|
261001
|
- |
|
typo3
|
xds_staff
|
SQL injection vulnerability in the XDS Staff List (xds_staff) extension 0.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
|
CWE-89
SQL Injection
|
CVE-2009-4392
|
2010-01-8 14:00 |
2009-12-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
261002
|
- |
|
malcom_box
|
lxr_cross_referencer
|
Cross-site scripting (XSS) vulnerability in LXR Cross Referencer 0.9.5 and 0.9.6 allows remote attackers to inject arbitrary web script or HTML via the i parameter to the ident program.
|
CWE-79
Cross-site Scripting
|
CVE-2009-4497
|
2010-01-8 14:00 |
2010-01-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
261003
|
- |
|
nanwich
|
faq_ask
|
Cross-site scripting (XSS) vulnerability in the FAQ Ask module 5.x and 6.x before 6.x-2.0, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
CWE-79
Cross-site Scripting
|
CVE-2009-4516
|
2010-01-8 14:00 |
2010-01-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
261004
|
- |
|
wowd
|
wowd
|
Multiple cross-site scripting (XSS) vulnerabilities in index.html in Wowd client before 1.3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) sortby, (2) tags, or (3) ctx pa…
|
CWE-79
Cross-site Scripting
|
CVE-2009-4586
|
2010-01-8 14:00 |
2010-01-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
261005
|
- |
|
jesse_smith
|
bftpd
|
The bftpdutmp_log function in bftpdutmp.c in Bftpd before 2.4 does not place a '\0' character at the end of the string value of the ut.bu_host structure member, which might allow remote attackers to …
|
NVD-CWE-Other
|
CVE-2009-4593
|
2010-01-8 14:00 |
2010-01-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
261006
|
- |
|
joomlabiblestudy
|
com_biblestudy
|
Directory traversal vulnerability in the Bible Study (com_biblestudy) component 6.1 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the controll…
|
CWE-22
Path Traversal
|
CVE-2010-0157
|
2010-01-7 14:00 |
2010-01-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
261007
|
- |
|
daniel_ptzinger
|
danp_documentdirs
|
SQL injection vulnerability in the Document Directorys (danp_documentdirs) extension 1.10.7 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
|
CWE-89
SQL Injection
|
CVE-2009-4393
|
2010-01-7 14:00 |
2009-12-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
261008
|
- |
|
mark_burton
|
insertnode
|
Cross-site scripting (XSS) vulnerability in the Insert Node module 5.x before 5.x-1.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via an inserted node.
|
CWE-79
Cross-site Scripting
|
CVE-2009-4518
|
2010-01-7 14:00 |
2010-01-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
261009
|
- |
|
ibm
|
advanced_management_module_firmware
|
Multiple unspecified vulnerabilities in the Advanced Management Module firmware before 2.50G for the IBM BladeCenter T 8720-2xx and 8730-2xx have unknown impact and attack vectors.
|
NVD-CWE-noinfo
|
CVE-2009-3935
|
2010-01-6 14:00 |
2009-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
261010
|
- |
|
iij
|
seil\/b1
|
The (1) CHAP and (2) MS-CHAP-V2 authentication capabilities in the PPP Access Concentrator (PPPAC) function in Internet Initiative Japan SEIL/B1 firmware 1.00 through 2.52 use the same challenge for …
|
CWE-287
Improper Authentication
|
CVE-2009-4409
|
2010-01-6 14:00 |
2009-12-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
