Skip to content
OpenAdvisories

Archive

9 October 2011

Vulnerabilities first published on this day (UTC), newest first.

42 results · Feed

  • Unscored —

    SQL injection vulnerability in the Event (event) extension before 0.3.7 for TYPO3 allows remote attackers to execute ar…

  • Unscored —
    CVE-2010-4928 Public exploit

    Cross-site scripting (XSS) vulnerability in the Restaurant Guide (com_restaurantguide) component 1.0.0 for Joomla! allo…

  • Unscored —

    SQL injection vulnerability in the Questionnaire (ke_questionnaire) extension before 2.2.3 for TYPO3 allows remote atta…

  • Unscored —
    CVE-2010-4947 Public exploit

    Cross-site scripting (XSS) vulnerability in advanced_search_result.php in ALLPC 2.5 allows remote attackers to inject a…

  • Unscored —
    CVE-2010-4954 Public exploit

    SQL injection vulnerability in product_reviews_info.php in xt:Commerce Gambio 2008 allows remote attackers to execute a…

  • Unscored —
    CVE-2010-4943 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Saurus CMS 4.7.0 allow remote attackers to execute arbitrary PHP …

  • Unscored —

    SQL injection vulnerability in the FE user statistic (festat) extension before 0.2.4 for TYPO3 allows remote attackers …

  • Unscored —
    CVE-2010-4922 Public exploit

    Multiple SQL injection vulnerabilities in Allinta CMS 22.07.2010 allow remote attackers to execute arbitrary SQL comman…

  • Unscored —

    SQL injection vulnerability in index.php in Prado Portal 1.2.0 allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2010-4933 Public exploit

    SQL injection vulnerability in filemgmt/singlefile.php in Geeklog 1.3.8 allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2010-4949 Public exploit

    Cross-site scripting (XSS) vulnerability in the (1) FreiChat component before 2.1.2 for Joomla! and the (2) FreiChatPur…

  • Unscored —
    CVE-2010-4945 Public exploit

    SQL injection vulnerability in the CamelcityDB (com_camelcitydb2) component 2.2 for Joomla! allows remote attackers to …

  • Unscored —
    CVE-2010-4938 Public exploit

    SQL injection vulnerability in the Weblinks (com_weblinks) component in Joomla! allows remote attackers to execute arbi…

  • Unscored —
    CVE-2010-4935 Public exploit

    SQL injection vulnerability in poll.php in Entrans 0.3.2 and earlier allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2010-4934 Public exploit

    SQL injection vulnerability in video.php in Get Tube 4.51 and earlier allows remote attackers to execute arbitrary SQL …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the Questionnaire (ke_questionnaire) extension before 2.2.3 for TYPO3 allow…

  • Unscored —
    CVE-2010-4937 Public exploit

    Multiple SQL injection vulnerabilities in the Amblog (com_amblog) component 1.0 for Joomla! allow remote attackers to e…

  • Unscored —
    CVE-2010-4955 Public exploit

    SQL injection vulnerability in board/board.php in APBoard Developers APBoard 2.1.0 and earlier allows remote attackers …

  • Unscored —
    CVE-2010-4959 Public exploit

    SQL injection vulnerability in the login feature in Pre Projects Pre Podcast Portal allows remote attackers to execute …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the xaJax Shoutbox (vx_xajax_shoutbox) extension before 1.0.1 for TYPO3 all…

  • Unscored —
    CVE-2010-4941 Public exploit

    SQL injection vulnerability in the Teams (com_teams) component 1_1028_100809_1711 for Joomla! allows remote attackers t…

  • Unscored —
    CVE-2010-4927 Public exploit

    SQL injection vulnerability in the Restaurant Guide (com_restaurantguide) component 1.0.0 for Joomla! allows remote att…

  • Unscored —
    CVE-2010-4948 Public exploit

    PHP remote file inclusion vulnerability in libs/adodb/adodb.inc.php in PHP Free Photo Gallery script allows remote atta…

  • Unscored —
    CVE-2010-4925 Public exploit

    SQL injection vulnerability in clic.php in the Partenaires module 1.5 for Nuked-Klan allows remote attackers to execute…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in search.php in Entrans before 0.3.3 allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2010-4931 Public exploit EPSS 16%

    Directory traversal vulnerability in maincore.php in PHP-Fusion allows remote attackers to include and execute arbitrar…

  • Unscored —
    CVE-2010-4924 Public exploit

    PHP remote file inclusion vulnerability in logic/controller.class.php in clearBudget 0.9.8 allows remote attackers to e…

  • High —

    Webkit PDFs for TYPO3 has SQL Injection vulnerability

    SQL injection vulnerability in the Webkit PDFs (webkitpdf) extension before 1.1.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the Branchenbuch (aka Yellow Pages or mh_branchenbuch) extension before 0.9…

  • Unscored —

    SQL injection vulnerability in the Slide Show (com_slideshow) component for Joomla! allows remote attackers to execute …

  • Unscored —
    CVE-2010-4946 Public exploit

    SQL injection vulnerability in product_info.php in ALLPC 2.5 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2010-4942 Public exploit

    SQL injection vulnerability in location.php in the eCal module in E-Xoopport Samsara 3.1 and earlier allows remote atta…

  • Unscored —
    CVE-2010-4929 Public exploit

    SQL injection vulnerability in the Joostina (com_ezautos) component for Joomla! allows remote attackers to execute arbi…

  • Unscored —
    CVE-2010-4939 Public exploit

    PHP remote file inclusion vulnerability in index.php in MailForm 1.2 allows remote attackers to execute arbitrary PHP c…

  • Unscored —
    CVE-2010-4944 Public exploit

    SQL injection vulnerability in the Elite Experts (com_elite_experts) component for Mambo and Joomla! allows remote atta…

  • Unscored —
    CVE-2010-4940 Public exploit

    SQL injection vulnerability in index.php in WAnewsletter 2.1.2 allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2010-4930 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in @mail Webmail before 6.2.0 allows remote attackers to inject a…

  • Unscored —

    SQL injection vulnerability in book/detail.php in Virtue Netz Virtue Book Store allows remote attackers to execute arbi…

  • High —

    Webkit PDFs for TYPO3 allows remote attackers to execute arbitrary commands

    Unspecified vulnerability in the Webkit PDFs (webkitpdf) extension before 1.1.4 for TYPO3 allows remote attackers to execute arbitrary commands via unknown vectors.

  • Unscored —
    CVE-2010-4963 Public exploit

    SQL injection vulnerability in folder/list in Hulihan BXR 0.6.8 allows remote attackers to execute arbitrary SQL comman…