559 matches found
Cross-site Scripting (XSS) Vulnerability in log1CMS
High-Tech Bridge SA Security Research Lab has discovered two vulnerabilities in log1CMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in log1CMS The vulnerability exists due to input sanitation error in the HTTP POST parameter "content"...
XSS in EasyPublish CMS
High-Tech Bridge SA Security Research Lab has discovered a vulnerability in EasyPublish CMS which could be exploited to perform cross-site scripting XSS attacks. 1 Cross-site scripting vulnerability in EasyPublish CMS Input passed via the URL to /index.php is not properly sanitized before being...
Сross-Site Request Forgery (CSRF) in xEpan
High-Tech Bridge Security Research Lab discovered vulnerability in xEpan, which can be exploited to compromise vulnerable web site. 1 Сross-Site Request Forgery CSRF in xEpan: CVE-2014-8429 The vulnerability exists due to insufficient validation of the HTTP request origin when creating new user...
StudioLine Photo Basic 3 ActiveX control Insecure Method
High-Tech Bridge SA Security Research Lab has discovered a vulnerability in StudioLine Photo Basic 3 ActiveX control, which can be exploited to overwrite arbitrary files. 1 Insecure method in StudioLine Photo Basic 3 ActiveX control The vulnerability is caused due to the NMSDVDX.DVDEngineX.1...
Cross-site Scripting (XSS) Vulnerabilities in Calendarix
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Calendarix which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerabilities in Calendarix 1.1 The vulnerability exists due to input sanitation errors in URL in...
Multiple Vulnerabilities in Viscacha
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Viscacha which could be exploited to perform cross-site scripting attacks and disclose potentially sensitive information. 1 Cross-site scripting XSS vulnerabilities in Viscacha 1.1 The vulnerability exists due to...
Multiple Vulnerabilities in BEdita
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in BEdita which could be exploited to perform cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerability in BEdita The vulnerability exists due to input sanitation error in...
Multiple Vulnerabilities in Wolf CMS
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Wolf CMS which could be exploited to perform cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerability in Wolf CMS The vulnerability exists due to input sanitation erro...
Multiple Vulnerabilities in Entrans
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Entrans which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerability in Entrans: CVE-2010-4932 The vulnerability exists due to input sanitation erro...
Cross-site Scripting (XSS) Vulnerability in SiteLoom CMS
High-Tech Bridge SA Security Research Lab has discovered vulnerability in SiteLoom CMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in SiteLoom CMS The vulnerability exists due to input sanitation error in the "mailform1" parameter in...
Directory Traversal Vulnerability in FTP Commander
High-Tech Bridge SA Security Research Lab has discovered vulnerability in FTP Commander, FTP Commander Pro and FTP Commander Deluxe which could be exploited to execute arbitrary code on vulnerable system. 1 Directory Traversal Vulnerability in FTP Commander The vulnerability exists due to...
Cross-site Scripting (XSS) Vulnerability in osCSS
High-Tech Bridge SA Security Research Lab has discovered vulnerability in osCSS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in osCSS: CVE-2010-2856 The vulnerability exists due to input sanitation error in the "page" parameter in...
SQL Injection Vulnerability in TomatoCMS
High-Tech Bridge SA Security Research Lab has discovered vulnerability in TomatoCMS which could be exploited to execute arbitrary SQL commands in applications database. 1 SQL injection vulnerability in TomatoCMS An input validation error exists in the "q" parameter in /news/search. A remote...
Cross-site Scripting (XSS) Vulnerabilities in Scribe CMS
High-Tech Bridge SA Security Research Lab has discovered three vulnerabilities in Scribe CMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Scribe CMS 1.1 The vulnerability exists due to input sanitation error in the “f” parameter in...
Cross-site Scripting (XSS) Vulnerability in Jamroom
High-Tech Bridge SA Security Research Lab has discovered vulnerability in Jamroom which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Jamroom: CVE-2010-2463 The vulnerability exists due to input sanitation error in the "postid" parameter i...
Cross-site Scripting (XSS) Vulnerability in moziloCMS
High-Tech Bridge SA Security Research Lab has discovered vulnerability in moziloCMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in moziloCMS The vulnerability exists due to input sanitation error in the HTTP POST parameter "pageconten...
Multiple Vulnerabilities in NPDS REvolution
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in NPDS REvolution which could be exploited to perform cross-site scripting XSS, script insertion and CSRF attacks and execute arbitrary SQL commands in applications database. 1 Cross-site scripting vulnerabilities ...
Multiple vulnerabilities in AdaptCMS Lite
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in AdaptCMS Lite which could be exploited to perform cross-site request forgery and cross-site scripting attacks. 1 Cross-site request forgery CSRF in AdaptCMS Lite The vulnerability exists due to insufficient...
Cross-site request forgery (CSRF) in e107
High-Tech Bridge SA Security Research Lab has discovered two CSRF vulnerabilities in e107 which could allow a remote attacker to execute arbitrary SQL commands in applications database and gain complete control over the application. 1 Cross-site request forgery in e107 1.1 The vulnerability is...
Multiple XSS in Hero Framework
High-Tech Bridge Security Research Lab discovered two XSS vulnerabilities in Hero Framework, which can be exploited to perform cross-site scripting attacks against vulnerable application. 1 Multiple XSS in Hero Framework: CVE-2013-2649 1.1 The vulnerability exists due to insufficient sanitisation...
Cross-site Scripting (XSS) Vulnerability in Fast Secure Contact Form
High-Tech Bridge SA Security Research Lab has discovered vulnerability in Fast Secure Contact Form wordpress plugin, which can be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Fast Secure Contact Form WordPress Plugin Input appended to the URL afte...
Cross-site Scripting (XSS) Vulnerabilities in HESK
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in HESK which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerabilities in HESK 1.1 The vulnerability exists due to input sanitation error in the "hesksettingstmptitle" a...
Buffer Overflow Vulnerability in Gogago YouTube Video Converter ActiveX Control
High-Tech Bridge SA Security Research Lab has discovered vulnerability in Gogago YouTube Video Converter ActiveX Control which could be exploited to compromise vulnerable system. 1 Buffer Overflow Vulnerability in Gogago YouTube Video Converter ActiveX Control Boundary error exists in the...
Cross-site Request Forgery (CSRF) Vulnerabilities in SelectaPix Image Gallery
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in SelectaPix Image Gallery which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF vulnerabilities in SelectaPix Image Gallery 1.1 The vulnerability exists due to...
Multiple Vulnerabilities in IWantOneButton WordPress Plugin
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in IWantOneButton WordPress Plugin which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerability in IWantOneButton WordPress Plugin The vulnerability...
Multiple Vulnerabilities in RunCMS
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in RunCMS which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerability in RunCMS The vulnerability exists due to input sanitation error in the "rc2user...
Multiple Vulnerabilities in ViArt Shop
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in ViArt Shop which could be exploited to perform cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerability in ViArt Shop The vulnerability exists due to input sanitation...
Cross-site Request Forgery (CSRF) in CMScout
High-Tech Bridge SA Security Research Lab has discovered vulnerability in CMScout which could be exploited to perform cross-site request forgery attacks. 1 Cross-site Request Forgery CSRF in CMScout The vulnerability exists due to insufficient validation of the request origin in admin.php. A remo...
Multiple Vulnerabilities in Etomite
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Etomite which could be exploited to perform cross-site scripting and SQL injection attacks and gain access to sensitive information. 1 Cross-site scripting XSS vulnerability in Etomite The vulnerability exists du...
Multiple Vulnerabilities in Frog CMS
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerability in Frog CMS which could be exploited to perform cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerabilities in Frog CMS 1.1 The vulnerability exists due to input sanitation...
Multiple Vulnerabilities in AContent
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in AContent which could be exploited to perform cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerabilities in AContent 1.1 The vulnerability exists due to input sanitatio...
Multiple Vulnerabilities in Amethyst
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Amethyst which could be exploited to perform cross-site scripting, script insertion and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerability in Amethyst The vulnerability exists due to inp...
Cross-site Scripting (XSS) Vulnerability in CompactCMS
High-Tech Bridge SA Security Research Lab has discovered vulnerability in CompactCMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in CompactCMS The vulnerability exists due to input sanitation error in the "keywords" parameter in...
Cross-site Scripting (XSS) Vulnerability in transLucid
High-Tech Bridge SA Security Research Lab has discovered vulnerability in transLucid which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in transLucid The vulnerability exists due to input sanitation error in the "xajaxargs" parameter in...
Cross-site Scripting Vulnerability in ecoCMS
High-Tech Bridge SA Security Research Lab has discovered vulnerability in ecoCMS which could be exploited to perform cross-site scripting XSS attacks. 1 Cross-site scripting vulnerability in ecoCMS: CVE-2010-5046 Input validation error was found in the "p" parameter in /admin.php. A remote attack...
Multiple Vulnerabilities in OrangeHRM
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in OrangeHRM, which can be exploited to perform Cross-Site Scripting XSS and SQL Injection attacks. 1 Cross-Site Scripting XSS vulnerabilities in OrangeHRM 1.1 Input passed via the "uniqcode" GET parameter to...
Multiple Vulnerabilities in Traq
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Traq which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerabilities in Traq 1.1 The vulnerability exists due to input sanitation error in the "edit"...
Cross-site Scripting (XSS) Vulnerabilities in webSPELL
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in webSPELL which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in webSPELL 1.1 The vulnerability exists due to input sanitation error in the "pass" and "touser...
Multiple Vulnerabilities in Lazyest Gallery
High-Tech Bridge SA Security Research Lab has discovered vulnerabilities in Lazyest Gallery which could be exploited to perform cross-site scripting attacks and disclose potentially sensitive information. 1 Cross-site scripting XSS vulnerability in Lazyest Gallery The vulnerability exists due to...
Cross-site Request Forgery (CSRF) Vulnerabilities in Pragyan CMS
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Pragyan CMS which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF vulnerabilities in Pragyan CMS 1.1 The vulnerability exists due to insufficient validation of...
SQL Injection Vulnerabilities in Seo Panel
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Seo Panel which could be exploited to perform SQL injection attacks. 1 SQL injection vulnerabilities in Seo Panel 1.1 The vulnerability exists due to input sanitation errors in the "langcode" parameter in...
Multiple Vulnerabilities in Injader CMS
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Injader CMS which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerabilities in Injader CMS 1.1 The vulnerability exists due to input sanitation error...
SQL injection Vulnerability in IceBB
High-Tech Bridge SA Security Research Lab has discovered vulnerability in IceBB which could be exploited to perform SQL injection attacks. 1 The vulnerability exists due to input sanitation errors in the "gmt" parameter in index.php. A remote attacker can send a specially crafted HTTP request to...
Local File Inclusion Vulnerability in Novaboard
High-Tech Bridge SA Security Research Lab has discovered vulnerability in Novaboard which could be exploited to include and execute arbitrary local files on the target system. 1 Local file inclusion in Novaboard Input passed to the "novalang" cookie in index.php is not properly sanitized before...
Cross-site Scripting (XSS) Vulnerability in Pluck
High-Tech Bridge SA Security Research Lab has discovered vulnerability in Pluck which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Pluck The vulnerability exists due to input sanitation error in the "cont1" parameter in...
Cross-site Request Forgery (CSRF) Vulnerabilities in Rumba CMS
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Rumba CMS which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in Rumba CMS 1.1 The vulnerability exists due to insufficient validation of the request origin i...
XSS vulnerability in Auto CMS
High-Tech Bridge SA Security Research Lab has discovered vulnerability in Auto CMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Auto CMS: CVE-2010-4882 The vulnerability exists due to input sanitation error in the "sitetitle"...
Directory Traversal Vulnerability in TurboFTP Server
High-Tech Bridge SA Security Research Lab has discovered vulnerability in TurboFTP Server which could be exploited to delete or execute arbitrary files on vulnerable system. 1 Directory Traversal Vulnerability in TurboFTP Server The vulnerability exists due to insufficient sanitation of the...
Cross-site Scripting (XSS) Vulnerabilities in Diem
High-Tech Bridge SA Security Research Lab has discovered three vulnerabilities in Diem which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerabilities in Diem 1.1 The vulnerability exists due to input sanitation error in the "value" parameter in page...
Cross-site Request Forgery (CSRF) in Kryn.cms
High-Tech Bridge SA Security Research Lab has discovered vulnerability in Kryn.cms which could be exploited to perform cross-site request forgery attacks. 1 Cross-site Request Forgery CSRF in Kryn.cms The vulnerability exists due to insufficient validation of the request origin in...