imei Addmimistrator’s BugBlog

——–Summary——–
Software: CuteNews
Sowtware’s Web Site: http://cutephp.com
Versions: 1.4.1
Class: Remote
Status: Unpatched
Exploit: Available
Solution: NotAvailable
Discovered by: imei addmimistrator
Risk Level: Mediume&High
——-Description——-
There is a security bug in CuteNews version 1.4.1 that
allows malicious people to conduct an XSS attack.
This bug is the result of poor checking of user input
(Quotations and
< &>) which are passed to the “show” parameter.
An attacker may use this issue […]

Miscellaneous | 16 Comments »

——–Summary——–
Software: vBulletin
Sowtware’s Web Site: http://www.vBulletin.com
Versions: 3.0.12-3.5.3
Class: Remote
Status: Unpatched
Exploit: Available
Solution: Available
Discovered by: imei addmimistrator
Risk Level: Mediume
——-Description——-
There is a security bug in most powerfull & common forum software vBulletin version 3.0.12&3.5.3 that allows attacker performe a XSS attack. bug is in result of unsentizing quotation and < & > characters for “email” field of users’ information. a […]

vBulletin, Forum Software | 19 Comments »

——————-Summary—————-
Software: WordPress
Sowtware’s Web Site: http://www.wordpress.org
Versions: 2.0.0
Class: Remote
Status: Unpatched
Exploit: Available
Solution: Available
Discovered by: imei addmimistrator
Risk Level: Low
—————–Description—————
There is some security bug in most poweful and common Blog Software, WordPress 2.0.0 (latest version) that allows attacker performe an XSS attack. bug is in result of poor checking quotations for user suplied variables in author’s website for not logged […]

WeblogSoftwares | 90 Comments »

——————-Summary—————-
Software: MyBB
Sowtware’s Web Site: http://www.mybboard.com
Versions: 1.0.3
Class: Remote
Status: Unpatched
Exploit: Available
Solution: Available
Discovered by: imei addmimistrator
Risk Level: high
—————–Description—————
There is some security bug in MyBB 1.0.3 software (latest version fully patched) file private.php that allows attacker performe an SQLINJECTION attack. bug is in result of poor checking quotations for user suplied variables.
as this bug is an UPDATE&DELETE query […]

MyBB, Forum Software | 1 Comment »

——————-Summary—————-
Software: MyBB
Sowtware’s Web Site: http://www.mybboard.com
Versions: 1.0.3
Class: Remote
Status: Unpatched
Exploit: Available
Solution: Available
Discovered by: imei addmimistrator
Risk Level: mediume high
—————–Description—————
There is some security bug in MyBB 1.0.3 software (latest version fully patched) file managegroup.php lines 313 that allows attacker performe an SQLINJECTION and XSS attack. bug is in result of poor checking non integer values for “gidâ€? input […]

MyBB, Forum Software | 1 Comment »