darksecurity.de | Entries from October 2012

Warning: opendir(/var/www/html/web1/serendipity/plugins/serendipity_event_dpsyntaxhighlighter/sh/3.0.83.2/scripts/): failed to open dir: No such file or directory in /var/www/html/web1/serendipity/plugins/serendipity_event_dpsyntaxhighlighter/serendipity_event_dpsyntaxhighlighter.php on line 26

Warning: Invalid argument supplied for foreach() in /var/www/html/web1/serendipity/plugins/serendipity_event_dpsyntaxhighlighter/serendipity_event_dpsyntaxhighlighter.php on line 170
Skip to content

SSCHADV2012-022 - Piwigo 2.4.3 Cross-Site Scripting vulnerability

Posted by Stefan Schurtz on Saturday, October 20. 2012

Advisory:	Piwigo 2.4.3 Cross-Site Scripting vulnerability
Advisory ID:	SSCHADV2012-022
Author:	Stefan Schurtz
Affected Software:	Successfully tested on Piwigo 2.4.3
Vendor URL:	http://piwigo.org/
Vendor Status:	fixed

======================
Vulnerability Description
======================

Piwigo 2.4.3 is prone to a Cross-Site Scripting vulnerability

Continue reading "SSCHADV2012-022 - Piwigo 2.4.3 Cross-Site Scripting vulnerability"

SSCHADV2012-021 - Zen cart v1.5.0 & v1.51 Cross-Site Scripting vulnerability

Posted by Stefan Schurtz on Saturday, October 20. 2012

Advisory:	Zen cart v1.5.0 & v1.51 Cross-Site Scripting vulnerability
Advisory ID:	SSCHADV2012-021
Author:	Stefan Schurtz
Affected Software:	Successfully tested on Zen-cart-v150-12302011
Vendor URL:	http://www.zen-cart.com/
Vendor Status:	fixed