Skip to content
OpenAdvisories

Archive

23 November 2011

Vulnerabilities first published on this day (UTC), newest first.

19 results · Feed

  • Unscored —

    The password reset functionality in Joomla! 1.5.x through 1.5.24 uses weak random numbers, which makes it easier for re…

  • Low —

    Joomla! vulnerable to Cross-site Scripting

    Multiple cross-site scripting (XSS) vulnerabilities in Joomla! 1.6.3 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • Unscored —
    CVE-2010-5048 Public exploit

    Cross-site scripting (XSS) vulnerability in admin.jcomments.php in the JoomlaTune JComments (com_jcomments) component 2…

  • Unscored —
    CVE-2010-5058 Public exploit

    SQL injection vulnerability in detResolucion.php in CMS Ariadna 1.1 allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2010-5051 Public exploit

    Cross-site scripting (XSS) vulnerability in admin/core/admin_func.php in razorCMS 1.0 stable allows remote attackers to…

  • Unscored —
    CVE-2010-5053 Public exploit

    SQL injection vulnerability in the XOBBIX (com_xobbix) component 1.0.1 for Joomla! allows remote attackers to execute a…

  • Unscored —
    CVE-2010-5059 Public exploit

    SQL injection vulnerability in index.php in CMScout 2.0.8 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2010-5057 Public exploit

    SQL injection vulnerability in detResolucion.php in CMS Ariadna 1.1 allows remote attackers to execute arbitrary SQL co…

  • Unscored —

    SQL injection vulnerability in events.php in Zabbix 1.8.1 and earlier allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2010-5060 Public exploit

    SQL injection vulnerability in Nus.php in NUs Newssystem 1.02 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2010-5052 Public exploit

    Cross-site scripting (XSS) vulnerability in admin/components.php in GetSimple CMS 2.01 allows remote attackers to injec…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Special:Login in JAMWiki before 0.8.4 allows remote attackers to inject arb…

  • Unscored —
    CVE-2010-5056 Public exploit

    SQL injection vulnerability in the GBU Facebook (com_gbufacebook) component 1.0.5 for Joomla! allows remote attackers t…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in jsp/admin/tools/remote_share.jsp in ManageEngine ADManager Plus 4.4.0 allow…

  • Unscored —
    CVE-2010-5046 Public exploit

    Cross-site scripting (XSS) vulnerability in admin.php in ecoCMS allows remote attackers to inject arbitrary web script …

  • Unscored —
    CVE-2010-5055 Public exploit

    SQL injection vulnerability in index.php in Almnzm 2.1 allows remote attackers to execute arbitrary SQL commands via th…

  • Unscored —

    SQL injection vulnerability in index.php in RSStatic allows remote attackers to execute arbitrary SQL commands via the …

  • Unscored —
    CVE-2010-5062 Public exploit

    SQL injection vulnerability in search.php in MH Products kleinanzeigenmarkt allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2010-5047 Public exploit

    SQL injection vulnerability in page.php in V-EVA Press Release Script allows remote attackers to execute arbitrary SQL …