Archive
September 2010
Vulnerabilities first published in this month (UTC), newest first.
65 results · Clear filters · Feed
-
Unscored —
The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees before reading inode …
-
Unscored —CVE-2010-3468 Public exploit
Directory traversal vulnerability in fileManager.cfc in Mura CMS 5.1 before 5.1.498 and 5.2 before 5.2.2809, and Sava C…
-
Unscored —CVE-2010-3490 Public exploit
Directory traversal vulnerability in page.recordings.php in the System Recordings component in the configuration interf…
-
Unscored —CVE-2010-3070 Public exploit
Cross-site scripting (XSS) vulnerability in NuSOAP 0.9.5, as used in MantisBT and other products, allows remote attacke…
-
Unscored —CVE-2010-3608 Public exploit
Multiple SQL injection vulnerabilities in wpQuiz 2.7 allow remote attackers to execute arbitrary SQL commands via the (…
-
Unscored —CVE-2010-3602 Public exploit
Cross-site scripting (XSS) vulnerability in ProfileView.aspx in mojoPortal 2.3.4.3 and 2.3.5.1 allows remote attackers …
-
Unscored —CVE-2010-3603 Public exploit
Cross-site request forgery (CSRF) vulnerability in the file manager service (Services/FileService.ashx) in mojoPortal 2…
-
Unscored —CVE-2010-3601 Public exploit
SQL injection vulnerability in index.php in ibPhotohost 1.1.2 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2010-3081 Public exploit
The compat_alloc_user_space functions in include/asm/compat.h files in the Linux kernel before 2.6.36-rc4-git2 on 64-bi…
-
Unscored —CVE-2010-3306 Public exploit
Directory traversal vulnerability in the modURL function in instance.c in Weborf before 0.12.3 allows remote attackers …
-
Unscored —CVE-2010-3489 Public exploit
Cross-site scripting (XSS) vulnerability in netautor/napro4/home/login2.php in CMS Digital Workroom (formerly Netautor …
-
Unscored —CVE-2010-3484 Public exploit
SQL injection vulnerability in common.php in LightNEasy 3.2.1 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2010-3481 Public exploit
Multiple SQL injection vulnerabilities in login.php in ApPHP PHP MicroCMS 1.0.1, when magic_quotes_gpc is disabled, all…
-
Unscored —CVE-2010-3485 Public exploit
SQL injection vulnerability in common.php in LightNEasy 3.2.1 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2010-3483 Public exploit
cms_write.php in Primitive CMS 1.0.9 does not properly restrict access, which allows remote attackers to gain administr…
-
Unscored —CVE-2010-3482 Public exploit
Multiple SQL injection vulnerabilities in cms_write.php in Primitive CMS 1.0.9 allow remote authenticated administrator…
-
Unscored —CVE-2010-3486 Public exploit
Directory traversal vulnerability in FileStorageUpload.ashx in SmarterMail 7.1.3876 allows remote attackers to read arb…
-
Unscored —CVE-2010-3479 Public exploit
SQL injection vulnerability in list.php in BoutikOne 1.0 allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2010-3480 Public exploit
Directory traversal vulnerability in index.php in ApPHP PHP MicroCMS 1.0.1, when magic_quotes_gpc is disabled, allows r…
-
Unscored —CVE-2009-5003 Public exploit
SQL injection vulnerability in click.php in e-soft24 Banner Exchange Script 1.0 allows remote attackers to execute arbi…
-
Unscored —CVE-2010-3301 Public exploit
The IA32 system call emulation functionality in arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.36-rc4-git2 on…
-
Unscored —
Microsoft .NET Framework 1.1 SP1, 2.0 SP1 and SP2, 3.5, 3.5 SP1, 3.5.1, and 4.0, as used for ASP.NET in Microsoft Inter…
-
Unscored —CVE-2010-3314 Public exploit
Cross-site scripting (XSS) vulnerability in login.php in EGroupware 1.4.001+.002; 1.6.001+.002 and possibly other versi…
-
High —CVE-2010-3313 Public exploit
EGroupware Code Injection vulnerability
phpgwapi/js/fckeditor/editor/dialog/fck_spellerpages/spellerpages/serverscripts/spellchecker.php in EGroupware 1.4.001+.002; 1.6.001+.002 and possibly other versions before 1.6.003; and EPL 9.1 before 9.1.20100309 and 9.2 before 9.2.20100309; allows remote at…
-
Unscored —CVE-2010-3457 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.0.7 and 2.1.1 allow remote attackers to inject ar…
-
Unscored —CVE-2010-3460 Public exploit
Directory traversal vulnerability in the HTTP interface in AXIGEN Mail Server 7.4.1 for Windows allows remote attackers…
-
Unscored —CVE-2010-3461 Public exploit
SQL injection vulnerability in the Publisher module in eNdonesia 8.4 allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2010-3467 Public exploit
SQL injection vulnerability in modules/sections/index.php in E-Xoopport Samsara 3.1 and earlier, when the Tutorial modu…
-
Unscored —CVE-2010-3456 Public exploit
Directory traversal vulnerability in download.php in EnergyScripts (ES) Simple Download 1.0 allows remote attackers to …
-
Unscored —CVE-2010-3462 Public exploit
Cross-site scripting (XSS) vulnerability in backend/plugin/Registration/index.php in Mollify 1.6, 1.6.5.5, and possibly…
-
Unscored —CVE-2010-3458 Public exploit
SQL injection vulnerability in lib/toolkit/events/event.section.php in Symphony CMS 2.0.7 and 2.1.1 allows remote attac…
-
Unscored —
The toStaticHTML function in Microsoft Internet Explorer 8, and the SafeHTML function in Microsoft Windows SharePoint S…
-
Unscored —CVE-2010-3073 Public exploit
SSL_Cipher.cpp in EncFS before 1.7.0 does not properly handle integer data sizes when constructing headers intended for…
-
Unscored —
Directory traversal vulnerability in jphone.php in the JPhone (com_jphone) component 1.0 Alpha 3 for Joomla! allows rem…
-
Unscored —CVE-2010-3422 Public exploit
SQL injection vulnerability in the JGen (com_jgen) component 0.9.33 for Joomla! allows remote attackers to execute arbi…
-
Unscored —CVE-2010-3419 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Haudenschilt Family Connections CMS (FCMS) 2.2.3 allow remote att…
-
Unscored —CVE-2010-3425 Public exploit
Cross-site scripting (XSS) vulnerability in UserControls/Popups/frmHelp.aspx in SmarterStats 5.3, 5.3.3819, and possibl…
-
Unscored —CVE-2010-3428 Public exploit
SQL injection vulnerability in modules/notes/json.php in Intermesh Group-Office 3.5.9 allows remote attackers to execut…
-
Unscored —
Stack-based buffer overflow in the MailCheck821Address function in nnotes.dll in the nrouter.exe service in the server …
-
Unscored —CVE-2010-3404 Public exploit
Multiple SQL injection vulnerabilities in eshtery CMS (aka eshtery.com) allow remote attackers to execute arbitrary SQL…