Skip to content
OpenAdvisories

Archive

29 October 2015

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Unscored —
    CVE-2015-7858 Public exploit EPSS 86%

    SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands via u…

  • Unscored —
    CVE-2015-7857 Public exploit EPSS 94%

    SQL injection vulnerability in the getListQuery function in administrator/components/com_contenthistory/models/history.…

  • Unscored —
    CVE-2015-7297 Public exploit Scanner template EPSS 100%

    SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands via u…

  • Critical 9.8
    CVE-2015-5285 Public exploit

    Kallithea CRLF injection vulnerability

    CRLF injection vulnerability in Kallithea before 0.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the came_from parameter to _admin/login.

  • Unscored —
    CVE-2015-2900 Public exploit

    The AddUserFinding add_userfinding2 function in Medicomp MEDCIN Engine before 2.22.20153.226 allows remote attackers to…