Skip to content
OpenAdvisories

Archive

7 February 2012

Vulnerabilities first published on this day (UTC), newest first.

8 results · Clear filters · Feed

  • Unscored —
    CVE-2012-0992 Public exploit

    interface/fax/fax_dispatch.php in OpenEMR 4.1.0 allows remote authenticated users to execute arbitrary commands via she…

  • Unscored —
    CVE-2012-0991 Public exploit

    Multiple directory traversal vulnerabilities in OpenEMR 4.1.0 allow remote authenticated users to read arbitrary files …

  • Unscored —
    CVE-2012-0990 Public exploit

    Cross-site request forgery (CSRF) vulnerability in admin/settings/update in DClassifieds 0.1 final allows remote attack…

  • Unscored —
    CVE-2012-1010 Public exploit

    Unrestricted file upload vulnerability in actions.php in the AllWebMenus plugin before 1.1.8 for WordPress allows remot…

  • Unscored —
    CVE-2012-1005 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Sphinx Software Mobile Web Server 3.1.2.47 allow remote attacker…

  • Unscored —
    CVE-2012-1011 Public exploit

    actions.php in the AllWebMenus plugin 1.1.8 for WordPress allows remote attackers to bypass intended access restriction…

  • Medium —
    CVE-2012-1006 Public exploit EPSS 57%

    Apache Struts Multiple Cross-site Scripting Vulnerabilities

    Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 2.0.14 and 2.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) lastName parameter to struts2-showcase/person/editPerson.action, or the (3) clientName …

  • Unscored —
    CVE-2012-1007 Public exploit EPSS 33%

    Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 1.3.10 allow remote attackers to inject arbitrary …