darksecurity.de | Entries from September 2012

Warning: opendir(/var/www/html/web1/serendipity/plugins/serendipity_event_dpsyntaxhighlighter/sh/3.0.83.2/scripts/): failed to open dir: No such file or directory in /var/www/html/web1/serendipity/plugins/serendipity_event_dpsyntaxhighlighter/serendipity_event_dpsyntaxhighlighter.php on line 26

Warning: Invalid argument supplied for foreach() in /var/www/html/web1/serendipity/plugins/serendipity_event_dpsyntaxhighlighter/serendipity_event_dpsyntaxhighlighter.php on line 170
Skip to content

SSCHADV2012-014 - Joomla 2.5.6 Multiple Cross-site scripting vulnerabilities

Posted by Stefan Schurtz on Tuesday, September 18. 2012

Advisory:	Joomla 2.5.6 Multiple Cross-site scripting vulnerabilities
Advisory ID:	SSCHADV2012-014
Author:	Stefan Schurtz
Affected Software:	Successfully tested on Joomla 2.5.6
Vendor URL:	http://www.joomla.org/
Vendor Status:	fixed

======================
Vulnerability Description
======================

With activated "Module Language Switcher – position-4" (Extensions -> Modules -> Module Manager: Module Language Switcher), multiple XSS are possible.

Continue reading "SSCHADV2012-014 - Joomla 2.5.6 Multiple Cross-site scripting vulnerabilities"

SSCHADV2012-019 - Admidio 2.3.5 Multiple security vulnerabilities

Posted by Stefan Schurtz on Saturday, September 1. 2012

Advisory:	Admidio 2.3.5 Multiple security vulnerabilities
Advisory ID:	SSCHADV2012-019
Author:	Stefan Schurtz
Affected Software:	Successfully tested on Admidio 2.3.5
Vendor URL:	http://www.admidio.org/
Vendor Status:	fixed
CVE-ID:	CVE-2012-4748, CVE-2012-4749