Security Advisories | Entries from October 2011

SSCHADV2011-028 - FreeSMS Multiple Cross-site Scripting Vulnerabilities

Posted by Stefan Schurtz on Saturday, October 15. 2011

Advisory:	FreeSMS Multiple Cross-site Scripting Vulnerabilities
Advisory ID:	SSCHADV2011-028
Author:	Stefan Schurtz
Affected Software:	Successfully tested on FreeSMS 2.1.2
Vendor URL:	https://sourceforge.net/projects/freesms/
Vendor Status:	informed
CVE-ID:	-

======================
Vulnerability Description:
======================

FreeSMS (Free Student Management System) is prone to multiple Cross-Site scripting vulernabilities

Posted by Stefan Schurtz on Saturday, October 8. 2011

Advisory:	KaiBB 2.0.1 XSS and SQL Injection vulnerabilities
Advisory ID:	SSCHADV2011-027
Author:	Stefan Schurtz
Affected Software:	Successfully tested on KaiBB 2.0.1
Vendor URL:	http://code.google.com/p/kaibb/
Vendor Status:	informed
CVE-ID:	-

======================
Vulnerability Description:
======================

KaiBB 2.0.1 is prone to XSS and SQL Injection vulnerabilities

Posted by Stefan Schurtz on Saturday, October 8. 2011

Advisory:	openEngine 2.0 ‘key’ Blind SQL Injection vulnerability
Advisory ID:	SSCHADV2011-026
Author:	Stefan Schurtz
Affected Software:	Successfully tested on openEngine 2.0 100226
Vendor URL:	http://www.openengine.de/
Vendor Status:	informed
CVE-ID:	-

======================
Vulnerability Description
======================

The ‘key’ parameter in openEngine 2.0 is prone to a Blind SQL Injection

Posted by Stefan Schurtz on Saturday, October 8. 2011

Advisory:	Contao 2.10.1 Cross-site scripting vulnerability
Advisory ID:	SSCHADV2011-025
Author:	Stefan Schurtz
Affected Software:	Successfully tested on Contao 2.10.1
Vendor URL:	http://www.contao.org/
Vendor Status:	fixed
CVE-ID:	CVE-2011-4335

======================

Vulnerability Description:

======================

Contao 2.10 is prone to a Cross-site scripting vulnerability

Posted by Stefan Schurtz on Monday, October 3. 2011

Advisory:	phpFK 7.2.5 Multiple Cross-site Scripting vulnerabilities
Advisory ID:	SSCHADV2011-022
Author:	Stefan Schurtz
Affected Software:	Successfully tested on phpFK 7.2.5
Vendor URL:	http://www.frank-karau.de/
Vendor Status:	informed
CVE-ID:	-

======================
Vulnerability Description:
======================

phpFK 7.2.5 is prone to multiple Cross-site scripting vulnerabilities

Posted by Stefan Schurtz on Monday, October 3. 2011

Advisory:	Phorum 5.2.18 Cross-site Scripting vulnerability
Advisory ID:	SSCHADV2011-023
Author:	Stefan Schurtz
Affected Software:	Successfully tested on Phorum 5.2.18
Vendor URL:	http://www.phorum.org/
Vendor Status:	informed
CVE-ID:	-

======================
Vulnerability Description:
======================

Phorum 5.2.18 is prone to a Cross-site scripting vulnerability