Archive
March 2010
Vulnerabilities first published in this month (UTC), newest first.
210 results · Clear filters · Feed
-
Unscored —CVE-2010-1048 Public exploit
Cross-site scripting (XSS) vulnerability in blog/index.php in Uiga Business Portal allows remote attackers to inject ar…
-
Unscored —CVE-2010-1053 Public exploit
Multiple SQL injection vulnerabilities in Zen Time Tracking 2.2 and earlier, when magic_quotes_gpc is disabled, allow r…
-
Unscored —CVE-2010-1045 Public exploit
SQL injection vulnerability in the Productbook (com_productbook) component 1.0.4 for Joomla! allows remote attackers to…
-
Unscored —CVE-2010-1051 Public exploit
Multiple SQL injection vulnerabilities in index.php in AudiStat 1.3 allow remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2010-1044 Public exploit
SQL injection vulnerability in Login.do in ManageEngine OpUtils 5.0 allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2010-1046 Public exploit
Multiple SQL injection vulnerabilities in index.php in Rostermain 1.1 and earlier allow remote attackers to execute arb…
-
Unscored —CVE-2010-1052 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in AudiStat 1.3 allow remote attackers to inject arbit…
-
Unscored —CVE-2010-1050 Public exploit
SQL injection vulnerability in index.php in AudiStat 1.3 allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —
Microsoft Windows Media Player 11 does not properly perform colorspace conversion, which allows remote attackers to cau…
-
Unscored —
Stack consumption vulnerability in the WebCore::CSSSelector function in WebKit, as used in Apple Safari 4.0.4, Apple Sa…
-
Unscored —
Stack-based buffer overflow in Orbital Viewer 1.04 allows user-assisted remote attackers to execute arbitrary code via …
-
Unscored —CVE-2010-1003 Public exploit
Directory traversal vulnerability in www/editor/tiny_mce/langs/language.php in eFront 3.5.x through 3.5.5 allows remote…
-
Unscored —CVE-2010-0733 Public exploit
Integer overflow in src/backend/executor/nodeHash.c in PostgreSQL 8.4.1 and earlier, and 8.5 through 8.5alpha2, allows …
-
Unscored —CVE-2009-4729 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in x10 Adult Media Script 1.7 allow remote attackers to inject arbi…
-
Unscored —CVE-2009-4724 Public exploit
SQL injection vulnerability in shop.htm in PaymentProcessorScript.net PPScript allows remote attackers to execute arbit…
-
Unscored —CVE-2009-4732 Public exploit
SQL injection vulnerability in tt/index.php in TT Web Site Manager 0.5, when magic_quotes_gpc is disabled, allows remot…
-
Unscored —CVE-2009-4721 Public exploit
Multiple SQL injection vulnerabilities in Admin/index.asp in Andrews-Web (A-W) BannerAd 1.0 allow remote attackers to e…
-
Unscored —CVE-2009-4722 Public exploit
SQL injection vulnerability in the CheckLogin function in includes/functions.php in Limny 1.01, when magic_quotes_gpc i…
-
Unscored —CVE-2009-4723 Public exploit
Directory traversal vulnerability in confirm.php in Netpet CMS 1.9 allows remote attackers to include and execute arbit…
-
Unscored —CVE-2009-4727 Public exploit
SQL injection vulnerability in x/login in JungleScripts Ajax Short Url Script allows remote attackers to execute arbitr…
-
Unscored —CVE-2009-4730 Public exploit
SQL injection vulnerability in report.php in x10 Adult Media Script 1.7 allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2009-4733 Public exploit
SQL injection vulnerability in checkuser.php in SimpleLoginSys 0.5, when magic_quotes_gpc is disabled, allows remote at…
-
Unscored —CVE-2009-4734 Public exploit
SQL injection vulnerability in login.php in Allomani Movies Library (Movies & Clips) 2.7.0 allows remote attackers to e…
-
Unscored —CVE-2009-4726 Public exploit
Directory traversal vulnerability in download.php in Quickdev 4 PHP allows remote attackers to read arbitrary files via…
-
Unscored —CVE-2009-4728 Public exploit
SQL injection vulnerability in the administrative interface in Questions Answered 1.3 allows remote attackers to execut…
-
Unscored —CVE-2009-4719 Public exploit
SQL injection vulnerability in index.php in Discloser 0.0.4 rc2 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2009-4725 Public exploit
Directory traversal vulnerability in modules/aljazeera/admin/setup.php in Arab Portal 2.2 and earlier, when register_gl…
-
Unscored —CVE-2009-4735 Public exploit
SQL injection vulnerability in login.php in Allomani Audio & Video Library (Songs & Clips version) 2.7.0 allows remote …
-
Unscored —
The xmlrpc extension in PHP 5.3.1 does not properly handle a missing methodName element in the first argument to the xm…
-
Unscored —CVE-2010-0983 Public exploit
PHP remote file inclusion vulnerability in include/mail.inc.php in Rezervi 3.0.2 and earlier, when register_globals is …
-
Unscored —CVE-2010-0981 Public exploit
SQL injection vulnerability in the TPJobs (com_tpjobs) component for Joomla! allows remote attackers to execute arbitra…
-
Unscored —CVE-2010-0984 Public exploit
Acidcat CMS 3.5.3 and earlier stores sensitive information under the web root with insufficient access control, which a…
-
Unscored —CVE-2010-0976 Public exploit
Acidcat CMS 3.5.x does not prevent access to install.asp after installation finishes, which might allow remote attacker…
-
Unscored —CVE-2010-0978 Public exploit
KMSoft Guestbook (aka GBook) 1.0 stores sensitive information under the web root with insufficient access control, whic…
-
Unscored —
Directory traversal vulnerability in the CARTwebERP (com_cartweberp) component 1.56.75 for Joomla! allows remote attack…
-
Unscored —CVE-2010-0980 Public exploit
SQL injection vulnerability in player.php in Left 4 Dead (L4D) Stats 1.1 allows remote attackers to execute arbitrary S…
-
Unscored —
Directory traversal vulnerability in the Abbreviations Manager (com_abbrev) component 1.1 for Joomla! allows remote att…
-
Unscored —CVE-2010-0970 Public exploit
SQL injection vulnerability in phpmylogon.php in PhpMyLogon 2 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2010-0974 Public exploit
Multiple SQL injection vulnerabilities in PHPCityPortal allow remote attackers to execute arbitrary SQL commands via th…
-
Unscored —CVE-2010-0968 Public exploit
SQL injection vulnerability in bannershow.php in Geekhelps ADMP 1.01 allows remote attackers to execute arbitrary SQL c…