Post Revolution 0.8.0c Multiple vulnerabilities
info
———————————
Name : Post Revolution 0.8.0c Multiple Remote Vulnerabilities
Class: Design Error && Input Validation Error
CVE: CVE-2011-1952, CVE-2011-1953, CVE-2011-1954
Remote: Yes
Local: No
Credit : Javier Bassi <javierbassi [at] gmail [dot] com>
Vulnerable : All versions prior to and including 0.8.0c are affected.
Vendor Hompeage : http://postrev.com.ar
[...]
XSS in Webmin 1.540 + exploit for privilege escalation (CVE-2011-1937)
Information
——————–
Name : XSS vulnerability in Webmin
Software : All versions prior to and including 1.540 are affected.
Vendor Hompeage : http://www.webmin.com
Vulnerability Type : Cross-Site Scripting
IDs: CVE-2011-1937 BID-47558
Severity : Medium
Researcher : Javier Bassi <javierbassi [at] gmail [dot] com>
[...]

