Skip to content
OpenAdvisories

Archive

23 September 2012

Vulnerabilities first published on this day (UTC), newest first.

19 results · Feed

  • Unscored —
    CVE-2011-5195 Public exploit

    Cross-site request forgery (CSRF) vulnerability in index/manager/fileUpload in Public Knowledge Project Open Conference…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in sign.php in tinyguestbook allows remote attackers to inject arbitrary web s…

  • Unscored —

    Multiple SQL injection vulnerabilities in sign.php in tinyguestbook allow remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2011-5193 Public exploit

    Cross-site scripting (XSS) vulnerability in vendors/samswhois/samswhois.inc.php in the Whois Search plugin 1.4.2.3 for …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in pretty-bar.php in Pretty Link Lite plugin before 1.5.6 for WordPress allows…

  • Unscored —
    CVE-2011-5196 Public exploit

    Cross-site request forgery (CSRF) vulnerability in index/manager/fileUpload in Public Knowledge Project Open Journal Sy…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in vendors/samswhois/samswhois.inc.php in the Whois Search plugin before 1.4.2…

  • Unscored —
    CVE-2011-5200 Public exploit

    Multiple SQL injection vulnerabilities in DeDeCMS, possibly 5.6, allow remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2011-5197 Public exploit

    Cross-site request forgery (CSRF) vulnerability in index/manager/fileUpload in Public Knowledge Project Open Harvester …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in pretty-bar.php in Pretty Link Lite plugin before 1.5.4 for WordPress allows…

  • Unscored —

    SQL injection vulnerability in search.php in Neturf eCommerce Shopping Cart allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2012-5105 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in SQLiteManager 1.2.4 allow remote attackers to inject arbitrary w…

  • Unscored —

    SQL injection vulnerability in the JExtensions JE Poll component before 1.1 for Joomla! allows remote attackers to exec…

  • Unscored —
    CVE-2012-5098 Public exploit

    Multiple SQL injection vulnerabilities in Php-X-Links, possibly 1.0, allow remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2012-5100 Public exploit

    Directory traversal vulnerability in HServer 0.1.1 allows remote attackers to read arbitrary files via a (1) ..%5c (dot…

  • Unscored —
    CVE-2012-5104 Public exploit

    Cross-site scripting (XSS) vulnerability in forums/ubbthreads.php in UBB.threads 7.5.6 and earlier allows remote attack…

  • Unscored —
    CVE-2012-5102 Public exploit

    Cross-site scripting (XSS) vulnerability in inc/extensions.php in VertrigoServ 2.25 allows remote attackers to inject a…

  • Unscored —
    CVE-2012-5099 Public exploit

    Cross-site scripting (XSS) vulnerability in list.php in PHPB2B 4.1 and earlier allows remote attackers to inject arbitr…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in action/add-submit.php in Ggb Guestbook 0.3.1 allow remote attack…