Skip to content
OpenAdvisories

Archive

8 February 2012

Vulnerabilities first published on this day (UTC), newest first.

13 results · Clear filters · Feed

  • Unscored —
    CVE-2012-1002 Public exploit

    SQL injection vulnerability in author/edit.php in OpenConf 4.x before 4.12 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2012-1008 Public exploit EPSS 11%

    OfficeSIP Server 3.1 allows remote attackers to cause a denial of service (daemon crash) via a crafted To header in a S…

  • Unscored —
    CVE-2012-1017 Public exploit

    Multiple SQL injection vulnerabilities in base_qry_main.php in Basic Analysis and Security Engine (BASE) 1.4.5 allow re…

  • Unscored —
    CVE-2012-1027 Public exploit

    Cross-site scripting (XSS) vulnerability in account-closed.tcl in ]project-open[ (aka ]po[) 3.4.x, 3.5.0.1-2, and possi…

  • Unscored —
    CVE-2012-1029 Public exploit

    SQL injection vulnerability in mobile/search/index.php in Tube Ace (Adult PHP Tube Script) 1.6 allows remote attackers …

  • Unscored —
    CVE-2012-1023 Public exploit

    Open redirect vulnerability in admin/index.php in 4images 1.7.10 allows remote attackers to redirect users to arbitrary…

  • Unscored —
    CVE-2012-1028 Public exploit

    Cross-site scripting (XSS) vulnerability in bin/index.php in SimpleGroupware 0.742 and other versions before 0.743 allo…

  • Unscored —
    CVE-2012-1022 Public exploit

    SQL injection vulnerability in admin/categories.php in 4images 1.7.10 remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2012-1026 Public exploit

    Multiple SQL injection vulnerabilities in login2.php in XRay CMS 1.1.1 allow remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2012-1018 Public exploit

    Cross-site scripting (XSS) vulnerability in includes/convert.php in D-Mack Media Currency Converter (mod_currencyconver…

  • Unscored —
    CVE-2012-1021 Public exploit

    Cross-site scripting (XSS) vulnerability in admin/categories.php in 4images 1.7.10 allows remote attackers to inject ar…

  • Unscored —
    CVE-2012-1025 Public exploit

    Absolute path traversal vulnerability in file in Enigma2 Webinterface 1.6.0 through 1.6.8, 1.6rc3, and 1.7.0 allows rem…

  • Unscored —
    CVE-2012-1024 Public exploit

    Directory traversal vulnerability in file in Enigma2 Webinterface 1.5rc1 and 1.5beta4 allows remote attackers to read a…