559 matches found
Multiple Vulnerabilities in IWantOneButton WordPress Plugin
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in IWantOneButton WordPress Plugin which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerability in IWantOneButton WordPress Plugin The vulnerability...
Information Disclosure Vulnerability in Arctic Fox CMS
High-Tech Bridge SA Security Research Lab has discovered vulnerabilities in Arctic Fox CMS which could be exploited to disclose potentially sensitive information. 1 Information disclosure vulnerability in Arctic Fox CMS The vulnerability exists due to insufficient handling of error messages in th...
Multiple Vulnerabilities in WebAsyst Shop-Script
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in WebAsyst Shop-Script which could be exploited to perform cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerabilities in WebAsyst Shop-Script 1.1 The vulnerability exist...
Local File Inclusion Vulnerability in LightNEasy CMS
High-Tech Bridge SA Security Research Lab has discovered vulnerability in LightNEasy CMS which could be exploited to include and execute arbitrary local files on the target system. 1 Local file inclusion in LightNEasy CMS Input passed to the "setlanguage" variable in addons/contact/main.php is no...
Multiple Vulnerabilities in BEdita
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in BEdita which could be exploited to perform cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerability in BEdita The vulnerability exists due to input sanitation error in...
Multiple Vulnerabilities in Zomplog
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Zomplog which could be exploited to perform cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerabilities in Zomplog 1.1 The vulnerability exists due to input sanitation...
Directory Traversal Vulnerability in FTP Voyager
High-Tech Bridge SA Security Research Lab has discovered vulnerability in FTP Voyager which could be exploited to execute arbitrary code on vulnerable system. 1 Directory Traversal Vulnerability in FTP Voyager: CVE-2010-4154 The vulnerability exists due to insufficient sanitation of the downloade...
XSS vulnerability in Auto CMS
High-Tech Bridge SA Security Research Lab has discovered vulnerability in Auto CMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Auto CMS: CVE-2010-4882 The vulnerability exists due to input sanitation error in the "sitetitle"...
XSS in EasyPublish CMS
High-Tech Bridge SA Security Research Lab has discovered a vulnerability in EasyPublish CMS which could be exploited to perform cross-site scripting XSS attacks. 1 Cross-site scripting vulnerability in EasyPublish CMS Input passed via the URL to /index.php is not properly sanitized before being...
Сross-Site Request Forgery (CSRF) in xEpan
High-Tech Bridge Security Research Lab discovered vulnerability in xEpan, which can be exploited to compromise vulnerable web site. 1 Сross-Site Request Forgery CSRF in xEpan: CVE-2014-8429 The vulnerability exists due to insufficient validation of the HTTP request origin when creating new user...
Multiple SQL Injection vulnerabilities in ClipBucket
High-Tech Bridge Security Research Lab discovered multiple vulnerabilities in ClipBucket, which can be exploited to perform SQL Injection attacks. 1 Multiple SQL Injections in ClipBucket: CVE-2012-5849 1.1 The vulnerability exists due to improper sanitation of input in multiple parameters within...
Multiple vulnerabilities in Browser CRM
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Browser CRM, which can be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-Site Scripting in Browser CRM 1.1 Input appended to the URL after multiple files is not properly sanitised...
Ashampoo 3D CAD Professional 3 ActiveX control Insecure Method
High-Tech Bridge SA Security Research Lab has discovered a vulnerability in Ashampoo 3D CAD Professional 3 ActiveX control which could be exploited to compromise vulnerable system. 1 Insecure method in Ashampoo 3D CAD Professional 3 ActiveX Control The vulnerability is caused due to the...
Cross-site Scripting (XSS) Vulnerability in FanUpdate
High-Tech Bridge SA Security Research Lab has discovered vulnerability in FanUpdate which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in FanUpdate The vulnerability exists due to input sanitation error in the "pageTitle" parameter in...
Buffer Overflow Vulnerability in Gogago YouTube Video Converter ActiveX Control
High-Tech Bridge SA Security Research Lab has discovered vulnerability in Gogago YouTube Video Converter ActiveX Control which could be exploited to compromise vulnerable system. 1 Buffer Overflow Vulnerability in Gogago YouTube Video Converter ActiveX Control Boundary error exists in the...
Cross-site Scripting (XSS) Vulnerability in Ajax Chat
High-Tech Bridge SA Security Research Lab has discovered vulnerability in Ajax Chat which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Ajax Chat The vulnerability exists due to input sanitation error in the "chatpath" parameter in...
Remote File Inclusion Vulnerability in ACal
High-Tech Bridge SA Security Research Lab has discovered vulnerability in ACal which could be exploited to compromise vulnerable system. 1 Remote file inclusion vulnerability in ACal Input passed to the "path" parameter in embed/day.php and embed/month.php scripts is not properly sanitized before...
Multiple Vulnerabilities in ZENphoto
High-Tech Bridge SA Security Research Lab has discovered vulnerabilities in ZENphoto which could be exploited to perform cross-site scripting attacks and disclose potentially sensitive information. 1 Cross-site scripting XSS vulnerability in ZENphoto The vulnerability exists due to input sanitati...
Cross-site Scripting (XSS) Vulnerabilities in Sodahead Polls
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Sodahead Polls which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerabilities in Sodahead Polls 1.1 The vulnerability exists due to input sanitation errors in the...
SQL Injection Vulnerabilities in Seo Panel
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Seo Panel which could be exploited to perform SQL injection attacks. 1 SQL injection vulnerabilities in Seo Panel 1.1 The vulnerability exists due to input sanitation errors in the "langcode" parameter in...
Multiple Vulnerabilities in Pixelpost
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Pixelpost which could be exploited to perform cross-site scripting attacks and disclose potentially sensitive information. 1 Cross-site scripting vulnerability in Pixelpost The vulnerability exists due to input...
Multiple Vulnerabilities in Injader CMS
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Injader CMS which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerabilities in Injader CMS 1.1 The vulnerability exists due to input sanitation error...
Multiple Vulnerabilities in Wolf CMS
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Wolf CMS which could be exploited to perform cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerability in Wolf CMS The vulnerability exists due to input sanitation erro...
Cross-site Request Forgery (CSRF) Vulnerabilities in Webmatic
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Webmatic which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in Webmatic 1.1 The vulnerability exists due to insufficient validation of the request origin in...
Multiple Vulnerabilities in CMS Source
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in CMS Source, which could be exploited to perform cross-site scripting and SQL Injection attacks and compromise vulnerable system. 1 Cross-site scripting XSS vulnerabilities in CMS Source 1.1 The vulnerability exis...
Cross-site Scripting (XSS) Vulnerability in osCSS
High-Tech Bridge SA Security Research Lab has discovered vulnerability in osCSS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in osCSS: CVE-2010-2856 The vulnerability exists due to input sanitation error in the "page" parameter in...
Cross-site Scripting (XSS) Vulnerability in Limny
High-Tech Bridge SA Security Research Lab has discovered vulnerability in Limny which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Limny The vulnerability exists due to input sanitation error in the " q" parameter in...
Cross-site Scripting (XSS) Vulnerability in ForumCMS
High-Tech Bridge SA Security Research Lab has discovered vulnerability in ForumCMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in ForumCMS The vulnerability exists due to input sanitation error in the "keyword" parameter in...
Cross-site Scripting (XSS) Vulnerability in log1CMS
High-Tech Bridge SA Security Research Lab has discovered two vulnerabilities in log1CMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in log1CMS The vulnerability exists due to input sanitation error in the HTTP POST parameter "content"...
StudioLine Photo Basic 3 ActiveX control Insecure Method
High-Tech Bridge SA Security Research Lab has discovered a vulnerability in StudioLine Photo Basic 3 ActiveX control, which can be exploited to overwrite arbitrary files. 1 Insecure method in StudioLine Photo Basic 3 ActiveX control The vulnerability is caused due to the NMSDVDX.DVDEngineX.1...
Easewe FTP ActiveX Control Multiple Insecure Methods
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Easewe FTP OCX ActiveX Control, which can be exploited to potentially compromise a user's system. 1 Insecure methods in Easewe FTP ActiveX Control 1.1 The vulnerability is caused due to the EaseWeFtp.FtpLibrary...
Multiple Vulnerabilities in phpGraphy
High-Tech Bridge SA Security Research Lab has discovered vulnerabilities in phpGraphy which could be exploited to perform cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerability in phpGraphy The vulnerability exists due to input sanitation error in th...
Cross-site Scripting (XSS) Vulnerabilities in webSPELL
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in webSPELL which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in webSPELL 1.1 The vulnerability exists due to input sanitation error in the "pass" and "touser...
Multiple Vulnerabilities in Frog CMS
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerability in Frog CMS which could be exploited to perform cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerabilities in Frog CMS 1.1 The vulnerability exists due to input sanitation...
Cross-site Scripting (XSS) Vulnerabilities in eazyCMS
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in eazyCMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerabilities in eazyCMS 1.1 The vulnerability exists due to input sanitation error in the "pageid" parameter...
Directory Traversal Vulnerability in FTP Commander
High-Tech Bridge SA Security Research Lab has discovered vulnerability in FTP Commander, FTP Commander Pro and FTP Commander Deluxe which could be exploited to execute arbitrary code on vulnerable system. 1 Directory Traversal Vulnerability in FTP Commander The vulnerability exists due to...
Directory Traversal Vulnerability in 32bit FTP Client
High-Tech Bridge SA Security Research Lab has discovered vulnerability in 32bit FTP Client which could be exploited to execute arbitrary code on vulnerable system. 1 Directory Traversal Vulnerability in 32bit FTP Client The vulnerability exists due to insufficient sanitation of the downloaded...
SQL Injection Vulnerabilities in Mac's CMS
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Mac's CMS which could be exploited to perform SQL injection attacks. 1 SQL injection vulnerability in Mac's CMS 1.1 The vulnerability exists due to input sanitation errors in the “commentId” parameter in index.ph...
Cross-site Scripting (XSS) Vulnerability in moziloCMS
High-Tech Bridge SA Security Research Lab has discovered vulnerability in moziloCMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in moziloCMS The vulnerability exists due to input sanitation error in the HTTP POST parameter "pageconten...
Cross-site Scripting (XSS) in DynamiXgate Affiliate Store Builder
High-Tech Bridge SA Security Research Lab has discovered vulnerability in DynamiXgate Affiliate Store Builder which could be exploited to perform cross-site scripting XSS attacks. 1 Cross-site scripting vulnerability in DynamiXgate Affiliate Store Builder The vulnerability exists due to...
Cross-site request forgery (CSRF) in e107
High-Tech Bridge SA Security Research Lab has discovered two CSRF vulnerabilities in e107 which could allow a remote attacker to execute arbitrary SQL commands in applications database and gain complete control over the application. 1 Cross-site request forgery in e107 1.1 The vulnerability is...
Multiple Vulnerabilities in OrangeHRM
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in OrangeHRM, which can be exploited to perform Cross-Site Scripting XSS and SQL Injection attacks. 1 Cross-Site Scripting XSS vulnerabilities in OrangeHRM 1.1 Input passed via the "uniqcode" GET parameter to...
Multiple Vulnerabilities in Traq
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Traq which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerabilities in Traq 1.1 The vulnerability exists due to input sanitation error in the "edit"...
Kofax e-Transactions Sender Sendbox ActiveX Control Insecure Method
High-Tech Bridge SA Security Research Lab has discovered a vulnerability in Kofax e-Transactions Sender Sendbox, which can be exploited to overwrite arbitrary files. 1 Insecure method in Kofax e-Transactions Sender Sendbox ActiveX Control The vulnerability is caused due to the LEADeMail.LEADSmtp....
Multiple Vulnerabilities in Eleanor CMS
High-Tech Bridge SA Security Research Lab has discovered vulnerabilities in Eleanor CMS which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerability in Eleanor CMS The vulnerability exists due to input sanitation error in the...
Installation Path Disclosure Weakness in bbPress
High-Tech Bridge SA Security Research Lab has discovered a weakness in bbPress which could be exploited to gain access to potentially sensitive information. 1 Installation path disclosure weakness in bbPress The weakness exists due to application reveals the full path to installation directory in...
Multiple Vulnerabilities in ViArt Shop
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in ViArt Shop which could be exploited to perform cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerability in ViArt Shop The vulnerability exists due to input sanitation...
Cross-site Request Forgery (CSRF) in CMScout
High-Tech Bridge SA Security Research Lab has discovered vulnerability in CMScout which could be exploited to perform cross-site request forgery attacks. 1 Cross-site Request Forgery CSRF in CMScout The vulnerability exists due to insufficient validation of the request origin in admin.php. A remo...
Multiple Vulnerabilities in Etomite
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Etomite which could be exploited to perform cross-site scripting and SQL injection attacks and gain access to sensitive information. 1 Cross-site scripting XSS vulnerability in Etomite The vulnerability exists du...
Multiple Vulnerabilities in Energine
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Energine which could be exploited to perform cross-site request forgery and SQL injection attacks. 1 Cross-site request forgery CSRF in in Energine The vulnerability exists due to insufficient validation of the...