Archive
7 February 2012
Vulnerabilities first published on this day (UTC), newest first.
8 results · Clear filters · Feed
-
Unscored —CVE-2012-0992 Public exploit
interface/fax/fax_dispatch.php in OpenEMR 4.1.0 allows remote authenticated users to execute arbitrary commands via she…
-
Unscored —CVE-2012-0991 Public exploit
Multiple directory traversal vulnerabilities in OpenEMR 4.1.0 allow remote authenticated users to read arbitrary files …
-
Unscored —CVE-2012-0990 Public exploit
Cross-site request forgery (CSRF) vulnerability in admin/settings/update in DClassifieds 0.1 final allows remote attack…
-
Unscored —CVE-2012-1010 Public exploit
Unrestricted file upload vulnerability in actions.php in the AllWebMenus plugin before 1.1.8 for WordPress allows remot…
-
Unscored —CVE-2012-1005 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Sphinx Software Mobile Web Server 3.1.2.47 allow remote attacker…
-
Unscored —CVE-2012-1011 Public exploit
actions.php in the AllWebMenus plugin 1.1.8 for WordPress allows remote attackers to bypass intended access restriction…
-
Medium —
Apache Struts Multiple Cross-site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 2.0.14 and 2.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) lastName parameter to struts2-showcase/person/editPerson.action, or the (3) clientName …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 1.3.10 allow remote attackers to inject arbitrary …