imei Addmimistrator’s BugBlog

——-Summary——
Software: SupportSuite
Sowtware’s Web Site: http://www.kayako.com
Versions: 3.00.32
Class: Remote
Status: Unpatched
Exploit: Available
Solution: Not Available
Discovered by: imei Addmimistrator
Risk Level: Medium
——Description—–
Supportsuite , a great product of kayako, Ideal for providing ticket based support, is prone to XSS attack in multiple internal files.{more than 300 files} Read the rest of this entry »

Support Softwares | 3 Comments »

——-Summary——
Software: Olate Download
Sowtware’s Web Site: http://www.olate.co.uk/
Versions: 3.4.2
Class: Remote
Status: Patched
Exploit: Available
Solution: Not Available
Discovered by: imei Addmimistrator
Risk Level: High
——Description—–
Olate download is prone to Upload executable file in uploads folder, If admin specified users can upload files.
Read the rest of this entry »

Olate | 2 Comments »

——-Summary——
Software: Olate Download
Sowtware’s Web Site: http://www.olate.co.uk/
Versions: 3.4.2
Class: Remote
Status: Patched
Exploit: Available
Solution: Available
Discovered by: imei addmimistrator
Risk Level: Low
——Description—–
Olate download is prone to directory traversal in Uploads folder.
Read the rest of this entry »

Olate | 2 Comments »

——————-Summary—————-
Software: Olate Download
Sowtware’s Web Site: http://www.olate.co.uk/
Versions: 3.4.2
Class: Remote
Status: Patched
Exploit: Available
Solution: Not Available
Discovered by: imei addmimistrator
Risk Level: Middel
—————–Description—————
Olate download is prone to SQL injection in download.php file.
Lack of programmer’s knowledge about HTTP headers and process of assigning value to predefined global arrays, resulted to this bug. Read the rest of this entry »

Olate | 2 Comments »

——————-Summary—————-
Software: Olate Download
Sowtware’s Web Site: http://www.olate.co.uk/
Versions: 3.4.2
Class: Remote
Status: Patched
Exploit: Available
Solution: Not Available
Discovered by: imei addmimistrator
Risk Level: Middel
—————–Description—————
Olate download is prone to Cross site scripting, cause of simple code replacing for comments in mentioned file
Read the rest of this entry »

Olate | 1 Comment »