htbridge.com vulnerabilities and exploits

(subscribe to this query)

SQL injection vulnerability in include/functions_trackbacks.inc.php in Serendipity 1.6.2 allows remote malicious users to execute arbitrary SQL commands via the url parameter to comment.php.

S9y Serendipity S9y Serendipity 0.3 S9y Serendipity 0.4 S9y Serendipity 0.7 S9y Serendipity 0.7.1 S9y Serendipity 0.8 S9y Serendipity 0.8.1 S9y Serendipity 0.8.2 S9y Serendipity 0.8.3 S9y Serendipity 0.8.4 S9y Serendipity 0.8.5 S9y Serendipity 0.9

Multiple cross-site scripting (XSS) vulnerabilities in Forma Lms prior to 1.2.1 p01 allow remote malicious users to inject arbitrary web script or HTML via the (1) id_custom parameter in an amanmenu request or (2) id_game parameter in an alms/games/edit request to appCore/index.p...

Formalms Formalms

Forma Lms version 1.2.1 suffers from a cross site scripting vulnerability.

Cross-site scripting (XSS) vulnerability in cattranslate.php in the CatTranslate JQuery plugin in BlackCat CMS 1.0.3 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the msg parameter.

Blackcat-cms Blackcat Cms

WordPress TheCartPress plugin version 1.3.9 suffers from local file inclusion, improper access control, and cross site scripting vulnerabilities.

The eshop_checkout function in checkout.php in the Wordpress Eshop plugin 6.3.11 and previous versions does not validate variables in the "eshopcart" HTTP cookie, which allows remote malicious users to perform cross-site scripting (XSS) attacks, or a path disclosure att...

Eshop Project Eshop

Multiple cross-site scripting (XSS) vulnerabilities in wppa-ajax-front.php in the WP Photo Album Plus (aka WPPA) plugin prior to 6.1.3 for WordPress allow remote malicious users to inject arbitrary web script or HTML via the (1) comemail or (2) comname parameter in a wppa do-comm...

Wppa.opajaap Wp-photo-album-plus

Directory traversal vulnerability in pages/setup.php in Montala Limited ResourceSpace prior to 7.2.6727 allows remote malicious users to include and execute arbitrary local files via a .. (dot dot) in the defaultlanguage parameter.

Montala Resourcespace

ClipBucket version 2.6 revision 738 suffers from a remote SQL injection vulnerability.

Cross-site scripting (XSS) vulnerability in include.php in Achievo 1.4.5 allows remote malicious users to inject arbitrary web script or HTML via the field parameter.

Achievo Achievo 1.4.5

« PREV 1 2 3 4 5 6 7 8 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook