Tag Archives: web

CVE-2014-8490 TennisConnect COMPONENTS System XSS (Cross-Site Scripting) Security Vulnerability

Exploit Title: TennisConnect “TennisConnect COMPONENTS System” /index.cfm pid Parameter XSS Product: TennisConnect COMPONENTS System Vendor: TennisConnect Vulnerable Versions: 9.927 Tested Version: 9.927 Advisory Publication: Nov 18, 2014 Latest Update: Nov 18, 2014 Vulnerability Type: Cross-Site Scripting [CWE-79] CVE Reference: CVE-2014-8490 … Continue reading

Posted in Computer & Web Technology | Tagged , , , , , , , , , , , , , , , , , , , , , , , | Leave a comment

CVE-2014-7290 Atlas Systems Aeon XSS (Cross-Site Scripting) Security Vulnerability

CVE-2014-7290 Atlas Systems Aeon XSS (Cross-Site Scripting) Security Vulnerability Exploit Title: Atlas Systems Aeon XSS Vulnerability Product: Aeon Vendor: Atlas Systems Vulnerable Versions: 3.6 3.5 Tested Version: 3.6 Advisory Publication: Nov 12, 2014 Latest Update: Nov 12, 2014 Vulnerability Type: … Continue reading

Posted in Computer & Web Technology | Tagged , , , , , , , , , , , , , , , , , , , , , , , | Leave a comment

Vigilantes testing security of IT systems

Vigilantes testing security of IT systems A growing group of individuals are taking it upon themselves to test the security of information systems in organisations and report security flaws. SINGAPORE: Call them cybersecurity vigilantes if you will, or “white hats” — … Continue reading

Posted in Computer & Web Technology | Tagged , , , , , , , , , , , , , , , , , , , , , , , | Leave a comment

SmartCMS Multiple SQL Injection Security Vulnerability

Originally posted on IT Computer & Web Information Technology:
CVE-2014-9558 SmartCMS Multiple SQL Injection Security Vulnerability ? Exploit Title: Smartwebsites SmartCMS v.2 Multiple SQL Injection Security Vulnerabilities Product: SmartCMS v.2 Vendor: Smartwebsites Vulnerable Versions: v.2 Tested Version: v.2 Advisory Publication:…

Posted in Computer & Web Technology, Computer Technology | Tagged , , , , , , , , , , , , , , , , , , , , , , | Leave a comment

CVE-2014-8753 Cit-e-Net Multiple XSS (Cross-Site Scripting) Security Vulnerabilities

Originally posted on IT Computer & Web Information Technology:
CVE-2014-8753 Cit-e-Net Multiple XSS (Cross-Site Scripting) Security Vulnerabilities ? Exploit Title: Cit-e-Net Multiple XSS (Cross-Site Scripting) Security Vulnerabilities Product: Cit-e-Access Vendor: Cit-e-Net Vulnerable Versions: Version 6 Tested Version: Version 6 Advisory…

Posted in Computer & Web Technology, Database Technology | Tagged , , , , , , , , , , , , , , , , , , , , , , | Leave a comment

Comsenz SupeSite CMS Reflected XSS (Cross-site Scripting) Security Vulnerabilities

Originally posted on IT Computer & Web Information Technology:
Comsenz SupeSite CMS Reflected XSS (Cross-site Scripting) Security Vulnerabilities ? Exploit Title: Comsenz SupeSite CMS Reflected XSS Security Vulnerabilities Product: SupeSite CMS (Content Management System) Vendor: Comsenz Vulnerable Versions: 6.0.1UC 7.0…

Posted in Computer & Web Technology, IT Technology | Tagged , , , , , , , , , , , , , , , , , , , , , , | Leave a comment

WordPress Newsletter Plug-in URL Redirection (Open Redirect) Security Vulnerabilities

Originally posted on IT Computer & Web Information Technology:
WordPress Newsletter Plug-in URL Redirection (Open Redirect) Security Vulnerabilities ? Exploit Title: WordPress Newsletter Plug-in /do.php &nr parameter URL Redirection Security Vulnerabilities Product: WordPress Newsletter Plug-in Vendor: Satollo.net Vulnerable Versions: 2.6.*…

Posted in Computer & Web Technology, Web Application Technology | Tagged , , , , , , , , , , , , , , , , , , , , , , | Leave a comment