Archive
4 May 2010
Vulnerabilities first published on this day (UTC), newest first.
26 results · Clear filters · Feed
-
Unscored —CVE-2010-1686 Public exploit
Stack-based buffer overflow in (1) Urgent Backup 3.20, and (2) ABC Backup Pro 5.20 and ABC Backup 5.50, allows user-ass…
-
Unscored —CVE-2010-1710 Public exploit
Directory traversal vulnerability in login.php in Siestta 2.0, when register_globals is enabled, allows remote attacker…
-
Unscored —CVE-2010-1712 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in base/Comments.php in Webmobo WB News 2.3.3 allow remote attacker…
-
Unscored —CVE-2010-1685 Public exploit
Stack-based buffer overflow in CursorArts ZipWrangler 1.20 allows user-assisted remote attackers to execute arbitrary c…
-
Unscored —CVE-2010-1431 Public exploit
SQL injection vulnerability in templates_export.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbi…
-
Unscored —CVE-2010-1708 Public exploit
Multiple SQL injection vulnerabilities in agentadmin.php in Free Realty allow remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2010-1702 Public exploit
SQL injection vulnerability in submitticket.php in WHMCompleteSolution (WHMCS) 4.2 allows remote attackers to execute a…
-
Unscored —CVE-2010-1713 Public exploit
SQL injection vulnerability in modules.php in PostNuke 0.764 allows remote attackers to execute arbitrary SQL commands …
-
Unscored —
Directory traversal vulnerability in the iNetLanka Contact Us Draw Root Map (com_drawroot) component 1.1 for Joomla! al…
-
Unscored —CVE-2010-1687 Public exploit
Stack-based buffer overflow in lpd.exe in Mocha W32 LPD 1.9 allows remote attackers to cause a denial of service (crash…
-
Unscored —
Directory traversal vulnerability in the MT Fire Eagle (com_mtfireeagle) component 1.2 for Joomla! allows remote attack…
-
Unscored —CVE-2010-1711 Public exploit
Cross-site scripting (XSS) vulnerability in carga_foto_al.php in Siestta 2.0, when register_globals is enabled, allows …
-
Unscored —CVE-2010-1720 Public exploit
SQL injection vulnerability in the Q-Personel (com_qpersonel) component 1.0.2 and earlier for Joomla! allows remote att…
-
Unscored —CVE-2010-1716 Public exploit
SQL injection vulnerability in the Agenda Address Book (com_agenda) component 1.0.1 for Joomla! allows remote attackers…
-
Unscored —
Directory traversal vulnerability in the Online Market (com_market) component 2.x for Joomla! allows remote attackers t…
-
Unscored —CVE-2010-1705 Public exploit
SQL injection vulnerability in casting_view.php in Modelbook allows remote attackers to execute arbitrary SQL commands …
-
Unscored —
Directory traversal vulnerability in the Online Examination (aka Online Exam or com_onlineexam) component 1.5.0 for Joo…
-
Unscored —CVE-2010-1704 Public exploit
Multiple SQL injection vulnerabilities in 2daybiz Polls (aka Advanced Poll) Script allow remote attackers to execute ar…
-
Unscored —CVE-2010-1703 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index_search.php in 2daybiz Polls (aka Advanced Poll) Script all…
-
Unscored —CVE-2010-1701 Public exploit
SQL injection vulnerability in browse.html in PHP Video Battle Script allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2010-1721 Public exploit
SQL injection vulnerability in the Intellectual Property (aka IProperty or com_iproperty) component 1.5.3 for Joomla! a…
-
Unscored —
Directory traversal vulnerability in the iF surfALERT (com_if_surfalert) component 1.2 for Joomla! allows remote attack…
-
Unscored —
Directory traversal vulnerability in archeryscores.php in the Archery Scores (com_archeryscores) component 1.0.6 for Jo…
-
Unscored —CVE-2010-1706 Public exploit
Multiple SQL injection vulnerabilities in login.php in 2daybiz Auction Script allow remote attackers to execute arbitra…
-
Unscored —
Directory traversal vulnerability in the Arcade Games (com_arcadegames) component 1.0 for Joomla! allows remote attacke…
-
Unscored —CVE-2009-4834 Public exploit
lib.php in Zeroboard 4.1 pl7 allows remote attackers to execute arbitrary PHP code via a crafted parameter name, possib…