Archive
October 2011
Vulnerabilities first published in this month (UTC), newest first.
109 results · Clear filters · Feed
-
Unscored —CVE-2010-4946 Public exploit
SQL injection vulnerability in product_info.php in ALLPC 2.5 allows remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2010-4942 Public exploit
SQL injection vulnerability in location.php in the eCal module in E-Xoopport Samsara 3.1 and earlier allows remote atta…
-
Unscored —CVE-2010-4929 Public exploit
SQL injection vulnerability in the Joostina (com_ezautos) component for Joomla! allows remote attackers to execute arbi…
-
Unscored —CVE-2010-4939 Public exploit
PHP remote file inclusion vulnerability in index.php in MailForm 1.2 allows remote attackers to execute arbitrary PHP c…
-
Unscored —CVE-2010-4944 Public exploit
SQL injection vulnerability in the Elite Experts (com_elite_experts) component for Mambo and Joomla! allows remote atta…
-
Unscored —CVE-2010-4940 Public exploit
SQL injection vulnerability in index.php in WAnewsletter 2.1.2 allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2010-4930 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in @mail Webmail before 6.2.0 allows remote attackers to inject a…
-
Unscored —CVE-2010-4963 Public exploit
SQL injection vulnerability in folder/list in Hulihan BXR 0.6.8 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2010-4926 Public exploit
SQL injection vulnerability in the TimeTrack (com_timetrack) component 1.2.4 for Joomla! allows remote attackers to exe…
-
Unscored —CVE-2010-4909 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in PaysiteReviewCMS 1.1 allow remote attackers to inject arbitrary …
-
Unscored —CVE-2010-4913 Public exploit
Cross-site scripting (XSS) vulnerability in the search feature in ColdGen ColdUserGroup 1.06 allows remote attackers to…
-
Unscored —CVE-2010-4918 Public exploit
PHP remote file inclusion vulnerability in iJoomla Magazine (com_magazine) component 3.0.1 for Joomla! allows remote at…
-
Unscored —CVE-2010-4919 Public exploit
SQL injection vulnerability in detail.asp in Micronetsoft RV Dealer Website 1.0 allows remote attackers to execute arbi…
-
Unscored —CVE-2010-4912 Public exploit
SQL injection vulnerability in shop.php in UCenter Home 2.0 allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2010-4917 Public exploit
SQL injection vulnerability in sources/search.php in A-Blog 2.0 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2010-4895 Public exploit
Cross-site scripting (XSS) vulnerability in core/showsite.php in chillyCMS 1.1.3 allows remote attackers to inject arbi…
-
Unscored —CVE-2010-4901 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in char_map.php in MySource Matrix 3.28.3 allow remote attackers to…
-
Unscored —CVE-2010-4898 Public exploit
SQL injection vulnerability in the Gantry (com_gantry) component 3.0.10 for Joomla! allows remote attackers to execute …
-
Unscored —CVE-2010-4914 Public exploit
PHP remote file inclusion vulnerability in tools/phpmailer/class.phpmailer.php in PHP Classifieds 7.3 allows remote att…
-
Unscored —CVE-2010-4905 Public exploit
SQL injection vulnerability in article_details.php in Softbiz Article Directory Script allows remote attackers to execu…
-
Unscored —CVE-2010-4920 Public exploit
SQL injection vulnerability in detail.asp in Micronetsoft Rental Property Management Website 1.0 allows remote attacker…
-
Unscored —CVE-2010-4904 Public exploit
SQL injection vulnerability in the Aardvertiser (com_aardvertiser) component 2.1 and 2.1.1 for Joomla! allows remote at…
-
Unscored —CVE-2010-4916 Public exploit
Multiple SQL injection vulnerabilities in index.cfm in ColdGen ColdUserGroup 1.06 allow remote attackers to execute arb…
-
Unscored —CVE-2010-4907 Public exploit
Cross-site scripting (XSS) vulnerability in zp-core/admin.php in Zenphoto 1.3 allows remote attackers to inject arbitra…
-
Unscored —CVE-2010-4921 Public exploit
SQL injection vulnerability in inc_pollingboothmanager.asp in DMXReady Polling Booth Manager allows remote attackers to…
-
Unscored —CVE-2010-4894 Public exploit
SQL injection vulnerability in core/showsite.php in chillyCMS 1.1.3 allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2010-4899 Public exploit
SQL injection vulnerability in c.php in CMS WebManager-Pro before 8.1 allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2010-4910 Public exploit
SQL injection vulnerability in index.cfm in ColdGen ColdCalendar 2.06 allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2010-4906 Public exploit
SQL injection vulnerability in zp-core/full-image.php in Zenphoto 1.3 and 1.3.1.2 allows remote attackers to execute ar…
-
Unscored —CVE-2010-4893 Public exploit
Cross-site scripting (XSS) vulnerability in foodvendors.php in FestOS 2.3b allows remote attackers to inject arbitrary …
-
Unscored —CVE-2010-4902 Public exploit
Multiple SQL injection vulnerabilities in the Clantools (com_clantools) component 1.2.3 for Joomla! allow remote attack…
-
Unscored —CVE-2010-4915 Public exploit
SQL injection vulnerability in index.cfm in ColdGen ColdBookmarks 1.22 allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2010-4911 Public exploit
SQL injection vulnerability in classi/detail.php in PHP Classifieds Ads allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2010-4878 Public exploit
PHP remote file inclusion vulnerability in formmailer.php in Kontakt Formular 1.1 allows remote attackers to execute ar…
-
Unscored —CVE-2010-4877 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in OneCMS 2.6.1 allows remote attackers to inject arbitrary web s…
-
High —CVE-2010-4879 Public exploit
DOMPDF Remote File Inclusion Vulnerability
PHP remote file inclusion vulnerability in dompdf.php in dompdf 0.6.0 beta1 allows remote attackers to execute arbitrary PHP code via a URL in the input_file parameter.
-
Unscored —CVE-2010-4870 Public exploit
SQL injection vulnerability in index.php in BloofoxCMS 0.3.5 allows remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2010-4874 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in users.php in NinkoBB 1.3 RC5 allow remote attackers to inject ar…
-
Unscored —CVE-2010-4884 Public exploit
PHP remote file inclusion vulnerability in guestbook/gbook.php in Gaestebuch 1.2 allows remote attackers to execute arb…
-
Unscored —CVE-2010-4883 Public exploit
Cross-site scripting (XSS) vulnerability in manager/index.php in MODx Revolution 2.0.2-pl allows remote attackers to in…