Skip to content
OpenAdvisories

Archive

9 September 2012

Vulnerabilities first published on this day (UTC), newest first.

7 results · Clear filters · Feed

  • Unscored —
    CVE-2011-5160 Public exploit

    Cross-site scripting (XSS) vulnerability in setup.php in OpenEMR 4 allows remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2011-5161 Public exploit

    Unrestricted file upload vulnerability in the patient photograph functionality in OpenEMR 4 allows remote attackers to …

  • Unscored —
    CVE-2012-1911 Public exploit

    Multiple SQL injection vulnerabilities in PHP Address Book 6.2.12 and earlier allow remote attackers to execute arbitra…

  • Unscored —
    CVE-2012-1912 Public exploit

    Cross-site scripting (XSS) vulnerability in preferences.php in PHP Address Book 7.0 and earlier allows remote attackers…

  • Unscored —
    CVE-2012-2315 Public exploit

    admin/Auth in OpenKM 5.1.7 and other versions before 5.1.8-2 does not properly enforce privileges for changing user rol…

  • Unscored —
    CVE-2012-2115 Public exploit

    SQL injection vulnerability in interface/login/validateUser.php in OpenEMR 4.1.0 and possibly earlier allows remote att…

  • Unscored —
    CVE-2012-2316 Public exploit

    Cross-site request forgery (CSRF) vulnerability in servlet/admin/AuthServlet.java in OpenKM 5.1.7 and other versions be…