Vendor Dictionary: OndÅ™ej Brablc, David Szego and SiteBar Team

OndÅ™ej Brablc, David Szego and SiteBar Team

Short Name:	[None Entered]
Previous Names:	[None Entered]
URL:	[None Entered]
Email:	[None Entered]
Security URL:	[None Entered]
Security Email:	[None Entered]
Knowledge Base:	[None Entered]
Notes:	[No Notes]

Vulnerabilities by Vendor Product

OndÅ™ej Brablc, David Szego and SiteBar Team

OndÅ™ej Brablc, David Szego and SiteBar Team

SiteBar: 3.3.8; OSVDB ID: 41355 SiteBar integrator.php lang Parameter XSS; OSVDB ID: 41359 SiteBar index.php target Parameter XSS; OSVDB ID: 41358 SiteBar command.php Modify User Action uid Parameter XSS; OSVDB ID: 41356 SiteBar New Password Action token Parameter XSS; OSVDB ID: 41110 SiteBar translator.php dir Parameter Traversal Arbitrary File Access; OSVDB ID: 41581 SiteBar command.php forward Variable Arbitrary Site Redirect; OSVDB ID: 43760 Translation Module for SiteBar (translator.php) value Variable Arbitrary PHP Code Execution; OSVDB ID: 43604 Translation Module for SiteBar (translator.php) upd cmd Action edit Variable Arbitrary PHP Code Execution; OSVDB ID: 41357 SiteBar Folder Properties Action nid_acl Parameter XSS

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.