September 2011

387 results · Feed

• Unscored —
  CVE-2011-3724

  CubeCart 4.4.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which revea…

  Sep 23, 2011
• Unscored —
  CVE-2011-3715

  ClanTiger 1.1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reve…

  Sep 23, 2011
• Unscored —
  CVE-2011-3749

  ka-Map 1.0-20070205 allows remote attackers to obtain sensitive information via a direct request to a .php file, which …

  Sep 23, 2011
• Unscored —
  CVE-2011-3728

  Dolphin 7.0.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveal…

  Sep 23, 2011
• Unscored —
  CVE-2011-3742

  HelpCenter Live 2.1.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, whic…

  Sep 23, 2011
• Unscored —
  CVE-2011-3743

  Hesk 2.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the…

  Sep 23, 2011
• Unscored —
  CVE-2011-3757

  Moodle 2.0.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals…

  moodle Ubuntu
  Sep 23, 2011
• Unscored —
  CVE-2011-3697

  Achievo 1.4.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveal…

  Sep 23, 2011
• Unscored —
  CVE-2011-3745

  HycusCMS 1.0.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which revea…

  Sep 23, 2011
• Unscored —
  CVE-2011-3710

  bbPress 1.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveal…

  Sep 23, 2011
• Unscored —
  CVE-2011-3698

  AdaptCMS 2.0.2 Beta allows remote attackers to obtain sensitive information via a direct request to a .php file, which …

  Sep 23, 2011
• Unscored —
  CVE-2011-3713 Public exploit

  cFTP r80 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the…

  Sep 23, 2011
• Unscored —
  CVE-2011-3718

  CMS Made Simple (CMSMS) 1.9.2 allows remote attackers to obtain sensitive information via a direct request to a .php fi…

  Sep 23, 2011
• Unscored —
  CVE-2011-3732

  eggBlog 4.1.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveal…

  Sep 23, 2011
• Unscored —
  CVE-2011-3756

  MicroBlog 0.9.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reve…

  Sep 23, 2011
• Unscored —
  CVE-2011-3735

  Escort Agency CMS (aka escort-agency-cms) allows remote attackers to obtain sensitive information via crafted array par…

  Sep 23, 2011
• Unscored —
  CVE-2011-3695

  111WebCalendar 1.2.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which…

  Sep 23, 2011
• Unscored —
  CVE-2011-3711

  BIGACE 2.7.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals…

  Sep 23, 2011
• Unscored —
  CVE-2011-3714

  ClanSphere 2010.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which re…

  Sep 23, 2011
• Unscored —
  CVE-2011-3726

  DoceboLMS 4.0.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reve…

  Sep 23, 2011
• Unscored —
  CVE-2011-3699

  John Lim ADOdb Library for PHP 5.11 allows remote attackers to obtain sensitive information via a direct request to a .…

  libphp-adodb libphp-adodb Debian Ubuntu
  Sep 23, 2011
• Unscored —
  CVE-2011-3748

  Kamads Classifieds 2_B3 allows remote attackers to obtain sensitive information via a direct request to a .php file, wh…

  Sep 23, 2011
• Unscored —
  CVE-2011-3719

  CodeIgniter 1.7.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which re…

  Sep 23, 2011
• Unscored —
  CVE-2011-3733

  Elgg 1.7.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals t…

  Sep 23, 2011
• Unscored —
  CVE-2011-3738

  Feng Office 1.7.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which re…

  Sep 23, 2011
• Medium 5.3
  CVE-2011-3744

  HTML Purifier allows remote attackers to obtain sensitive information

  HTML Purifier 4.2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by tests/PHPT/Reporter/SimpleTest.php and certain other files.

  ezyang/htmlpurifier php-htmlpurifier Ubuntu Packagist
  Sep 23, 2011
• Unscored —
  CVE-2011-3720

  conceptcms 5.3.1, 5.3.3, and possibly other versions allows remote attackers to obtain sensitive information via a dire…

  Sep 23, 2011
• Unscored —
  CVE-2011-3731

  e107 0.7.24 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals …

  Sep 23, 2011
• Unscored —
  CVE-2011-3758

  ::mound:: 2.1.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reve…

  Sep 23, 2011
• Unscored —
  CVE-2011-3706

  ATutor 2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals t…

  Sep 23, 2011
• Unscored —
  CVE-2011-3717

  ClipBucket 2.0.9 allows remote attackers to obtain sensitive information via a direct request to a .php file, which rev…

  Sep 23, 2011
• Unscored —
  CVE-2011-3755

  MantisBT 1.2.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which revea…

  Sep 23, 2011
• Unscored —
  CVE-2011-2766

  The FCGI (aka Fast CGI) module 0.70 through 0.73 for Perl, as used by CGI::Fast, uses environment variable values from …

  libfcgi-perl Debian
  Sep 23, 2011
• Unscored —
  CVE-2011-2544 Public exploit

  Cross-site scripting (XSS) vulnerability in the web interface in Cisco TelePresence System MXP Series F9.1 and earlier …

  Sep 23, 2011
• Unscored —
  CVE-2011-2543 Public exploit EPSS 12%

  Buffer overflow in the cuil component in Cisco Telepresence System Integrator C Series 4.x before TC4.2.0 allows remote…

  Sep 23, 2011
• Unscored —
  CVE-2011-1913

  SQL injection vulnerability in the login form in the web interface in Mercator SENTINEL 2.0 allows remote attackers to …

  Sep 22, 2011
• Unscored —
  CVE-2011-3210

  The ephemeral ECDH ciphersuite functionality in OpenSSL 0.9.8 through 0.9.8r and 1.0.x before 1.0.0e does not ensure th…

  openssl Debian
  Sep 22, 2011
• Unscored —
  CVE-2011-3207

  crypto/x509/x509_vfy.c in OpenSSL 1.0.x before 1.0.0e does not initialize certain structure members, which makes it eas…

  openssl Debian
  Sep 22, 2011
• Unscored —
  CVE-2011-2429

  Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allow…

  Sep 22, 2011
• Unscored —
  CVE-2011-2427

  Stack-based buffer overflow in the ActionScript Virtual Machine (AVM) component in Adobe Flash Player before 10.3.183.1…

  Sep 22, 2011