Skip to content
OpenAdvisories

Archive

October 2011

Vulnerabilities first published in this month (UTC), newest first.

484 results · Feed

  • Unscored —
    CVE-2010-4942 Public exploit

    SQL injection vulnerability in location.php in the eCal module in E-Xoopport Samsara 3.1 and earlier allows remote atta…

  • Unscored —
    CVE-2010-4929 Public exploit

    SQL injection vulnerability in the Joostina (com_ezautos) component for Joomla! allows remote attackers to execute arbi…

  • Unscored —
    CVE-2010-4939 Public exploit

    PHP remote file inclusion vulnerability in index.php in MailForm 1.2 allows remote attackers to execute arbitrary PHP c…

  • Unscored —
    CVE-2010-4944 Public exploit

    SQL injection vulnerability in the Elite Experts (com_elite_experts) component for Mambo and Joomla! allows remote atta…

  • Unscored —
    CVE-2010-4940 Public exploit

    SQL injection vulnerability in index.php in WAnewsletter 2.1.2 allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2010-4930 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in @mail Webmail before 6.2.0 allows remote attackers to inject a…

  • Unscored —

    SQL injection vulnerability in book/detail.php in Virtue Netz Virtue Book Store allows remote attackers to execute arbi…

  • High —

    Webkit PDFs for TYPO3 allows remote attackers to execute arbitrary commands

    Unspecified vulnerability in the Webkit PDFs (webkitpdf) extension before 1.1.4 for TYPO3 allows remote attackers to execute arbitrary commands via unknown vectors.

  • Unscored —
    CVE-2010-4963 Public exploit

    SQL injection vulnerability in folder/list in Hulihan BXR 0.6.8 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2010-4926 Public exploit

    SQL injection vulnerability in the TimeTrack (com_timetrack) component 1.2.4 for Joomla! allows remote attackers to exe…

  • Unscored —

    Unspecified vulnerability in the JW Calendar (jw_calendar) extension 1.3.20 and earlier for TYPO3 allows remote attacke…

  • Unscored —
    CVE-2010-4909 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in PaysiteReviewCMS 1.1 allow remote attackers to inject arbitrary …

  • Unscored —
    CVE-2010-4913 Public exploit

    Cross-site scripting (XSS) vulnerability in the search feature in ColdGen ColdUserGroup 1.06 allows remote attackers to…

  • Unscored —
    CVE-2010-4918 Public exploit

    PHP remote file inclusion vulnerability in iJoomla Magazine (com_magazine) component 3.0.1 for Joomla! allows remote at…

  • Unscored —
    CVE-2010-4919 Public exploit

    SQL injection vulnerability in detail.asp in Micronetsoft RV Dealer Website 1.0 allows remote attackers to execute arbi…

  • Unscored —
    CVE-2010-4912 Public exploit

    SQL injection vulnerability in shop.php in UCenter Home 2.0 allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2010-4917 Public exploit

    SQL injection vulnerability in sources/search.php in A-Blog 2.0 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2010-4895 Public exploit

    Cross-site scripting (XSS) vulnerability in core/showsite.php in chillyCMS 1.1.3 allows remote attackers to inject arbi…

  • Unscored —
    CVE-2010-4901 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in char_map.php in MySource Matrix 3.28.3 allow remote attackers to…

  • Unscored —
    CVE-2010-4898 Public exploit

    SQL injection vulnerability in the Gantry (com_gantry) component 3.0.10 for Joomla! allows remote attackers to execute …

  • Unscored —
    CVE-2010-4914 Public exploit

    PHP remote file inclusion vulnerability in tools/phpmailer/class.phpmailer.php in PHP Classifieds 7.3 allows remote att…

  • Unscored —
    CVE-2010-4905 Public exploit

    SQL injection vulnerability in article_details.php in Softbiz Article Directory Script allows remote attackers to execu…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in admin/index.asp in Member Management System 4.0 allows remote attackers to …

  • Unscored —
    CVE-2010-4920 Public exploit

    SQL injection vulnerability in detail.asp in Micronetsoft Rental Property Management Website 1.0 allows remote attacker…

  • Unscored —
    CVE-2010-4904 Public exploit

    SQL injection vulnerability in the Aardvertiser (com_aardvertiser) component 2.1 and 2.1.1 for Joomla! allows remote at…

  • Unscored —
    CVE-2010-4916 Public exploit

    Multiple SQL injection vulnerabilities in index.cfm in ColdGen ColdUserGroup 1.06 allow remote attackers to execute arb…

  • Unscored —
    CVE-2010-4907 Public exploit

    Cross-site scripting (XSS) vulnerability in zp-core/admin.php in Zenphoto 1.3 allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2010-4921 Public exploit

    SQL injection vulnerability in inc_pollingboothmanager.asp in DMXReady Polling Booth Manager allows remote attackers to…

  • Unscored —

    SQL injection vulnerability in detail.php in Virtue Shopping Mall allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2010-4894 Public exploit

    SQL injection vulnerability in core/showsite.php in chillyCMS 1.1.3 allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2010-4899 Public exploit

    SQL injection vulnerability in c.php in CMS WebManager-Pro before 8.1 allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2010-4910 Public exploit

    SQL injection vulnerability in index.cfm in ColdGen ColdCalendar 2.06 allows remote attackers to execute arbitrary SQL …

  • Unscored —

    Open redirect vulnerability in c.php in CMS WebManager-Pro 8.1 and earlier allows remote attackers to redirect users to…

  • Unscored —
    CVE-2010-4906 Public exploit

    SQL injection vulnerability in zp-core/full-image.php in Zenphoto 1.3 and 1.3.1.2 allows remote attackers to execute ar…

  • Unscored —
    CVE-2010-4893 Public exploit

    Cross-site scripting (XSS) vulnerability in foodvendors.php in FestOS 2.3b allows remote attackers to inject arbitrary …

  • Unscored —

    SQL injection vulnerability in comment.php in BlueCMS 1.6 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2010-4902 Public exploit

    Multiple SQL injection vulnerabilities in the Clantools (com_clantools) component 1.2.3 for Joomla! allow remote attack…

  • Unscored —
    CVE-2010-4915 Public exploit

    SQL injection vulnerability in index.cfm in ColdGen ColdBookmarks 1.22 allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2010-4911 Public exploit

    SQL injection vulnerability in classi/detail.php in PHP Classifieds Ads allows remote attackers to execute arbitrary SQ…

  • Unscored —

    SQL injection vulnerability in index.php in CubeCart 4.3.3 allows remote attackers to execute arbitrary SQL commands vi…