Skip to content
OpenAdvisories

Archive

23 March 2010

Vulnerabilities first published on this day (UTC), newest first.

  1. 1 
  2. 219
  3. 322
  4. 4 
  5. 542
  6. 6 
  7. 7 
  8. 814
  9. 918
  10. 1032
  11. 11 
  12. 1221
  13. 13 
  14. 14 
  15. 1521
  16. 1628
  17. 17 
  18. 1820
  19. 1935
  20. 20 
  21. 21 
  22. 2216
  23. 2331
  24. 2419
  25. 2540
  26. 2634
  27. 27 
  28. 28 
  29. 2924
  30. 3049
  31. 3128

31 results · Feed

  • Unscored —

    Cross-site scripting (XSS) vulnerability in index.php in Entry Level CMS (EL CMS) allows remote attackers to inject arb…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Sawmill before 7.2.18 allows remote attackers to inject arbitrary web scrip…

  • Unscored —
    CVE-2010-1081 Public exploit Scanner template EPSS 15%

    Directory traversal vulnerability in the Community Polls (com_communitypolls) component 1.5.2, and possibly earlier, fo…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in view.php in Pulse CMS 1.2.2 allows remote attackers to inject arbitrary web…

  • Unscored —

    Multiple directory traversal vulnerabilities in OI.Blogs 1.0.0, when magic_quotes_gpc is disabled, allow remote attacke…

  • Unscored —

    SQL injection vulnerability in index.php in Entry Level CMS (EL CMS) allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2010-1077 Public exploit

    Directory traversal vulnerability in vbseo.php in Crawlability vBSEO plugin 3.1.0 for vBulletin allows remote attackers…

  • Unscored —
    CVE-2010-1078 Public exploit

    SQL injection vulnerability in archive.php in XlentProjects SphereCMS 1.1 alpha allows remote attackers to execute arbi…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the Currency Exchange module before 6.x-1.2 for Drupal allows remote attack…

  • Unscored —
    CVE-2010-1073 Public exploit

    SQL injection vulnerability in the jEmbed-Embed Anything (com_jembed) component for Joomla! allows remote attackers to …

  • Unscored —
    CVE-2010-1071 Public exploit

    SQL injection vulnerability in profil.php in phpMDJ 1.0.3 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2010-1070 Public exploit

    SQL injection vulnerability in index.php in ImagoScripts Deviant Art Clone allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2010-1069 Public exploit

    SQL injection vulnerability in games/game.php in ProArcadeScript allows remote attackers to execute arbitrary SQL comma…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in surgeftpmgr.cgi in NetWin SurgeFTP 2.3a6 allow remote attackers …

  • Unscored —
    CVE-2010-1065 Public exploit

    Lebisoft Ziyaretci Defteri 7.4 and 7.5 stores sensitive information under the web root with insufficient access control…

  • Unscored —

    The "IP address range limitation" function in OpenPNE 1.6 through 1.8, 2.0 through 2.8, 2.10 through 2.14, and 3.0 thro…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in search.php in Sniggabo CMS 2.21 allows remote attackers to inject arbitrary…

  • Unscored —
    CVE-2010-1067 Public exploit

    E-membres 1.0 stores sensitive information under the web root with insufficient access control, which allows remote att…

  • Unscored —
    CVE-2010-1064 Public exploit

    Erolife AjxGaleri VT stores sensitive information under the web root with insufficient access control, which allows rem…

  • Unscored —
    CVE-2010-1066 Public exploit

    AR Web Content Manager (AWCM) 2.1 stores sensitive information under the web root with insufficient access control, whi…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in search.php in CommonSense CMS 5.0 allows remote attackers to inject arbitra…

  • Unscored —

    Directory traversal vulnerability in staff/app/common.inc.php in Phpkobo Address Book Script 1.09, when magic_quotes_gp…

  • Unscored —
    CVE-2010-1058 Public exploit

    Directory traversal vulnerability in codelib/cfg/common.inc.php in Phpkobo Address Book Script 1.09, when magic_quotes_…

  • Unscored —
    CVE-2010-1055 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in osDate 2.1.9 and 2.5.4, when magic_quotes_gpc is disabled and reg…

  • Unscored —
    CVE-2010-1060 Public exploit

    Directory traversal vulnerability in staff/app/common.inc.php in Phpkobo Short URL 1.01, when magic_quotes_gpc is disab…

  • Unscored —
    CVE-2010-1056 Public exploit Scanner template EPSS 11%

    Directory traversal vulnerability in the RokDownloads (com_rokdownloads) component before 1.0.1 for Joomla! allows remo…

  • Unscored —

    Multiple directory traversal vulnerabilities in Phpkobo Free Real Estate Contact Form 1.09, when magic_quotes_gpc is di…

  • Unscored —

    Multiple directory traversal vulnerabilities in Phpkobo Short URL 1.01, when magic_quotes_gpc is disabled, allow remote…

  • Unscored —
    CVE-2010-1057 Public exploit

    Multiple directory traversal vulnerabilities in Phpkobo AdFreely (aka Ad Board Script) 1.01, when magic_quotes_gpc is d…

  • Unscored —
    CVE-2010-1054 Public exploit

    Multiple SQL injection vulnerabilities in ParsCMS allow remote attackers to execute arbitrary SQL commands via the RP p…

  • Unscored —
    CVE-2010-1062 Public exploit

    Directory traversal vulnerability in codelib/sys/common.inc.php in Phpkobo Free Real Estate Contact Form 1.09, when mag…