jetlib.sec » Bugtraq » Multiple vulnerabilities in 11in1

Feeds

132968 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

Bugtraq

• February 15, 2012
• 

  Multiple vulnerabilities in 11in1

  Posted: February 15th, 2012, 8:08am PST

  Tags:   

  Posted by advisory on Feb 15

  Advisory ID: HTB23071
  Product: 11in1
  Vendor: 11in1
  Vulnerable Version(s): 1.2.1 stable 12-31-2011 and probably prior
  Tested Version: 1.2.1 stable 12-31-2011
  Vendor Notification: 25 January 2012
  Public Disclosure: 15 February 2012
  Vulnerability Type: Local File Inclusion, Сross-Site Request Forgery (CSRF)
  Risk Level: High
  Credit: High-Tech Bridge SA Security Research Lab ( https://www.htbridge.ch/advisory/ )...