Skip to content
OpenAdvisories

Archive

20 February 2012

Vulnerabilities first published on this day (UTC), newest first.

8 results · Clear filters · Feed

  • Unscored —
    CVE-2012-1217 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in STHS v2 Web Portal 2.2 allow remote attackers to inject arbitrar…

  • Unscored —
    CVE-2012-0996 Public exploit

    Multiple directory traversal vulnerabilities in 11in1 1.2.1 stable 12-31-2011 allow remote attackers to read arbitrary …

  • Unscored —
    CVE-2012-0997 Public exploit

    Cross-site request forgery (CSRF) vulnerability in admin/index.php in 11in1 1.2.1 stable 12-31-2011 allows remote attac…

  • Unscored —
    CVE-2012-1213 Public exploit

    Cross-site scripting (XSS) vulnerability in zimbra/h/calendar in Zimbra Web Client in Zimbra Collaboration Suite (ZCS) …

  • Unscored —
    CVE-2012-1208 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in backend/core/engine/base.php in Fork CMS 3.2.4 and possibly othe…

  • Unscored —
    CVE-2012-1205 Public exploit EPSS 25%

    PHP remote file inclusion vulnerability in relocate-upload.php in Relocate Upload plugin before 0.20 for WordPress allo…

  • Unscored —
    CVE-2012-1210 Public exploit

    SQL injection vulnerability in pfile/file.php in Powie pFile 1.02 allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2012-1211 Public exploit

    Cross-site scripting (XSS) vulnerability in pfile/kommentar.php in Powie pFile 1.02 allows remote attackers to inject a…