268871
|
- |
|
francisco_cifuentes
|
vote_for_tt_news
|
Cross-site scripting (XSS) vulnerability in the Vote rank for news (vote_for_tt_news) extension 1.0.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecif…
|
CWE-79
Cross-site Scripting
|
CVE-2010-0335
|
2011-07-26 13:00 |
2010-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268872
|
- |
|
lyften
|
com_lyftenbloggie
|
SQL injection vulnerability in Lyften Designs LyftenBloggie (com_lyftenbloggie) component 1.0.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the author parameter to index…
|
CWE-89
SQL Injection
|
CVE-2009-4104
|
2011-07-26 13:00 |
2009-11-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268873
|
- |
|
gallarific
|
gallarific
|
Multiple SQL injection vulnerabilities in Gallarific Free Edition 1.1 allow remote attackers to execute arbitrary SQL commands via the (1) query parameter to (a) search.php; (2) gusername and (3) gpa…
|
CWE-89
SQL Injection
|
CVE-2008-1464
|
2011-07-26 13:00 |
2008-03-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268874
|
- |
|
gallarific
|
gallarific
|
More information is available at: http://www.securityfocus.com/bid/28163
|
CWE-89
SQL Injection
|
CVE-2008-1464
|
2011-07-26 13:00 |
2008-03-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268875
|
- |
|
francisco_cifuentes
|
vote_for_tt_news
|
SQL injection vulnerability in the Vote rank for news (vote_for_tt_news) extension 1.0.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
|
CWE-89
SQL Injection
|
CVE-2010-0334
|
2011-07-25 13:00 |
2010-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268876
|
- |
|
symantec
|
ghost_solutions_suite
|
Symantec Ghost Solution Suite 1.1 before 1.1 patch 2, 2.0.0, and 2.0.1 does not authenticate connections between the console and the Ghost Management Agent, which allows remote attackers to execute a…
|
CWE-287
Improper Authentication
|
CVE-2008-0640
|
2011-07-25 13:00 |
2008-02-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268877
|
- |
|
gallarific
|
gallarific
|
Gallarific Free Edition 1.1 does not require authentication for (1) photos.php, (2) comments.php, and (3) gallery.php in gadmin/, which allows remote attackers to edit objects via a direct request, d…
|
CWE-287
Improper Authentication
|
CVE-2008-1469
|
2011-07-25 13:00 |
2008-03-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268878
|
- |
|
gallarific
|
gallarific
|
More information available at: http://www.securityfocus.com/bid/28163/info
|
CWE-287
Improper Authentication
|
CVE-2008-1469
|
2011-07-25 13:00 |
2008-03-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268879
|
- |
|
linpha
|
linpha
|
Multiple cross-site scripting (XSS) vulnerabilities in LinPHA before 1.3.3 allow remote attackers to inject arbitrary web script or HTML via (1) ftp/index.php, (2) viewer.php, (3) functions/other.php…
|
CWE-79
Cross-site Scripting
|
CVE-2008-1487
|
2011-07-25 13:00 |
2008-03-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268880
|
- |
|
netbsd
|
netbsd
|
The accept function in NetBSD-current before 20061023, NetBSD 3.0 and 3.0.1 before 20061024, and NetBSD 2.x before 20061029 allows local users to cause a denial of service (socket consumption) via an…
|
CWE-20
Improper Input Validation
|
CVE-2006-6653
|
2011-07-25 13:00 |
2006-12-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|