Skip to content
OpenAdvisories

Archive

November 2011

Vulnerabilities first published in this month (UTC), newest first.

309 results · Feed

  • Unscored —
    CVE-2010-5042 Public exploit

    Cross-site scripting (XSS) vulnerability in the DJ-ArtGallery (com_djartgallery) component 0.9.1 for Joomla! allows rem…

  • Unscored —
    CVE-2010-5010 Public exploit

    Cross-site scripting (XSS) vulnerability in schoolmv2/html/studentmain.php in SchoolMation 2.3 allows remote attackers …

  • Unscored —
    CVE-2010-5014 Public exploit

    SQL injection vulnerability in standings.php in Elite Gaming Ladders 3.5 allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2010-5019 Public exploit

    SQL injection vulnerability in view_photo.php in 2daybiz Online Classified Script allows remote attackers to execute ar…

  • Unscored —
    CVE-2010-5021 Public exploit

    SQL injection vulnerability in view_group.asp in Digital Interchange Document Library 5.8.5 allows remote attackers to …

  • Unscored —
    CVE-2010-5034 Public exploit

    SQL injection vulnerability in viewhistorydetail.php in iScripts EasyBiller 1.1 allows remote attackers to execute arbi…

  • Unscored —
    CVE-2010-5028 Public exploit Scanner template

    SQL injection vulnerability in the JExtensions JE Job (com_jejob) component 1.0 for Joomla! allows remote attackers to …

  • Unscored —
    CVE-2010-5007 Public exploit

    Cross-site scripting (XSS) vulnerability in pages/match_report.php in UTStats Beta 4 and earlier allows remote attacker…

  • Unscored —
    CVE-2010-5020 Public exploit

    SQL injection vulnerability in index.php in NetArt Media iBoutique 4.0 allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2010-5036 Public exploit

    SQL injection vulnerability in addsale.php in iScripts eSwap 2.0 allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2010-5026 Public exploit

    SQL injection vulnerability in winners.php in Science Fair In A Box (SFIAB) 2.0.6 and 2.2.0 allows remote attackers to …

  • Unscored —
    CVE-2010-5043 Public exploit

    SQL injection vulnerability in the DJ-ArtGallery (com_djartgallery) component 0.9.1 for Joomla! allows remote authentic…

  • Unscored —
    CVE-2010-5011 Public exploit

    SQL injection vulnerability in schoolmv2/html/studentmain.php in SchoolMation 2.3 allows remote attackers to execute ar…

  • Unscored —

    PHP remote file inclusion vulnerability in contact/contact.php in Groone's Simple Contact Form allows remote attackers …

  • Unscored —
    CVE-2010-5012 Public exploit

    SQL injection vulnerability in new.php in DaLogin 2.2 and 2.2.5 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2010-5033 Public exploit

    SQL injection vulnerability in ProductList.cfm in Fusebox 5.5.1 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —

    Stack-based buffer overflow in the Data Archiver service in GE Intelligent Platforms Proficy Historian before 3.5 SIM 1…

  • Unscored —

    Multiple stack-based buffer overflows in GE Intelligent Platforms Proficy Applications before 4.4.1 SIM 101 and 5.x bef…

  • Unscored —
    CVE-2011-4074 Public exploit

    Cross-site scripting (XSS) vulnerability in cmd.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to injec…

  • Unscored —
    CVE-2011-4075 Public exploit EPSS 52%

    The masort function in lib/functions.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2011-3165 EPSS 12%

    Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute…

  • Unscored —
    CVE-2011-3166 EPSS 12%

    Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the Web Administrator component in GE Intelligent Platforms Proficy Histori…

  • Unscored —
    CVE-2011-3167 Public exploit EPSS 65%

    Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute…

  • Unscored —
    CVE-2010-4983 Public exploit

    SQL injection vulnerability in profile.php in iScripts CyberMatch 1.0 allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2010-4982 Public exploit

    SQL injection vulnerability in address_book/contacts.php in My Kazaam Address & Contact Organizer allows remote attacke…

  • Unscored —
    CVE-2010-4968 Public exploit

    SQL injection vulnerability in the webmaster-tips.net Flash Gallery (com_wmtpic) component 1.0 for Joomla! allows remot…

  • Unscored —
    CVE-2010-4990 Public exploit

    SQL injection vulnerability in the Front-edit Address Book (com_addressbook) component for Joomla! allows remote attack…

  • Unscored —
    CVE-2010-4987 Public exploit

    SQL injection vulnerability in default.asp in KMSoft Guestbook (aka GBook) allows remote attackers to execute arbitrary…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the search feature in Campsite 3.4.0 allows remote attackers to inject arbi…

  • Unscored —
    CVE-2010-4981 Public exploit

    SQL injection vulnerability in trackads.php in YourFreeWorld Banner Management allows remote attackers to execute arbit…

  • Unscored —
    CVE-2010-4972 Public exploit

    SQL injection vulnerability in index.php in YPNinc JokeScript allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2010-4993 Public exploit

    SQL injection vulnerability in the eventcal (com_eventcal) component 1.6.4 for Joomla! allows remote attackers to execu…

  • Unscored —
    CVE-2010-4969 Public exploit

    SQL injection vulnerability in articlesdetails.php in BrotherScripts (BS) Business Directory allows remote attackers to…

  • Unscored —
    CVE-2010-4974 Public exploit

    SQL injection vulnerability in info.php in BrotherScripts (BS) and ScriptsFeed Auto Dealer allows remote attackers to e…

  • Unscored —

    SQL injection vulnerability in the Jobs Pro component 1.6.4 for Joomla! allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2010-4975 Public exploit

    SQL injection vulnerability in the Techjoomla SocialAds For JomSocial (com_socialads) component for Joomla! allows remo…

  • Unscored —
    CVE-2010-4977 Public exploit Scanner template EPSS 15%

    SQL injection vulnerability in menu.php in the Canteen (com_canteen) component 1.0 for Joomla! allows remote attackers …

  • Unscored —
    CVE-2010-4988 Public exploit

    PHP remote file inclusion vulnerability in mod_chatting/themes/default/header.php in Family Connections Who is Chatting…

  • Unscored —
    CVE-2010-4985 Public exploit

    Cross-site scripting (XSS) vulnerability in notes.php in My Kazaam Notes Management System allows remote attackers to i…