Skip to content
OpenAdvisories

Archive

November 2011

Vulnerabilities first published in this month (UTC), newest first.

118 results · Clear filters · Feed

  • Unscored —
    CVE-2010-5012 Public exploit

    SQL injection vulnerability in new.php in DaLogin 2.2 and 2.2.5 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2010-5033 Public exploit

    SQL injection vulnerability in ProductList.cfm in Fusebox 5.5.1 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2011-4074 Public exploit

    Cross-site scripting (XSS) vulnerability in cmd.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to injec…

  • Unscored —
    CVE-2011-4075 Public exploit EPSS 52%

    The masort function in lib/functions.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2011-3167 Public exploit EPSS 65%

    Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute…

  • Unscored —
    CVE-2010-4983 Public exploit

    SQL injection vulnerability in profile.php in iScripts CyberMatch 1.0 allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2010-4982 Public exploit

    SQL injection vulnerability in address_book/contacts.php in My Kazaam Address & Contact Organizer allows remote attacke…

  • Unscored —
    CVE-2010-4968 Public exploit

    SQL injection vulnerability in the webmaster-tips.net Flash Gallery (com_wmtpic) component 1.0 for Joomla! allows remot…

  • Unscored —
    CVE-2010-4990 Public exploit

    SQL injection vulnerability in the Front-edit Address Book (com_addressbook) component for Joomla! allows remote attack…

  • Unscored —
    CVE-2010-4987 Public exploit

    SQL injection vulnerability in default.asp in KMSoft Guestbook (aka GBook) allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2010-4981 Public exploit

    SQL injection vulnerability in trackads.php in YourFreeWorld Banner Management allows remote attackers to execute arbit…

  • Unscored —
    CVE-2010-4972 Public exploit

    SQL injection vulnerability in index.php in YPNinc JokeScript allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2010-4993 Public exploit

    SQL injection vulnerability in the eventcal (com_eventcal) component 1.6.4 for Joomla! allows remote attackers to execu…

  • Unscored —
    CVE-2010-4969 Public exploit

    SQL injection vulnerability in articlesdetails.php in BrotherScripts (BS) Business Directory allows remote attackers to…

  • Unscored —
    CVE-2010-4974 Public exploit

    SQL injection vulnerability in info.php in BrotherScripts (BS) and ScriptsFeed Auto Dealer allows remote attackers to e…

  • Unscored —
    CVE-2010-4975 Public exploit

    SQL injection vulnerability in the Techjoomla SocialAds For JomSocial (com_socialads) component for Joomla! allows remo…

  • Unscored —
    CVE-2010-4977 Public exploit Scanner template EPSS 15%

    SQL injection vulnerability in menu.php in the Canteen (com_canteen) component 1.0 for Joomla! allows remote attackers …

  • Unscored —
    CVE-2010-4988 Public exploit

    PHP remote file inclusion vulnerability in mod_chatting/themes/default/header.php in Family Connections Who is Chatting…

  • Unscored —
    CVE-2010-4985 Public exploit

    Cross-site scripting (XSS) vulnerability in notes.php in My Kazaam Notes Management System allows remote attackers to i…

  • Unscored —
    CVE-2010-4980 Public exploit

    SQL injection vulnerability in packagedetails.php in iScripts ReserveLogic 1.0 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2010-4992 Public exploit

    SQL injection vulnerability in the Payments Plus component 2.1.5 for Joomla! allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2010-4995 Public exploit

    SQL injection vulnerability in the NeoRecruit (com_neorecruit) component 1.6.4 for Joomla! allows remote attackers to e…

  • Unscored —
    CVE-2010-4986 Public exploit

    SQL injection vulnerability in detail.php in Simple Document Management System (SDMS) allows remote attackers to execut…

  • Unscored —
    CVE-2010-4984 Public exploit

    SQL injection vulnerability in notes.php in My Kazaam Notes Management System allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2010-4979 Public exploit

    SQL injection vulnerability in image/view.php in CANDID allows remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2010-4989 Public exploit

    SQL injection vulnerability in main.asp in Ziggurat Farsi CMS allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2010-4976 Public exploit

    Cross-site scripting (XSS) vulnerability in search/search.php in MetInfo 3.0 allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2010-4978 Public exploit

    Cross-site scripting (XSS) vulnerability in image/view.php in CANDID allows remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2010-4970 Public exploit

    SQL injection vulnerability in handlers/getpage.php in Wiki Web Help 0.28 allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2010-4996 Public exploit

    SQL injection vulnerability in ogp_show.php in esoftpro Online Guestbook Pro 5.1 allows remote attackers to execute arb…

  • Unscored —
    CVE-2010-4991 Public exploit

    SQL injection vulnerability in the NinjaMonials (com_ninjamonials) component for Joomla! allows remote attackers to exe…

  • Unscored —
    CVE-2010-4999 Public exploit

    SQL injection vulnerability in index.php in esoftpro Online Photo Pro 2.0 allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2010-5001 Public exploit

    SQL injection vulnerability in view.php in esoftpro Online Contact Manager 3.0 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2010-5002 Public exploit

    Cross-site scripting (XSS) vulnerability in modules/slideshowmodule/slideshow.js.php in Exponent CMS 0.97.0 allows remo…

  • Unscored —
    CVE-2010-5003 Public exploit

    SQL injection vulnerability in the AutarTimonial (com_autartimonial) component 1.0.8 for Joomla! allows remote attacker…

  • Unscored —
    CVE-2011-4220 Public exploit

    Investintech.com SlimPDF Reader does not properly restrict the arguments to unspecified function calls, which allows re…

  • Unscored —
    CVE-2011-4221 Public exploit

    Unspecified vulnerability in Investintech.com Able2Doc and Able2Doc Professional allows remote attackers to cause a den…

  • Unscored —
    CVE-2011-4222 Public exploit

    Unspecified vulnerability in Investintech.com Able2Extract and Able2Extract Server allows remote attackers to cause a d…