VYPR

CVEs

346,414 total · page 5976 of 6,929

AllCriticalHighKEV
  • CVE-2010-4928Oct 9, 2011
    Joomla
    Restaurant Guide
    risk 0.03cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Restaurant Guide (com_restaurantguide) component 1.0.0 for Joomla! allows remote attackers to inject arbitrary web script or HTML by placing it after a > (greater than) character.

  • CVE-2010-4927Oct 9, 2011
    Joomla
    Restaurant Guide
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in the Restaurant Guide (com_restaurantguide) component 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a country action to index.php.

  • CVE-2010-4926Oct 9, 2011
    Joomla
    TimeTrack
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in the TimeTrack (com_timetrack) component 1.2.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the ct_id parameter in a timetrack action to index.php.

  • CVE-2010-4925Oct 9, 2011
    Nuked Klan
    Partenaires Module
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in clic.php in the Partenaires module 1.5 for Nuked-Klan allows remote attackers to execute arbitrary SQL commands via the id parameter.

  • CVE-2010-4924Oct 9, 2011
    Clearbudget
    Clearbudget
    risk 0.03cvss —epss 0.02

    PHP remote file inclusion vulnerability in logic/controller.class.php in clearBudget 0.9.8 allows remote attackers to execute arbitrary PHP code via a URL in the actionPath parameter. NOTE: this issue has been disputed by a reliable third party

  • CVE-2010-4923Oct 9, 2011
    Virtuenetz
    Virtue Book Store
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in book/detail.php in Virtue Netz Virtue Book Store allows remote attackers to execute arbitrary SQL commands via the bid parameter.

  • CVE-2010-4922Oct 9, 2011
    Allinta
    Allinta CMS
    risk 0.03cvss —epss 0.01

    Multiple SQL injection vulnerabilities in Allinta CMS 22.07.2010 allow remote attackers to execute arbitrary SQL commands via the i parameter in an edit action to (1) contentAE.asp or (2) templatesAE.asp.

  • CVE-2010-4921Oct 8, 2011
    Dmxready
    Polling Booth Manager
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in inc_pollingboothmanager.asp in DMXReady Polling Booth Manager allows remote attackers to execute arbitrary SQL commands via the QuestionID parameter in a results action.

  • CVE-2010-4920Oct 8, 2011
    Micronetsoft
    Rental Property Website
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in detail.asp in Micronetsoft Rental Property Management Website 1.0 allows remote attackers to execute arbitrary SQL commands via the ad_ID parameter.

  • CVE-2010-4919Oct 8, 2011
    Micronetsoft
    Rv Dealer Website
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in detail.asp in Micronetsoft RV Dealer Website 1.0 allows remote attackers to execute arbitrary SQL commands via the vehicletypeID parameter.

  • CVE-2010-4918Oct 8, 2011
    Ijoomla
    Com Magazine
    risk 0.03cvss —epss 0.02

    PHP remote file inclusion vulnerability in iJoomla Magazine (com_magazine) component 3.0.1 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the config parameter to magazine.functions.php.

  • CVE-2010-4917Oct 8, 2011
    A Blog
    A Blog
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in sources/search.php in A-Blog 2.0 allows remote attackers to execute arbitrary SQL commands via the words parameter.

  • CVE-2010-4916Oct 8, 2011
    Coldgen
    Coldusergroup
    risk 0.03cvss —epss 0.01

    Multiple SQL injection vulnerabilities in index.cfm in ColdGen ColdUserGroup 1.06 allow remote attackers to execute arbitrary SQL commands via the (1) ArticleID or (2) LibraryID parameter.

  • CVE-2010-4915Oct 8, 2011
    Coldgen
    Coldbookmarks
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.cfm in ColdGen ColdBookmarks 1.22 allows remote attackers to execute arbitrary SQL commands via the BookmarkID parameter in an EditBookmark action.

  • CVE-2010-4914Oct 8, 2011
    Deltascripts
    PHP Classifieds
    risk 0.03cvss —epss 0.02

    PHP remote file inclusion vulnerability in tools/phpmailer/class.phpmailer.php in PHP Classifieds 7.3 allows remote attackers to execute arbitrary PHP code via a URL in the lang_path parameter.

  • CVE-2010-4913Oct 8, 2011
    Coldgen
    Coldusergroup
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in the search feature in ColdGen ColdUserGroup 1.06 allows remote attackers to inject arbitrary web script or HTML via the Keywords parameter. NOTE: some of these details are obtained from third party information.

  • CVE-2010-4912Oct 8, 2011
    Discuz
    Ucenter Home
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in shop.php in UCenter Home 2.0 allows remote attackers to execute arbitrary SQL commands via the shopid parameter in a view action.

  • CVE-2010-4911Oct 8, 2011
    Sellatsite
    PHP Classifieds Ads
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in classi/detail.php in PHP Classifieds Ads allows remote attackers to execute arbitrary SQL commands via the sid parameter.

  • CVE-2010-4910Oct 8, 2011
    Coldgen
    Coldcalendar
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in index.cfm in ColdGen ColdCalendar 2.06 allows remote attackers to execute arbitrary SQL commands via the EventID parameter in a ViewEventDetails action.

  • CVE-2010-4909Oct 8, 2011
    PaysiteReviewCMS
    PaysiteReviewCMS
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in PaysiteReviewCMS 1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) q parameter to search.php or the (2) image parameter to image.php.

  • CVE-2010-4908Oct 8, 2011
    Virtuenetz
    Virtue Shopping Mall
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in detail.php in Virtue Shopping Mall allows remote attackers to execute arbitrary SQL commands via the prodid parameter.

  • CVE-2010-4907Oct 8, 2011
    Zenphoto
    Zenphoto
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in zp-core/admin.php in Zenphoto 1.3 allows remote attackers to inject arbitrary web script or HTML via the user parameter. NOTE: the from parameter is already covered by CVE-2009-4562.

  • CVE-2010-4906Oct 8, 2011
    Zenphoto
    Zenphoto
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in zp-core/full-image.php in Zenphoto 1.3 and 1.3.1.2 allows remote attackers to execute arbitrary SQL commands via the a parameter. NOTE: some of these details are obtained from third party information.

  • CVE-2010-4905Oct 8, 2011
    Softbizscripts
    Article Directory Script
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in article_details.php in Softbiz Article Directory Script allows remote attackers to execute arbitrary SQL commands via the sbiz_id parameter.

  • CVE-2010-4904Oct 8, 2011
    Joomla
    Aardvertiser
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in the Aardvertiser (com_aardvertiser) component 2.1 and 2.1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cat_name parameter in a view action to index.php. NOTE: some of these details are obtained from third party…

  • CVE-2010-4903Oct 8, 2011
    Cubecart
    Cubecart
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in index.php in CubeCart 4.3.3 allows remote attackers to execute arbitrary SQL commands via the searchStr parameter.

  • CVE-2010-4902Oct 8, 2011
    Joomla
    Clantools
    risk 0.03cvss —epss 0.01

    Multiple SQL injection vulnerabilities in the Clantools (com_clantools) component 1.2.3 for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) squad or (2) showgame parameter to index.php.

  • CVE-2010-4901Oct 8, 2011
    Squiz
    Mysource Matrix
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in char_map.php in MySource Matrix 3.28.3 allow remote attackers to inject arbitrary web script or HTML via the (1) height or (2) width parameter.

  • CVE-2010-4900Oct 8, 2011
    Webmanager Pro
    CMS Webmanager Pro
    risk 0.00cvss —epss 0.01

    Open redirect vulnerability in c.php in CMS WebManager-Pro 8.1 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter.

  • CVE-2010-4899Oct 8, 2011
    CMS
    WebManager-Pro
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in c.php in CMS WebManager-Pro before 8.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.

  • CVE-2010-4898Oct 8, 2011
    Gantry Framework
    Com Gantry
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in the Gantry (com_gantry) component 3.0.10 for Joomla! allows remote attackers to execute arbitrary SQL commands via the moduleid parameter to index.php.

  • CVE-2010-4897Oct 8, 2011
    Bluecms Project
    Bluecms
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in comment.php in BlueCMS 1.6 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header in a send action.

  • CVE-2010-4896Oct 8, 2011
    Expinion.net
    Member Management System
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in admin/index.asp in Member Management System 4.0 allows remote attackers to inject arbitrary web script or HTML via the REF_URL parameter.

  • CVE-2010-4895Oct 8, 2011
    Chillycms
    Chillycms
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in core/showsite.php in chillyCMS 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the name parameter (aka the username field). NOTE: some of these details are obtained from third party information.

  • CVE-2010-4894Oct 8, 2011
    Chillycms
    Chillycms
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in core/showsite.php in chillyCMS 1.1.3 allows remote attackers to execute arbitrary SQL commands via the name parameter. NOTE: some of these details are obtained from third party information.

  • CVE-2010-4893Oct 8, 2011
    Festengine
    Festos
    risk 0.03cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in foodvendors.php in FestOS 2.3b allows remote attackers to inject arbitrary web script or HTML via the category parameter in a details action.

  • CVE-2011-3598Oct 8, 2011
    Phppgadmin
    Phppgadmin
    risk 0.00cvss —epss 0.03

    Multiple cross-site scripting (XSS) vulnerabilities in phpPgAdmin before 5.0.3 allow remote attackers to inject arbitrary web script or HTML via (1) a web page title, related to classes/Misc.php; or the (2) return_url or (3) return_desc parameter to display.php.

  • CVE-2011-2663Oct 8, 2011
    Novell
    Groupwise
    risk 0.00cvss —epss 0.05

    Array index error in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a crafted yearly RRULE variable in a VCALENDAR attachment in an e-mail message.

  • CVE-2011-2662Oct 8, 2011
    Novell
    Groupwise
    risk 0.00cvss —epss 0.04

    Integer signedness error in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a negative BYWEEKNO property in a weekly RRULE variable in a VCALENDAR attachment in an e-mail message.

  • CVE-2011-2661Oct 8, 2011
    Novell
    Groupwise
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in WebAccess in Novell GroupWise 8.0 before HP3 allow remote attackers to inject arbitrary web script or HTML via the (1) Directory.Item.name or (2) Directory.Item.displayName parameter.

  • CVE-2011-2227Oct 8, 2011
    Novell
    Identity Manager Roles Based Provisioning Module
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in Novell Identity Manager (aka IDM) User Application 3.5.0, 3.5.1, 3.6.0, 3.6.1, 3.7.0, and 4.0.0, and Identity Manager Roles Based Provisioning Module 3.6.0, 3.6.1, 3.7.0, and 4.0.0, allows remote attackers to inject arbitrary web…

  • CVE-2011-2219Oct 8, 2011
    Novell
    Groupwise
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to cause a denial of service (daemon crash) via unknown vectors, a different vulnerability than CVE-2011-2218.

  • CVE-2011-2218Oct 8, 2011
    Novell
    Groupwise
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to cause a denial of service (daemon crash) via unknown vectors, a different vulnerability than CVE-2011-2219.

  • CVE-2011-1696Oct 8, 2011
    Novell
    Identity Manager Roles Based Provisioning Module
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in Novell Identity Manager (aka IDM) User Application 3.5.0, 3.5.1, 3.6.0, 3.6.1, 3.7.0, and 4.0.0, and Identity Manager Roles Based Provisioning Module 3.6.0, 3.6.1, 3.7.0, and 4.0.0, allows remote attackers to inject arbitrary web…

  • CVE-2011-0334Oct 8, 2011
    Novell
    Groupwise
    risk 0.00cvss —epss 0.05

    Stack-based buffer overflow in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a long HTTP request for a .css file.

  • CVE-2011-0333Oct 8, 2011
    Novell
    Groupwise
    risk 0.00cvss —epss 0.06

    Heap-based buffer overflow in the NgwiCalVTimeZoneBody::ParseSelf function in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a crafted TZNAME variable in a VCALENDAR attachment in an e-mail…

  • CVE-2011-3868Oct 7, 2011
    VMware
    Workstation
    risk 0.00cvss —epss 0.06

    Buffer overflow in VMware Workstation 7.x before 7.1.5, VMware Player 3.x before 3.1.5, VMware Fusion 3.1.x before 3.1.3, and VMware AMS allows remote attackers to execute arbitrary code via a crafted UDF filesystem in an ISO image.

  • CVE-2010-4892Oct 7, 2011
    TYPO3
    powermail
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the powermail extension before 1.5.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2010-4891Oct 7, 2011
    Andreas Kiefer
    Ke Yac
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Yet Another Calendar (ke_yac) extension before 1.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2010-4890Oct 7, 2011
    TYPO3
    ke_yac
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Yet Another Calendar (ke_yac) extension before 1.1.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.