Skip to content
OpenAdvisories

Archive

13 August 2012

Vulnerabilities first published on this day (UTC), newest first.

23 results · Clear filters · Feed

  • Unscored —
    CVE-2012-4282 Public exploit

    SQL injection vulnerability in photo.php in Trombinoscope 3.5 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2012-2332 Public exploit

    SQL injection vulnerability in serendipity/serendipity_admin.php in Serendipity before 1.6.1 allows remote attackers to…

  • Unscored —
    CVE-2012-2274 Public exploit

    Cross-site scripting (XSS) vulnerability in pivotx/ajaxhelper.php in PivotX 2.3.2 and earlier allows remote attackers t…

  • Unscored —
    CVE-2012-2331 Public exploit

    Cross-site scripting (XSS) vulnerability in serendipity/serendipity_admin_image_selector.php in Serendipity before 1.6.…

  • Unscored —
    CVE-2010-5096 Public exploit

    Multiple SQL injection vulnerabilities in MyBB (aka MyBulletinBoard) before 1.6.1 allow remote attackers to execute arb…

  • Unscored —
    CVE-2012-4278 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Free Realty 3.1-0.6 allow remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2012-4281 Public exploit

    Multiple SQL injection vulnerabilities in Travelon Express 6.2.2 allow remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2012-4279 Public exploit

    Multiple SQL injection vulnerabilities in Free Realty 3.1-0.6 allow remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2012-4267 Public exploit

    Cross-site scripting (XSS) vulnerability in user/register in Sockso 1.5 and earlier allows remote attackers to inject a…

  • Unscored —
    CVE-2012-4266 Public exploit

    Cross-site scripting (XSS) vulnerability in client_details.php in Proman Xpress 5.0.1 allows remote attackers to inject…

  • Unscored —
    CVE-2012-4280 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in admin/agenteditor.php in Free Realty 3.1-0.6 allow remote…

  • Unscored —
    CVE-2012-4265 Public exploit

    SQL injection vulnerability in category_edit.php in Proman Xpress 5.0.1 allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2012-2371 Public exploit EPSS 13%

    Cross-site scripting (XSS) vulnerability in index.php in the WP-FaceThumb plugin 0.1 for WordPress allows remote attack…

  • Unscored —
    CVE-2012-4250 Public exploit

    Stack-based buffer overflow in the RequestScreenOptimization function in the XProcessControl.ocx ActiveX control in msl…

  • Unscored —
    CVE-2012-4254 Public exploit

    MySQLDumper 1.24.4 allows remote attackers to obtain sensitive information (Notices) via a direct request to (1) learn/…

  • Unscored —
    CVE-2012-4262 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in myCare2x allow remote attackers to inject arbitrary web script o…

  • Unscored —
    CVE-2012-4260 Public exploit

    Multiple SQL injection vulnerabilities in myCare2x allow remote attackers to execute arbitrary SQL commands via the (1)…

  • Unscored —
    CVE-2012-4251 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2012-4258 Public exploit

    Multiple SQL injection vulnerabilities in MYRE Real Estate Software (2012 Q2) allow remote attackers to execute arbitra…

  • Unscored —
    CVE-2012-4253 Public exploit

    Multiple directory traversal vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to read arbitrary files via a…

  • Unscored —
    CVE-2012-4261 Public exploit

    SQL injection vulnerability in modules/patient/mycare2x_pat_info.php in myCare2x allows remote attackers to execute arb…

  • Unscored —
    CVE-2012-4259 Public exploit

    Cross-site scripting (XSS) vulnerability in the contacts in (1) XPhone UC Web and the (2) web frontend for XPhone Virtu…

  • Unscored —
    CVE-2012-4252 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to hijack the a…