htbridge.com vulnerabilities and exploits

(subscribe to this query)

Directory traversal vulnerability in lib/functions/d-load.php in Horizon Quick Content Management System (QCMS) 4.0 and previous versions allows remote malicious users to read arbitrary files via a .. (dot dot) in the start parameter.

Horizon Quick Content Management System Project Horizon Quick Content Management System Horizon Quick Content Management System Project Horizon Quick Content Management System 3.2 Horizon Quick Content Management System Project Horizon Quick Content Management System 3.3 Horizon Quick Content Management System Project Horizon Quick Content Management System 3.4 Horizon Quick Content Management System Project Horizon Quick Content Management System 3.5.1 Horizon Quick Content Management System Project Horizon Quick Content Management System 3.5.2

SQL injection vulnerability in admin/campaign-zone-link.php in OpenX 2.8.10 before revision 81823 allows remote malicious users to execute arbitrary SQL commands via the ids[] parameter in a link action.

Openx Openx 2.8.10

Cross-site scripting (XSS) vulnerability in manager/templates/default/header.tpl in MODX Revolution 2.3.1-pl and previous versions allows remote malicious users to inject arbitrary web script or HTML via the "a" parameter to manager/. NOTE: this issue exists because of ...

Modx Modx Revolution

WordPress All In One WP Security plugin version 3.8.2 suffers from multiple remote SQL injection vulnerabilities.

Cross-site scripting (XSS) vulnerability in the EWWW Image Optimizer plugin prior to 2.0.2 for WordPress allows remote malicious users to inject arbitrary web script or HTML via the error parameter in the ewww-image-optimizer.php page to wp-admin/options-general.php, which is not...

Ewww Image Optimizer Plugin Project Ewww Image Optimizer Plugin Ewww Image Optimizer Plugin Project Ewww Image Optimizer Plugin 2.0.0

Multiple cross-site scripting (XSS) vulnerabilities in the Web-Dorado Photo Gallery plugin 1.1.30 and previous versions for WordPress allow remote malicious users to inject arbitrary web script or HTML via the (1) callback, (2) dir, or (3) extensions parameter in an addImages act...

Photo Gallery Plugin Project Photo Gallery Plugin 1.1.30

WordPress Photo Gallery plugin version 1.1.30 suffers from a cross site scripting vulnerability.

Joomla Komento extension version 1.7.2 suffers from a cross site scripting vulnerability.

Multiple cross-site request forgery (CSRF) vulnerabilities in Bulb Security Smartphone Pentest Framework (SPF) 0.1.2 up to and including 0.1.4 allow remote malicious users to hijack the authentication of administrators for requests that conduct (1) shell metacharacter or (2) SQL ...

Bulbsecurity Smartphone Pentest Framework 0.1.2 Bulbsecurity Smartphone Pentest Framework 0.1.3 Bulbsecurity Smartphone Pentest Framework 0.1.4

EGroupware Enterprise Line (EPL) prior to 1.1.20140505, EGroupware Community Edition prior to 1.8.007.20140506, and EGroupware prior to 14.1 beta allows remote authenticated administrators to execute arbitrary PHP code via crafted callback values to the call_user_func PHP functio...

Egroupware Egroupware

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook