Skip to content
OpenAdvisories

Archive

7 October 2011

Vulnerabilities first published on this day (UTC), newest first.

12 results · Clear filters · Feed

  • Unscored —
    CVE-2010-4878 Public exploit

    PHP remote file inclusion vulnerability in formmailer.php in Kontakt Formular 1.1 allows remote attackers to execute ar…

  • Unscored —
    CVE-2010-4877 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in OneCMS 2.6.1 allows remote attackers to inject arbitrary web s…

  • High —
    CVE-2010-4879 Public exploit

    DOMPDF Remote File Inclusion Vulnerability

    PHP remote file inclusion vulnerability in dompdf.php in dompdf 0.6.0 beta1 allows remote attackers to execute arbitrary PHP code via a URL in the input_file parameter.

  • Unscored —
    CVE-2010-4870 Public exploit

    SQL injection vulnerability in index.php in BloofoxCMS 0.3.5 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2010-4874 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in users.php in NinkoBB 1.3 RC5 allow remote attackers to inject ar…

  • Unscored —
    CVE-2010-4884 Public exploit

    PHP remote file inclusion vulnerability in guestbook/gbook.php in Gaestebuch 1.2 allows remote attackers to execute arb…

  • Unscored —
    CVE-2010-4883 Public exploit

    Cross-site scripting (XSS) vulnerability in manager/index.php in MODx Revolution 2.0.2-pl allows remote attackers to in…

  • Unscored —
    CVE-2010-4876 Public exploit

    SQL injection vulnerability in viewpost.php in mBlogger 1.0.04 allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2010-4872 Public exploit

    SQL injection vulnerability in newsroom.asp in ASPilot Pilot Cart 7.3 allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2010-4875 Public exploit

    Cross-site scripting (XSS) vulnerability in vodpod-video-gallery/vodpod_gallery_thumbs.php in the Vodpod Video Gallery …

  • Unscored —
    CVE-2010-4873 Public exploit

    Cross-site scripting (XSS) vulnerability in confirm.php in WeBid 0.8.5 P1 allows remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2010-4882 Public exploit

    Cross-site scripting (XSS) vulnerability in autocms.php in Auto CMS 1.6 allows remote attackers to inject arbitrary web…