Archive
September 2011
Vulnerabilities first published in this month (UTC), newest first.
387 results · Feed
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Tembria Server Monitor before 6.0.5 Build 2252 allow remote atta…
-
Unscored —
NetSaro Enterprise Messenger Server 2.0 stores cleartext console credentials in configuration.xml, which allows local u…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in myAddressBook.asp in Sonexis ConferenceManager 9.2.11.0 and 9.3.…
-
Unscored —
NetSaro Enterprise Messenger Server 2.0 allows local users to discover cleartext server credentials by reading the NetS…
-
Unscored —
Tembria Server Monitor before 6.0.5 Build 2252 uses a substitution cipher to encrypt application credentials, which all…
-
Unscored —
Multiple SQL injection vulnerabilities in Sonexis ConferenceManager 9.3.14.0 allow remote attackers to execute arbitrar…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Licenses.html in Wibu-Systems CodeMeter WebAdmin 3.30 and 4.30 allows remot…
-
Unscored —
Multiple buffer overflows in the Syslog server in ManageEngine EventLog Analyzer 6.1 allow remote attackers to cause a …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine EventLog Analyzer 6.1 allow remote attackers to inj…
-
Unscored —CVE-2010-4845 Public exploit
Multiple SQL injection vulnerabilities in MH Products Projekt Shop allow remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2010-4852 Public exploit
Cross-site scripting (XSS) vulnerability in login.php in Eclime 1.1.2b allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2010-4849 Public exploit
SQL injection vulnerability in countrydetails.php in Alibaba Clone B2B 3.4 allows remote attackers to execute arbitrary…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in addlink.php in AXScripts AxsLinks 0.3 allow remote attackers to …
-
Unscored —CVE-2010-4851 Public exploit
Multiple SQL injection vulnerabilities in Eclime 1.1.2b allow remote attackers to execute arbitrary SQL commands via th…
-
Unscored —CVE-2010-4846 Public exploit
SQL injection vulnerability in view_item.php in MH Products Pay Pal Shop Digital allows remote attackers to execute arb…
-
Unscored —CVE-2010-4843 Public exploit
SQL injection vulnerability in website-page.php in PHP Web Scripts Ad Manager Pro 3.0 allows remote attackers to execut…
-
Unscored —CVE-2010-4847 Public exploit
SQL injection vulnerability in view_item.php in MH Products MHP Downloadshop allows remote attackers to execute arbitra…
-
Unscored —CVE-2010-4844 Public exploit
SQL injection vulnerability in content.php in MH Products Easy Online Shop allows remote attackers to execute arbitrary…
-
Unscored —CVE-2010-4842 Public exploit
SQL injection vulnerability in admin/login.php in MHP DownloadScript (aka MH Products Download Center) 2.2 allows remot…
-
Unscored —CVE-2010-4850 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Diferior 8.03 allow remote attackers to inject arbitrary web scr…
-
Unscored —
TheHostingTool (THT) 1.2.3 allows remote attackers to obtain sensitive information via a direct request to a .php file,…
-
Unscored —
PHP Point Of Sale (POS) 10.7 allows remote attackers to obtain sensitive information via a direct request to a .php fil…
-
Unscored —
SimpleTest 1.0.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which rev…
-
Unscored —
Francisco Burzi PHP-Nuke 8.0 allows remote attackers to obtain sensitive information via a direct request to a .php fil…
-
Unscored —
WEBinsta mailing list manager 1.3e allows remote attackers to obtain sensitive information via a direct request to a .p…
-
Unscored —
PhpHostBot 2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which revea…
-
Unscored —
PHProjekt 6.0.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reve…
-
Unscored —
osCommerce 3.0a5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which rev…
-
Unscored —
Yamamah 1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals …
-
Unscored —
NuSOAP 0.9.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals…
-
Unscored —
SugarCRM 6.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which revea…
-
Unscored —
TinyWebGallery (TWG) 1.8.3 allows remote attackers to obtain sensitive information via a direct request to a .php file,…
-
Unscored —
Pixelpost 1.7.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reve…
-
Unscored —
PhpGedView 4.2.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which rev…
-
Unscored —
phpLD 2-151.2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reve…
-
Unscored —
Pligg CMS 1.1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reve…
-
Unscored —
phpBook 2.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveal…
-
Unscored —
phpFreeChat 1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reve…
-
Unscored —
phpCollab 2.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveal…
-
Unscored —
Piwik 1.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals th…