Skip to content
OpenAdvisories

Archive

29 January 2012

Vulnerabilities first published on this day (UTC), newest first.

20 results · Feed

  • Unscored —
    CVE-2011-4337 Public exploit

    Static code injection vulnerability in translate.php in Support Incident Tracker (aka SiT!) 3.45 through 3.65 allows re…

  • Unscored —
    CVE-2011-5072 Public exploit

    Multiple SQL injection vulnerabilities in Support Incident Tracker (aka SiT!) before 3.65 allow remote attackers to exe…

  • Unscored —
    CVE-2011-5073 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Support Incident Tracker (aka SiT!) before 3.65 allow remote att…

  • Unscored —
    CVE-2011-5075 Public exploit

    translate.php in Support Incident Tracker (aka SiT!) 3.45 through 3.65 allows remote attackers to obtain sensitive info…

  • Unscored —
    CVE-2011-5074 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in Support Incident Tracker (aka SiT!) before 3.65 allow rem…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in search.php in Support Incident Tracker (aka SiT!) 3.65 allows remote attack…

  • Unscored —

    SQL injection vulnerability in incident_attachments.php in Support Incident Tracker (aka SiT!) 3.65 allows remote attac…

  • Unscored —
    CVE-2011-3833 Public exploit EPSS 19%

    Unrestricted file upload vulnerability in ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote…

  • Unscored —

    Eval injection vulnerability in config.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated admi…

  • Unscored —
    CVE-2011-3829 Public exploit EPSS 17%

    ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to obtain sensitive i…

  • Unscored —

    Unrestricted file upload vulnerability in incident_attachments.php in Support Incident Tracker (aka SiT!) 3.65 allows r…

  • Unscored —

    move_uploaded_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to obtain sensitiv…

  • Unscored —

    Multiple cross-site request forgery (CSRF) vulnerabilities in Support Incident Tracker (aka SiT!) 3.65 allow remote att…

  • Unscored —
    CVE-2011-5071 Public exploit

    Multiple SQL injection vulnerabilities in Support Incident Tracker (aka SiT!) before 3.64 allow remote attackers to exe…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Support Incident Tracker (aka SiT!) 3.65 allow remote attackers …

  • Unscored —
    CVE-2012-0932 Public exploit

    Cross-site scripting (XSS) vulnerability in admin/login.php in Lead Capture Page System allows remote attackers to inje…

  • Unscored —
    CVE-2012-0935 Public exploit

    SQL injection vulnerability in Default.aspx in Aryadad CMS allows remote attackers to execute arbitrary SQL commands vi…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in web/springframework/security/SecurityAuthenticationEventOnmsEventBuilder.ja…

  • Unscored —
    CVE-2012-0933 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Acidcat CMS 3.5.1, 3.5.2, 3.5.6, and possibly earlier allow remo…

  • Unscored —

    PHP remote file inclusion vulnerability in ajax/savetag.php in the Theme Tuner plugin for WordPress before 0.8 allows r…