Skip to content
OpenAdvisories

Archive

3 January 2015

Vulnerabilities first published on this day (UTC), newest first.

9 results · Feed

  • Unscored —
    CVE-2014-9464 Public exploit

    SQL injection vulnerability in Category.php in Microweber CMS 0.95 before 20141209 allows remote attackers to execute a…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in controllers/home_controller.php in BEdita before 3.1 allows remote attacker…

  • Unscored —

    Multiple cross-site request forgery (CSRF) vulnerabilities in MemHT Portal 4.0.1 allow remote attackers to hijack the a…

  • Unscored —
    CVE-2010-5317 Public exploit

    Multiple SQL injection vulnerabilities in index.php in SweetRice CMS before 0.6.7.1 allow remote attackers to execute a…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in as/index.php in SweetRice CMS before 0.6.7.1 allows remote attackers to inj…

  • Unscored —
    CVE-2010-5315 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in BEdita before 3.1 allow remote attackers to hijack the au…

  • Unscored —
    CVE-2010-5318 Public exploit

    The password-reset feature in as/index.php in SweetRice CMS before 0.6.7.1 allows remote attackers to modify the admini…

  • Unscored —

    Multiple cross-site request forgery (CSRF) vulnerabilities in Kandidat CMS 1.4.2 allow remote attackers to hijack the a…

  • Unscored —
    CVE-2014-9427 EPSS 18%

    sapi/cgi/cgi_main.c in the CGI component in PHP through 5.4.36, 5.5.x through 5.5.20, and 5.6.x through 5.6.4, when mma…