Skip to content
OpenAdvisories

Archive

8 October 2011

Vulnerabilities first published on this day (UTC), newest first.

39 results · Feed

  • Unscored —
    CVE-2010-4909 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in PaysiteReviewCMS 1.1 allow remote attackers to inject arbitrary …

  • Unscored —
    CVE-2010-4913 Public exploit

    Cross-site scripting (XSS) vulnerability in the search feature in ColdGen ColdUserGroup 1.06 allows remote attackers to…

  • Unscored —
    CVE-2010-4918 Public exploit

    PHP remote file inclusion vulnerability in iJoomla Magazine (com_magazine) component 3.0.1 for Joomla! allows remote at…

  • Unscored —
    CVE-2010-4919 Public exploit

    SQL injection vulnerability in detail.asp in Micronetsoft RV Dealer Website 1.0 allows remote attackers to execute arbi…

  • Unscored —
    CVE-2010-4912 Public exploit

    SQL injection vulnerability in shop.php in UCenter Home 2.0 allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2010-4917 Public exploit

    SQL injection vulnerability in sources/search.php in A-Blog 2.0 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2010-4895 Public exploit

    Cross-site scripting (XSS) vulnerability in core/showsite.php in chillyCMS 1.1.3 allows remote attackers to inject arbi…

  • Unscored —
    CVE-2010-4901 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in char_map.php in MySource Matrix 3.28.3 allow remote attackers to…

  • Unscored —
    CVE-2010-4898 Public exploit

    SQL injection vulnerability in the Gantry (com_gantry) component 3.0.10 for Joomla! allows remote attackers to execute …

  • Unscored —
    CVE-2010-4914 Public exploit

    PHP remote file inclusion vulnerability in tools/phpmailer/class.phpmailer.php in PHP Classifieds 7.3 allows remote att…

  • Unscored —
    CVE-2010-4905 Public exploit

    SQL injection vulnerability in article_details.php in Softbiz Article Directory Script allows remote attackers to execu…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in admin/index.asp in Member Management System 4.0 allows remote attackers to …

  • Unscored —
    CVE-2010-4920 Public exploit

    SQL injection vulnerability in detail.asp in Micronetsoft Rental Property Management Website 1.0 allows remote attacker…

  • Unscored —
    CVE-2010-4904 Public exploit

    SQL injection vulnerability in the Aardvertiser (com_aardvertiser) component 2.1 and 2.1.1 for Joomla! allows remote at…

  • Unscored —
    CVE-2010-4916 Public exploit

    Multiple SQL injection vulnerabilities in index.cfm in ColdGen ColdUserGroup 1.06 allow remote attackers to execute arb…

  • Unscored —
    CVE-2010-4907 Public exploit

    Cross-site scripting (XSS) vulnerability in zp-core/admin.php in Zenphoto 1.3 allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2010-4921 Public exploit

    SQL injection vulnerability in inc_pollingboothmanager.asp in DMXReady Polling Booth Manager allows remote attackers to…

  • Unscored —

    SQL injection vulnerability in detail.php in Virtue Shopping Mall allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2010-4894 Public exploit

    SQL injection vulnerability in core/showsite.php in chillyCMS 1.1.3 allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2010-4899 Public exploit

    SQL injection vulnerability in c.php in CMS WebManager-Pro before 8.1 allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2010-4910 Public exploit

    SQL injection vulnerability in index.cfm in ColdGen ColdCalendar 2.06 allows remote attackers to execute arbitrary SQL …

  • Unscored —

    Open redirect vulnerability in c.php in CMS WebManager-Pro 8.1 and earlier allows remote attackers to redirect users to…

  • Unscored —
    CVE-2010-4906 Public exploit

    SQL injection vulnerability in zp-core/full-image.php in Zenphoto 1.3 and 1.3.1.2 allows remote attackers to execute ar…

  • Unscored —
    CVE-2010-4893 Public exploit

    Cross-site scripting (XSS) vulnerability in foodvendors.php in FestOS 2.3b allows remote attackers to inject arbitrary …

  • Unscored —

    SQL injection vulnerability in comment.php in BlueCMS 1.6 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2010-4902 Public exploit

    Multiple SQL injection vulnerabilities in the Clantools (com_clantools) component 1.2.3 for Joomla! allow remote attack…

  • Unscored —
    CVE-2010-4915 Public exploit

    SQL injection vulnerability in index.cfm in ColdGen ColdBookmarks 1.22 allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2010-4911 Public exploit

    SQL injection vulnerability in classi/detail.php in PHP Classifieds Ads allows remote attackers to execute arbitrary SQ…

  • Unscored —

    SQL injection vulnerability in index.php in CubeCart 4.3.3 allows remote attackers to execute arbitrary SQL commands vi…

  • Unscored —

    Stack-based buffer overflow in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows re…

  • Unscored —

    Heap-based buffer overflow in the NgwiCalVTimeZoneBody::ParseSelf function in gwwww1.dll in GroupWise Internet Agent (G…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Novell Identity Manager (aka IDM) User Application 3.5.0, 3.5.1, 3.6.0, 3.6…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in phpPgAdmin before 5.0.3 allow remote attackers to inject arbitra…

  • Unscored —

    Array index error in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to exec…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Novell Identity Manager (aka IDM) User Application 3.5.0, 3.5.1, 3.6.0, 3.6…

  • Unscored —

    Integer signedness error in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers …

  • Unscored —

    Unspecified vulnerability in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in WebAccess in Novell GroupWise 8.0 before HP3 allow remote attack…

  • Unscored —

    Unspecified vulnerability in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers…