David Vieira-Kurz

**Name of the Vulnerable Software and Affected Versions** Serendipity versions prior to 1.5.5 **Description** The issue allows remote attackers to execute arbitrary code. This is due to a Cross-Site Scripting (XSS) flaw in Xinha, which is included in the Serendipity package. The vulnerability can be exploited via the `backend.php` file in the `plugins/ExtendedFileManager` directory. **Recommendations** For versions prior to 1.5.5, update to version 1.5.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the `backend.php` file in the `plugins/ExtendedFileManager` directory to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Spring Security OAuth versions 1.0.0 through 1.0.5 Spring Security OAuth versions 2.0.0 through 2.0.9 **Description** The issue allows a malicious user to trigger remote code execution by crafting the value for the `response type` parameter, which is executed as Spring SpEL when processing authorization requests using the whitelabel views. **Recommendations** For versions 1.0.0 through 1.0.5, update to a version that fixes this issue. For versions 2.0.0 through 2.0.9, update to a version that fixes this issue. As a temporary workaround, consider restricting the use of the `response type` parameter in the affected API endpoint until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Safari in Apple iOS versions prior to 5.1.1 **Description** The issue allows remote attackers to spoof the location bar's URL via a crafted web site. **Recommendations** For versions prior to 5.1.1, update to version 5.1.1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** phpMyAdmin versions 3.4.x through 3.4.7 **Description** The issue allows remote attackers to inject arbitrary web script or HTML via various crafted inputs, including database names, SQL queries, and column types, in multiple panels and dialogs, such as the Database Synchronize panel, Database rename panel, table overview panel, view creation dialog, table search dialog, and create index dialog. **Recommendations** For phpMyAdmin versions 3.4.x through 3.4.7, update to version 3.4.8 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Simploo CMS versions 1.7.1 and earlier **Description** The issue allows remote authenticated users to inject arbitrary PHP code into config/custom/base.ini.php via the `ftpserver` parameter in the "FTP-Server field" to the `sicore/updates/optionssav` operation for "index.php". **Recommendations** For Simploo CMS versions 1.7.1 and earlier, as a temporary workaround, consider restricting access to the `ftpserver` parameter in the sicore/updates/optionssav operation for index.php until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** moziloWiki versions 1.0.1 and earlier **Description** The issue allows remote attackers to read arbitrary files via a .. (dot dot) in the `page` parameter of the print.php file. **Recommendations** For moziloWiki versions 1.0.1 and earlier, consider restricting access to the print.php file until a patch is available. As a temporary workaround, avoid using the `page` parameter in the print.php file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** SocialEngine versions 2.7 and earlier **Description** The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `comment secure` parameter in the profile comments.php file. **Recommendations** For SocialEngine versions 2.7 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SocialEngine versions 2.7 and earlier **Description** The issue allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the `PHPSESSID` cookie. **Recommendations** For SocialEngine versions 2.7 and earlier, update to a version later than 2.7 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Pro Clan Manager versions 0.4.2 and earlier **Description** A session fixation issue allows remote attackers to hijack web sessions by setting the `PHPSESSID` parameter. **Recommendations** For Pro Clan Manager versions 0.4.2 and earlier, update to a version later than 0.4.2 to resolve the issue.

Name of the Vulnerable Software and Affected Versions: eggblog versions 3.1.0 and earlier Description: A session fixation issue allows remote attackers to hijack web sessions by setting the `PHPSESSID` parameter. Recommendations: For versions 3.1.0 and earlier, update to a version later than 3.1.0 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** @Mail version 5.0 **Description** A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the `username` parameter in the atmail.php file. **Recommendations** For @Mail version 5.0, consider restricting access to the atmail.php file until a patch is available, and avoid using the `username` parameter in this context to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** eXV2 CMS versions 2.0.4.3 and earlier **Description** A session fixation issue allows remote attackers to hijack web sessions by setting the `PHPSESSID` cookie. **Recommendations** For versions 2.0.4.3 and earlier, update to a version later than 2.0.4.3 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** WebBlizzard CMS (affected versions not specified) **Description** A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the `Suchzeile` parameter in the index cms.php file. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Advanced Guestbook version 2.4 **Description** The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `entry` parameter in the guestbook.php file. **Recommendations** For Advanced Guestbook version 2.4, consider restricting access to the guestbook.php file until a patch is available, and avoid using the `entry` parameter in this file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Advanced Guestbook version 2.4 **Description** A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the `entry` parameter in the guestbook.php file. This might be related to SQL injection. **Recommendations** For Advanced Guestbook version 2.4, update the guestbook.php file to properly sanitize the `entry` parameter to prevent XSS attacks. As a temporary workaround, consider restricting access to the guestbook.php file until a patch is available.

**Name of the Vulnerable Software and Affected Versions** DreamCost HostAdmin versions 3.1 and earlier **Description** The issue allows remote attackers to execute arbitrary PHP code via a URL in the `path` parameter to API endpoints such as "functions.php" and "members.php". **Recommendations** For DreamCost HostAdmin versions 3.1 and earlier, consider restricting access to the vulnerable API endpoints "functions.php" and "members.php" to minimize the risk of exploitation. Avoid using the `path` parameter in these endpoints until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** SWsoft Plesk versions 8.0.1 and earlier **Description** The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to certain API endpoints, specifically (1) "get password.php" or (2) "login up.php3". **Recommendations** For SWsoft Plesk versions 8.0.1 and earlier, update to a version later than 8.0.1 to resolve the issue. As a temporary workaround, consider restricting access to the "get password.php" and "login up.php3" endpoints until a patch is available. Avoid using unspecified parameters in these endpoints to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Dan Jensen Travelsized CMS versions 0.4.1 and earlier **Description** The issue allows remote attackers to inject arbitrary web script or HTML via vulnerable parameters. Specifically, the parameters `page`, `page id`, and `language` are affected. This can lead to cross-site scripting (XSS) attacks. **Recommendations** For Dan Jensen Travelsized CMS versions 0.4.1 and earlier, update to a version later than 0.4.1 to resolve the issue. As a temporary workaround, consider restricting access to the `index.php` file or validating and sanitizing user input for the `page`, `page id`, and `language` parameters to prevent arbitrary script injection.

**Name of the Vulnerable Software and Affected Versions** ShopSystems versions 4.0 and earlier **Description** The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `sessid` parameter in the "index.php" file. **Recommendations** For versions 4.0 and earlier, update to a version later than 4.0 to resolve the issue. As a temporary workaround, consider restricting access to the `sessid` parameter in the "index.php" file until a patch is available.

Name of the Vulnerable Software and Affected Versions: phpComasy CMS versions 0.7.9pre and earlier Description: The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the `username` or `password` parameters in the index.php file. Recommendations: For phpComasy CMS versions 0.7.9pre and earlier, consider updating to a version that contains a fix for this issue, as using earlier versions poses a significant risk. At the moment, there is no information about a newer version that contains a fix for this vulnerability.