Security Advisories | Entries from Friday, January 4. 2013

Warning: opendir(/var/www/html/web1/serendipity/plugins/serendipity_event_dpsyntaxhighlighter/sh/3.0.83.2/scripts/): failed to open dir: No such file or directory in /var/www/html/web1/serendipity/plugins/serendipity_event_dpsyntaxhighlighter/serendipity_event_dpsyntaxhighlighter.php on line 26

Warning: Invalid argument supplied for foreach() in /var/www/html/web1/serendipity/plugins/serendipity_event_dpsyntaxhighlighter/serendipity_event_dpsyntaxhighlighter.php on line 170
Skip to content

SSCHADV2013-002 - heise.de - Cross-site Scripting vulnerability

Posted by Stefan Schurtz on Friday, January 4. 2013

Advisory:	heise.de – Cross-site Scripting vulnerability
Advisory ID:	SSCHADV2013-002
Author:	Stefan Schurtz
Affected Software:	Successfully tested on heise.de
Vendor URL:	http://www.heise.de
Vendor Status:	fixed

======================
Vulnerability Description
======================

http://www.heise.de is prone to a XSS vulnerability

Continue reading "SSCHADV2013-002 - heise.de - Cross-site Scripting vulnerability"

SSCHADV2013-001 - Websitebaker Add-on 'Concert Calendar 2.1.4' XSS & SQLi vulnerability

Posted by Stefan Schurtz on Friday, January 4. 2013

Advisory:	Websitebaker Add-on ‘Concert Calendar 2.1.4’ XSS & SQLi vulnerability
Advisory ID:	SSCHADV2013-001
Author:	Stefan Schurtz
Affected Software:	Successfully tested on Concert Calendar 2.1.4
Vendor URL:	http://addons.websitebaker2.org/pages/en/browse-add-ons.php?id=0E8BC37
Vendor Status:	fixed