Security Advisories | Entries from December 2011

Warning: opendir(/var/www/html/web1/serendipity/plugins/serendipity_event_dpsyntaxhighlighter/sh/3.0.83.2/scripts/): failed to open dir: No such file or directory in /var/www/html/web1/serendipity/plugins/serendipity_event_dpsyntaxhighlighter/serendipity_event_dpsyntaxhighlighter.php on line 26

Warning: Invalid argument supplied for foreach() in /var/www/html/web1/serendipity/plugins/serendipity_event_dpsyntaxhighlighter/serendipity_event_dpsyntaxhighlighter.php on line 170
Skip to content

SSCHADV2011-039 - Meditate Web Content Editor 'username_input' SQL-Injection vulnerability

Posted by Stefan Schurtz on Monday, December 5. 2011

Advisory:	Meditate Web Content Editor ‘username_input’ SQL-Injection vulnerability
Advisory ID:	SSCHADV2011-039
Author:	Stefan Schurtz
Affected Software:	Successfully tested on Meditate 1.2
Vendor URL:	http://www.arlomedia.com/
Vendor Status:	fixed
EDB-ID:	18202

======================
Vulnerability Description:
======================

Meditate Web Content Editor is prone to a SQL-Injection vulnerability

Continue reading "SSCHADV2011-039 - Meditate Web Content Editor 'username_input' SQL-Injection vulnerability"

SSCHADV2011-038 - Ariadne 2.7.6 Multiple XSS vulnerabilities

Posted by Stefan Schurtz on Thursday, December 1. 2011

Advisory:	Ariadne 2.7.6 Multiple XSS vulnerabilities
Advisory ID:	SSCHADV2011-038
Author:	Stefan Schurtz
Affected Software:	Successfully tested on Ariadne 2.7.6
Vendor URL:	http://www.ariadne-cms.org/
Vendor Status:	informed
CVE-ID:	CVE-2011-4938 (thx to Henri Salo)