...
Cross-site Scripting (XSS) Vulnerabilities in Expression CMS
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Expression CMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Expression CMS 1.1 The vulnerability exists due to input sanitation error in the...
Directory Traversal Vulnerability in AutoFTP Manager
High-Tech Bridge SA Security Research Lab has discovered vulnerability in AutoFTP Manager which could be exploited to execute arbitrary code on vulnerable system. 1 Directory Traversal Vulnerability in AutoFTP Manager: CVE-2010-3104 The vulnerability exists due to insufficient sanitation of the...
Cross-site Scripting (XSS) Vulnerabilities in CruxPA
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in CruxPA which could be exploited to perform cross-site scripting and script insertion attacks. 1 Cross-site scripting XSS vulnerability in CruxPA: CVE-2010-2718 The vulnerability exists due to input sanitation err...
SQL Injection in Е2
High-Tech Bridge Security Research Lab discovered SQL injection vulnerability in Е2, which can be exploited to perform SQL injection attacks and gain control over the vulnerable application. 1 SQL Injection in Е2: CVE-2014-4736 The vlnerability exists due to insufficient sanitization of input dat...
SQL Injection in mAdserve
High-Tech Bridge Security Research Lab discovered multiple SQL injection vulnerabilities in mAdserve, which can be exploited to execute arbitrary SQL commands in application’s database and compromise vulnerable website. 1 SQL Injection in mAdserve: CVE-2014-2654 1.1 The vulnerability exists due t...
Cross-site Scripting (XSS) Vulnerabilities in epesi BIM
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in epesi BIM which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerabilities in epesi BIM 1.1 The vulnerability exists due to input sanitation error in the "diratual"...
Multiple vulnerabilities in Browser CRM
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Browser CRM, which can be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-Site Scripting in Browser CRM 1.1 Input appended to the URL after multiple files is not properly sanitised...
Multiple vulnerabilities in Dolibarr
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Dolibarr, which can be exploited to perform cross-site scripting & sql injection attacks. 1 Cross-Site scripting vulnerability in Dolibarr: CVE-2011-4814 1.1 Input appended to the URL after multiple files is not...
Multiple vulnerabilities in Efront
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Efront, which can be exploited to perform SQL injection and cross-site scripting attacks. 1 Cross-Site scripting XSS vulnerabilities in Efront 1.1 Input passed via the "course" GET parameter to index.php is not...
Cross-site Scripting (XSS) Vulnerability in WP e-Commerce
High-Tech Bridge SA Security Research Lab has discovered vulnerability in WP e-Commerce, which can be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in WP e-Commerce Input passed via the cartmessages parameter to...
Easewe FTP ActiveX Control Multiple Insecure Methods
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Easewe FTP OCX ActiveX Control, which can be exploited to potentially compromise a user's system. 1 Insecure methods in Easewe FTP ActiveX Control 1.1 The vulnerability is caused due to the EaseWeFtp.FtpLibrary...
Cross-site Scripting (XSS) Vulnerability in Ajax Chat
High-Tech Bridge SA Security Research Lab has discovered vulnerability in Ajax Chat which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Ajax Chat The vulnerability exists due to input sanitation error in the "chatpath" parameter in...
Cross-site Scripting (XSS) Vulnerability in WP Photo Album
High-Tech Bridge SA Security Research Lab has discovered vulnerability in WP Photo Album which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in WP Photo Album The vulnerability exists due to input sanitation error in the "id" parameter in...
Path Disclosure Weakness in 4images
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in 4images which could be exploited to disclose potentially sensitive information. 1 Path disclosure weakness in 4images The weakness is caused by incorrect handling of exceptions in includes/pageheader.php and...
Multiple Vulnerabilities in Ripe website manager
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Ripe website manager which could be exploited to perform cross-site scripting, cross-site request forgery and SQL injection attacks. 1 Cross-site scripting XSS vulnerabilities in Ripe website manager The...
Multiple Vulnerabilities in WebAsyst Shop-Script
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in WebAsyst Shop-Script which could be exploited to perform cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerabilities in WebAsyst Shop-Script 1.1 The vulnerability exist...
Multiple Vulnerabilities in Pixelpost
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Pixelpost which could be exploited to perform cross-site scripting attacks and disclose potentially sensitive information. 1 Cross-site scripting vulnerability in Pixelpost The vulnerability exists due to input...
SQL Injection Vulnerability in Phenotype CMS
High-Tech Bridge SA Security Research Lab has discovered vulnerability in Phenotype CMS which could be exploited to perform SQL injection attacks. 1 SQL injection vulnerability in Phenotype CMS: CVE-2011-0407 The vulnerability exists due to input sanitation errors in the URL. A remote attacker ca...
Authentication Bypass Vulnerability in phpLiterAdmin
High-Tech Bridge SA Security Research Lab has discovered vulnerability in phpLiterAdmin which could be exploited to bypass authentication mechanism and gain unauthorized access to the application. 1 Authentication Bypass Vulnerability in phpLiterAdmin The vulnerability exists due to a design erro...
Multiple Vulnerabilities in Zomplog
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Zomplog which could be exploited to perform cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerabilities in Zomplog 1.1 The vulnerability exists due to input sanitation...
Directory Traversal Vulnerability in FTP Voyager
High-Tech Bridge SA Security Research Lab has discovered vulnerability in FTP Voyager which could be exploited to execute arbitrary code on vulnerable system. 1 Directory Traversal Vulnerability in FTP Voyager: CVE-2010-4154 The vulnerability exists due to insufficient sanitation of the downloade...
Cross-site Scripting (XSS) Vulnerabilities in Lantern CMS
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Lantern CMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Lantern CMS 1.1 The vulnerability exists due to input sanitation error in the "signupemail...
Cross-site Request Forgery (CSRF) in Serendipity
High-Tech Bridge SA Security Research Lab has discovered vulnerability in Serendipity which could be exploited to perform cross-site request forgery attacks. 1 Cross-site Request Forgery CSRF in Serendipity: CVE-2010-2957 The vulnerability exists due to insufficient validation of the request orig...
Cross-site Request Forgery (CSRF) Vulnerabilities in Webmatic
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Webmatic which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in Webmatic 1.1 The vulnerability exists due to insufficient validation of the request origin in...
Cross-site Scripting (XSS) Vulnerability in log1CMS
High-Tech Bridge SA Security Research Lab has discovered two vulnerabilities in log1CMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in log1CMS The vulnerability exists due to input sanitation error in the HTTP POST parameter "content"...
Cross-site Scripting (XSS) in DynamiXgate Affiliate Store Builder
High-Tech Bridge SA Security Research Lab has discovered vulnerability in DynamiXgate Affiliate Store Builder which could be exploited to perform cross-site scripting XSS attacks. 1 Cross-site scripting vulnerability in DynamiXgate Affiliate Store Builder The vulnerability exists due to...