Skip to content
OpenAdvisories

Archive

4 October 2012

Vulnerabilities first published on this day (UTC), newest first.

10 results · Clear filters · Feed

  • Unscored —
    CVE-2011-5204 Public exploit

    Akiva WebBoard 8.x stores passwords in plaintext, which allows local users to obtain sensitive information by reading f…

  • Unscored —
    CVE-2011-5207 Public exploit

    Cross-site scripting (XSS) vulnerability in admin/OptionsPostsList.php in the TheCartPress plugin for WordPress before …

  • Unscored —
    CVE-2011-5203 Public exploit

    SQL injection vulnerability in WB/Default.asp in Akiva WebBoard before 8 SR 1 allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2012-5295 Public exploit

    Cross-site scripting (XSS) vulnerability in login.cfm in FuseTalk Forums 3.2 and earlier allows remote attackers to inj…

  • Unscored —
    CVE-2012-5294 Public exploit

    SQL injection vulnerability in art_detalle.php in MyStore Xpress Tienda Virtual allows remote attackers to execute arbi…

  • Unscored —
    CVE-2012-5291 Public exploit

    SQL injection vulnerability in team.php in Posse Softball Director CMS allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2012-5288 Public exploit

    SQL injection vulnerability in page.php in phpMyDirectory 1.3.3 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2012-5292 Public exploit

    Multiple SQL injection vulnerabilities in Atar2b CMS 4.0.1 allow remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2012-5293 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in SAPID CMS 1.2.3 Stable allow remote attackers to execute arbitrar…

  • Unscored —
    CVE-2012-3819 Public exploit

    Stack consumption vulnerability in dartwebserver.dll 1.9 and earlier, as used in Dart PowerTCP WebServer for ActiveX an…