Skip to content
OpenAdvisories

Archive

9 April 2010

Vulnerabilities first published on this day (UTC), newest first.

18 results · Feed

  • Unscored —
    CVE-2010-1345 Public exploit Scanner template EPSS 17%

    Directory traversal vulnerability in the Cookex Agency CKForms (com_ckforms) component 1.3.3 for Joomla! allows remote …

  • Unscored —
    CVE-2010-1338 Public exploit

    SQL injection vulnerability in ts_other.php in the Teamsite Hack plugin 3.0 and earlier for WoltLab Burning Board allow…

  • Unscored —
    CVE-2010-1336 Public exploit

    Multiple SQL injection vulnerabilities in INVOhost 3.4 allow remote attackers to execute arbitrary SQL commands via the…

  • Unscored —
    CVE-2010-1346 Public exploit

    SQL injection vulnerability in admin/login.php in Mini CMS RibaFS 1.0, when magic_quotes_gpc is disabled, allows remote…

  • Unscored —
    CVE-2010-1342 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Direct News 4.10.2, when register_globals is enabled, allow remot…

  • Unscored —
    CVE-2010-1340 Public exploit Scanner template EPSS 14%

    Directory traversal vulnerability in jresearch.php in the J!Research (com_jresearch) component for Joomla! allows remot…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in ts_other.php in the Teamsite Hack plugin 3.0 and earlier for WoltLab Burnin…

  • Unscored —
    CVE-2010-1337 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in definitions.php in Lussumo Vanilla 1.1.10, and possibly 0.9.2 and…

  • Unscored —
    CVE-2010-1341 Public exploit

    SQL injection vulnerability in index.php in Systemsoftware Community Black Forum allows remote attackers to execute arb…

  • Unscored —
    CVE-2010-1335 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Insky CMS 006-0111, when register_globals is enabled, allow remot…

  • Unscored —
    CVE-2010-1343 Public exploit

    SQL injection vulnerability in photo.php in SiteX 0.7.4 beta allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2010-1344 Public exploit

    SQL injection vulnerability in the Cookex Agency CKForms (com_ckforms) component 1.3.3 for Joomla! allows remote attack…

  • Unscored —

    Multiple cross-site request forgery (CSRF) vulnerabilities in Pulse CMS Basic 1.2.2 and 1.2.3, and possibly Pulse Pro b…

  • Unscored —

    Unrestricted file upload vulnerability in Pulse CMS Basic 1.2.2 and 1.2.3, and possibly Pulse Pro before 1.3.2, allows …

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Almas Inc. Compiere J300_A02 and earlier allow remote attackers …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in PrettyBook PrettyFormMail allows remote attackers to inject arbitrary web s…

  • Unscored —

    SQL injection vulnerability in Heartlogic HL-SiteManager allows remote attackers to execute arbitrary SQL commands via …

  • Unscored —

    Unrestricted file upload vulnerability in Pulse CMS Basic 1.2.4 allows remote authenticated users to execute arbitrary …