Skip to content
OpenAdvisories

Archive

5 October 2011

Vulnerabilities first published on this day (UTC), newest first.

18 results · Clear filters · Feed

  • Unscored —
    CVE-2011-3368 Public exploit EPSS 91%

    The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 doe…

  • Unscored —
    CVE-2010-4866 Public exploit

    SQL injection vulnerability in index.php in Chipmunk Board 1.3 allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2010-4855 Public exploit

    SQL injection vulnerability in oku.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the…

  • Unscored —
    CVE-2010-4862 Public exploit

    SQL injection vulnerability in the JExtensions JE Directory (com_jedirectory) component 1.0 for Joomla! allows remote a…

  • Unscored —
    CVE-2010-4856 Public exploit

    SQL injection vulnerability in arsiv.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2010-4860 Public exploit

    SQL injection vulnerability in product_desc.php in MyPhpAuction 2010 allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2010-4864 Public exploit

    SQL injection vulnerability in the Club Manager (com_clubmanager) component for Joomla! allows remote attackers to exec…

  • Unscored —
    CVE-2010-4865 Public exploit

    SQL injection vulnerability in the JE Guestbook (com_jeguestbook) component 1.0 for Joomla! allows remote attackers to …

  • Unscored —
    CVE-2010-4868 Public exploit

    Cross-site scripting (XSS) vulnerability in search.php3 (aka search.php) in W-Agora 4.2.1 and earlier allows remote att…

  • Unscored —
    CVE-2010-4869 Public exploit

    SQL injection vulnerability in index.php in DBHcms 1.1.4 allows remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2010-4858 Public exploit

    Directory traversal vulnerability in team.rc5-72.php in DNET Live-Stats 0.8 allows remote attackers to read arbitrary f…

  • Unscored —
    CVE-2010-4867 Public exploit

    Directory traversal vulnerability in search.php3 (aka search.php) in W-Agora 4.2.1 and earlier allows remote attackers …

  • Unscored —
    CVE-2010-4863 Public exploit

    Cross-site scripting (XSS) vulnerability in admin/changedata.php in GetSimple CMS 2.01 allows remote attackers to injec…

  • Unscored —
    CVE-2010-4857 Public exploit

    SQL injection vulnerability in click.php in CAG CMS 0.2 Beta allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2010-4861 Public exploit

    SQL injection vulnerability in asearch.php in webSPELL 4.2.1 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2010-4853 Public exploit

    SQL injection vulnerability in the ccInvoices (com_ccinvoices) component for Joomla! allows remote attackers to execute…

  • Unscored —
    CVE-2011-1159 Public exploit

    acpid.c in acpid before 2.0.9 does not properly handle a situation in which a process has connected to acpid.socket but…

  • Unscored —
    CVE-2008-7301 Public exploit

    SQL injection vulnerability in admin/login.php in jSite 1.0 OE allows remote attackers to execute arbitrary SQL command…