Skip to content
OpenAdvisories

Archive

24 January 2013

Vulnerabilities first published on this day (UTC), newest first.

15 results · Clear filters · Feed

  • Unscored —
    CVE-2011-4618 Public exploit Scanner template EPSS 10%

    Cross-site scripting (XSS) vulnerability in advancedtext.php in Advanced Text Widget plugin before 2.0.2 for WordPress …

  • Unscored —
    CVE-2012-1922 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in Sitecom WLM-2501 allow remote attackers to hijack the aut…

  • Unscored —
    CVE-2012-6510 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in NetArt Media Car Portal 3.0 allow remote attackers to inject arb…

  • Unscored —
    CVE-2012-6508 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in NetArt Media Car Portal 3.0 allow remote attackers to hij…

  • Unscored —
    CVE-2012-6520 Public exploit

    Multiple SQL injection vulnerabilities in the advanced search in Wikidforum 2.10 allow remote attackers to execute arbi…

  • Unscored —
    CVE-2012-6505 Public exploit

    Cross-site scripting (XSS) vulnerability in mods/hours/data/get_hours.php in PHP Volunteer Management 1.0.2 allows remo…

  • Unscored —
    CVE-2012-6518 Public exploit

    Cross-site request forgery (CSRF) vulnerability in mod.php in DiY-CMS 1.0 allows remote attackers to hijack the authent…

  • Unscored —
    CVE-2012-6517 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in DiY-CMS 1.0 allow remote attackers to inject arbitrary web scrip…

  • Unscored —
    CVE-2012-6504 Public exploit

    SQL injection vulnerability in mods/hours/data/get_hours.php in PHP Volunteer Management 1.0.2 allows remote attackers …

  • Unscored —
    CVE-2012-6519 Public exploit

    SQL injection vulnerability in modules/poll/index.php in DIY-CMS 1.0 allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2012-6516 Public exploit

    SQL injection vulnerability in PHP Ticket System Beta 1 allows remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2012-6513 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php/Admin_Preferences in gpEasy CMS 2.3.3 allows remote attackers to …

  • Unscored —
    CVE-2012-6506 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the Zingiri Web Shop plugin 2.4.0 for WordPress allow remote att…

  • Unscored —
    CVE-2012-6509 Public exploit

    Unrestricted file upload vulnerability in NetArt Media Car Portal 3.0 allows remote attackers to execute arbitrary PHP …

  • Unscored —
    CVE-2012-2099 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Wikidforum 2.10 allow remote attackers to inject arbitrary web s…