Archive
3 December 2014
Vulnerabilities first published on this day (UTC), newest first.
11 results · Clear filters · Feed
-
Unscored —CVE-2014-9241 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in MyBB (aka MyBulletinBoard) 1.8.x before 1.8.2 allow remote attac…
-
Unscored —CVE-2014-9242 Public exploit
SQL injection vulnerability in admin/pages/modify.php in WebsiteBaker 2.8.3 allows remote attackers to execute arbitrar…
-
Unscored —CVE-2014-9240 Public exploit
SQL injection vulnerability in member.php in MyBB (aka MyBulletinBoard) 1.8.x before 1.8.2 allows remote attackers to e…
-
Unscored —CVE-2014-9243 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in WebsiteBaker 2.8.3 allow remote attackers to inject arbitrary we…
-
Unscored —CVE-2014-9236 Public exploit
Cross-site scripting (XSS) vulnerability in php/edit_photos.php in Zoph (aka Zoph Organizes Photos) 0.9.1 and earlier a…
-
Unscored —CVE-2014-9235 Public exploit
Multiple SQL injection vulnerabilities in Zoph (aka Zoph Organizes Photos) 0.9.1 and earlier allow remote authenticated…
-
Unscored —CVE-2014-9237 Public exploit
SQL injection vulnerability in Proticaret E-Commerce 3.0 allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2014-8773 Public exploit
MODX Revolution 2.x before 2.2.15 allows remote attackers to bypass the cross-site request forgery (CSRF) protection me…
-
Unscored —CVE-2014-8774 Public exploit
Cross-site scripting (XSS) vulnerability in manager/index.php in MODX Revolution 2.x before 2.2.15 allows remote attack…
-
Unscored —CVE-2014-8775 Public exploit
MODX Revolution 2.x before 2.2.15 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, whi…
-
Unscored —CVE-2014-9141 Public exploit
The installer in Thomson Reuters Fixed Assets CS 13.1.4 and earlier uses weak permissions for connectbgdl.exe, which al…