htbridge.com vulnerabilities and exploits

(subscribe to this query)

PBBoard version 2.1.4 suffers from improper authentication, improper access control, and remote SQL injection vulnerabilities.

SQL injection vulnerability in the Manage Albums feature in zp-core/admin-albumsort.php in ZENphoto 1.4.2 allows remote authenticated users to execute arbitrary SQL commands via the sortableList parameter.

Zenphoto Zenphoto 1.4.2

Open Journal Systems version 2.3.6 suffers from file manipulation, cross site scripting, and shell upload vulnerabilities.

Eval injection vulnerability in zp-core/zp-extensions/viewer_size_image.php in ZENphoto 1.4.2, when the viewer_size_image plugin is enabled, allows remote malicious users to execute arbitrary PHP code via the viewer_size_image_saved cookie.

Zenphoto Zenphoto 1.4.2

Cross-site scripting (XSS) vulnerability in the EWWW Image Optimizer plugin prior to 2.0.2 for WordPress allows remote malicious users to inject arbitrary web script or HTML via the error parameter in the ewww-image-optimizer.php page to wp-admin/options-general.php, which is not...

Ewww Image Optimizer Plugin Project Ewww Image Optimizer Plugin Ewww Image Optimizer Plugin Project Ewww Image Optimizer Plugin 2.0.0

The Bitrix e-Store module prior to 14.0.1 for Bitrix Site Manager uses sequential values for the BITRIX_SM_SALE_UID cookie, which makes it easier for remote malicious users to guess the cookie value and bypass authentication via a brute force attack.

Bitrix Bitrix E-store Module

Cross-site scripting (XSS) vulnerability in the Search module prior to 1.1.1 for Jamroom allows remote malicious users to inject arbitrary web script or HTML via the search_string parameter to search/results/all/1/4.

Jamroom Search Module Jamroom Search Module 1.0.0

Cross-site scripting (XSS) vulnerability in the Mijosoft MijoSearch component 2.0.4 and previous versions for Joomla! allows remote malicious users to inject arbitrary web script or HTML via the query parameter to component/mijosearch/search.

Miwisoft Mijosearch

The Mijosoft MijoSearch component 2.0.1 and previous versions for Joomla! allows remote malicious users to obtain sensitive information via a request to component/mijosearch/search, which reveals the installation path in an error message.

Miwisoft Mijosearch

Joomla Komento extension version 1.7.2 suffers from a cross site scripting vulnerability.

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook