559 matches found
Cross-site Scripting (XSS) Vulnerability in Question and Answer Forum
High-Tech Bridge SA Security Research Lab has discovered vulnerability in Question and Answer Forum WordPress plugin which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Question and Answer Forum The vulnerability exists due to input...
Installation Path Disclosure Weakness in NextGEN Gallery wordpress plugin
High-Tech Bridge SA Security Research Lab has discovered a weakness in NextGEN Gallery wordpress plugin which could be exploited to gain access to potentially sensitive information. 1 Installation path disclosure weakness in NextGEN Gallery wordpress plugin The weakness exists due to application...
SQL Injection Vulnerabilities in WP Forum wordpress plugin
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in WP Forum wordpress plugin which could be exploited to perform SQL injection attacks. 1 SQL injection vulnerabilities in WP Forum wordpress plugin 1.1 The vulnerability exists due to input sanitation error in the...
SQL Injection Vulnerabilities in WP Forum Server
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in WP Forum Server WordPress plugin which could be exploited to perform SQL injection attacks. 1 SQL injection vulnerabilities in WP Forum Server 1.1 The vulnerability exists due to input sanitation errors in the...
Multiple Vulnerabilities in IWantOneButton WordPress Plugin
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in IWantOneButton WordPress Plugin which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerability in IWantOneButton WordPress Plugin The vulnerability...
SQL Injection Vulnerability in cdnvote
High-Tech Bridge SA Security Research Lab has discovered vulnerability in cdnvote WordPress plugin which could be exploited to perform SQL injection attacks. 1 SQL injection vulnerability in cdnvote The vulnerability exists due to input sanitation errors in the "cdnvotepoint" parameter in...
SQL Injection Vulnerability in Z-Vote
High-Tech Bridge SA Security Research Lab has discovered vulnerability in Z-Vote WordPress plugin which could be exploited to perform SQL injection attacks. 1 SQL injection vulnerability in Z-Vote The vulnerability exists due to input sanitation errors in the "zvote" parameter in zvote.php. A...
Multiple Vulnerabilities in Comment Rating
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Comment Rating which could be exploited to perform SQL injection attacks and gain access to sensitive information. 1 SQL injection vulnerabilities in Comment Rating The vulnerability exists due to input sanitatio...
Installation Path Disclosure Weakness in Coppermine
High-Tech Bridge SA Security Research Lab has discovered a weakness in Coppermine which could be exploited to gain access to potentially sensitive information. 1 Installation path disclosure weakness in Coppermine The weakness exists due to application reveals the full path to installation...
Installation Path Disclosure Weakness in Flatnux
High-Tech Bridge SA Security Research Lab has discovered a weakness in Flatnux which could be exploited to gain access to potentially sensitive information. 1 Installation path disclosure weakness in Flatnux The weakness exists due to application reveals the full path to installation directory in...
Denial of Service Vulnerability in FlatnuX
High-Tech Bridge SA Security Research Lab has discovered vulnerabilities in FlatnuX which could be exploited to cause a denial of service. 1 Denial of service vulnerability in FlatnuX The vulnerability exists due to endless loop in the login.html script. A remote attacker can send a specially...
SQL Injection Vulnerabilities in Seo Panel
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Seo Panel which could be exploited to perform SQL injection attacks. 1 SQL injection vulnerabilities in Seo Panel 1.1 The vulnerability exists due to input sanitation errors in the "langcode" parameter in...
Cross-site Scripting (XSS) Vulnerabilities in Photopad
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Photopad which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerabilities in Photopad: CVE-2011-1063 1.1 The vulnerability exists due to input sanitation errors in the...
Information Disclosure Vulnerability in Arctic Fox CMS
High-Tech Bridge SA Security Research Lab has discovered vulnerabilities in Arctic Fox CMS which could be exploited to disclose potentially sensitive information. 1 Information disclosure vulnerability in Arctic Fox CMS The vulnerability exists due to insufficient handling of error messages in th...
Cross-site Scripting (XSS) Vulnerabilities in Gollos
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Gollos which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerabilities in Gollos 1.1 The vulnerability exists due to input sanitation errors in the "returnurl" paramet...
Multiple Vulnerabilities in Wikipad
High-Tech Bridge SA Security Research Lab has discovered vulnerabilities in Wikipad which could be exploited to perform cross-site scripting and cross-site request forgery attacks and disclose potentially sensitive information. 1 Cross-site scripting XSS vulnerability in Wikipad The vulnerability...
Multiple Vulnerabilities in RunCMS
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in RunCMS which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerability in RunCMS The vulnerability exists due to input sanitation error in the "rc2user...
Multiple Vulnerabilities in WebAsyst Shop-Script
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in WebAsyst Shop-Script which could be exploited to perform cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerabilities in WebAsyst Shop-Script 1.1 The vulnerability exist...
Multiple Vulnerabilities in ViArt Shop
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in ViArt Shop which could be exploited to perform cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerability in ViArt Shop The vulnerability exists due to input sanitation...
Multiple Vulnerabilities in ReOS
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in ReOS which could be exploited to perform SQL injection attacks and compromise vulnerable system. 1 SQL injection vulnerabilities in ReOS 1.1 The vulnerability exists due to input sanitation errors in the...
Multiple Vulnerabilities in Podcast Generator
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Podcast Generator which could be exploited to perform cross-site scripting attacks, disclose potentially sensitive information and compromise vulnerable system. 1 Cross-site scripting vulnerability in Podcast...
Multiple Vulnerabilities in Redaxscript
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Redaxscript which could be exploited to perform SQL injection attacks and gain access to sensitive information. 1 SQL injection vulnerabilities in Redaxscript The vulnerability exists due to input sanitation erro...
Installation Path Disclosure Weakness in Pluck CMS
High-Tech Bridge SA Security Research Lab has discovered a weakness in Pluck CMS which could be exploited to gain access to potentially sensitive information. 1 Installation path disclosure weakness in Pluck CMS The weakness exists due to application reveals the full path to installation director...
Cross-site Request Forgery (CSRF) in KaiBB
High-Tech Bridge SA Security Research Lab has discovered vulnerability in KaiBB which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in KaiBB The vulnerability exists due to insufficient validation of the request origin in admin/core/account.ph...
Multiple Vulnerabilities in Pixelpost
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Pixelpost which could be exploited to perform cross-site scripting attacks and disclose potentially sensitive information. 1 Cross-site scripting vulnerability in Pixelpost The vulnerability exists due to input...
Multiple Vulnerabilities in Pivotx
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Pivotx which could be exploited to perform cross-site scripting attacks and disclose potentially sensitive information. 1 Cross-site scripting XSS vulnerabilities in Pivotx: CVE-2011-0772 1.1 The vulnerability...
Multiple Vulnerabilities in VaM Shop
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in VaM Shop which could be exploited to perform cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerabilities in VaM Shop: CVE-2011-0504 1.1 The vulnerability exists due to...
Cross-site Request Forgery (CSRF) Vulnerabilities in diafan.CMS
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in diafan.CMS which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF vulnerabilities in diafan.CMS 1.1 The vulnerability exists due to insufficient validation of th...
Cross-site Request Forgery (CSRF) in Cambio
High-Tech Bridge SA Security Research Lab has discovered vulnerability in Cambio which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in Cambio The vulnerability exists due to insufficient validation of the request origin in...
Cross-site Request Forgery (CSRF) in whCMS
High-Tech Bridge SA Security Research Lab has discovered vulnerability in whCMS which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in whCMS The vulnerability exists due to insufficient validation of the request origin in admin/index.php. A...
SQL Injection Vulnerability in Phenotype CMS
High-Tech Bridge SA Security Research Lab has discovered vulnerability in Phenotype CMS which could be exploited to perform SQL injection attacks. 1 SQL injection vulnerability in Phenotype CMS: CVE-2011-0407 The vulnerability exists due to input sanitation errors in the URL. A remote attacker ca...
Cross-site Request Forgery (CSRF) Vulnerabilities in PHP MicroCMS
High-Tech Bridge SA Security Research Lab has discovered vulnerabilities in PHP MicroCMS which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF vulnerabilities in PHP MicroCMS 1.1 The vulnerability exists due to insufficient validation of the...
Cross-site Request Forgery Vulnerabilities in F3Site
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in F3Site which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF vulnerabilities in F3Site 1.1 The vulnerability exists due to insufficient validation of the reques...
Cross-site Scripting (XSS) Vulnerability in WonderCMS
High-Tech Bridge SA Security Research Lab has discovered vulnerability in WonderCMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in WonderCMS The vulnerability exists due to input sanitation error in the "content" parameter in...
Authentication Bypass Vulnerability in phpMySport
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in phpMySport which could be exploited to bypass authentication mechanisms and gain access to the application. 1 Authentication bypass vulnerability in phpMySport The vulnerability exists due to insufficient...
Local File Inclusion Vulnerability in LightNEasy CMS
High-Tech Bridge SA Security Research Lab has discovered vulnerability in LightNEasy CMS which could be exploited to include and execute arbitrary local files on the target system. 1 Local file inclusion in LightNEasy CMS Input passed to the "setlanguage" variable in addons/contact/main.php is no...
Multiple Vulnerabilities in KaiBB
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in KaiBB which could be exploited to perform script insertions and SQL injection attacks. 1 Script insertion vulnerability in KaiBB Input passed to the "url" BBCode tag is not properly sanitized. A remote attacker c...
Cross-site Scripting (XSS) Vulnerability in ImpressCMS
High-Tech Bridge SA Security Research Lab has discovered vulnerability in ImpressCMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in ImpressCMS: CVE-2010-4616 The vulnerability exists due to input sanitation error in the...
Multiple Vulnerabilities in Hycus CMS
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Hycus CMS which could be exploited to perform SQL injection attacks, gain access to sensitive information and compromise vulnerable system. 1 SQL injection vulnerabilities in Hycus CMS: CVE-2010-4612 The...
Multiple Vulnerabilities in Injader CMS
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Injader CMS which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerabilities in Injader CMS 1.1 The vulnerability exists due to input sanitation error...
Multiple Vulnerabilities in HTML-EDIT CMS
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in HTML-EDIT CMS which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerability in HTML-EDIT CMS: CVE-2010-4610 The vulnerability exists due to input...
Multiple Vulnerabilities in Habari
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Habari which could be exploited to perform cross-site scripting attacks and gain potentially sensitive information. 1 Information disclosure weakness in Habari: CVE-2010-4608 The weakness was found in the...
Multiple Vulnerabilities in BLOG:CMS
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in BLOG:CMS which could be exploited to perform cross-site scripting, script insertion and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerabilities in BLOG:CMS: CVE-2010-4749 1.1 The...
Multiple Vulnerabilities in BEdita
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in BEdita which could be exploited to perform cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerability in BEdita The vulnerability exists due to input sanitation error in...
Multiple Vulnerabilities in Diferior
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Diferior which could be exploited to perform script insertion and cross-site request forgery attacks. 1 Script insertion vulnerability in Diferior: CVE-2010-4850 Input passed to the "postcontent" parameter in...
Cross-site Request Forgery (CSRF) in CMScout
High-Tech Bridge SA Security Research Lab has discovered vulnerability in CMScout which could be exploited to perform cross-site request forgery attacks. 1 Cross-site Request Forgery CSRF in CMScout The vulnerability exists due to insufficient validation of the request origin in admin.php. A remo...
Local File Inclusion Vulnerability in Exponent CMS
High-Tech Bridge SA Security Research Lab has discovered vulnerability in Exponent CMS which could be exploited to include and execute arbitrary local files on the target system. 1 Local file inclusion in Exponent CMS Input passed to the "module" parameter in podcast.php and rss.php is not proper...
Cross-site Scripting (XSS) Vulnerabilities in Zimplit CMS
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Zimplit CMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerabilities in Zimplit CMS: CVE-2010-4513 1.1 The vulnerability exists due to input sanitation error in...
Multiple Vulnerabilities in Etomite
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Etomite which could be exploited to perform cross-site scripting and SQL injection attacks and gain access to sensitive information. 1 Cross-site scripting XSS vulnerability in Etomite The vulnerability exists du...
Installation Path Disclosure Weakness in Enano CMS
High-Tech Bridge SA Security Research Lab has discovered a weakness in Enano CMS which could be exploited to gain access to potentially sensitive information. 1 Installation path disclosure weakness in Enano CMS: CVE-2010-4781 The weakness exists due to application reveals the full path to...