257791
|
- |
|
sanusart
|
simple_php_guestbook
|
Cross-site scripting (XSS) vulnerability in guestbook.php in Simple PHP Guestbook 1.0 allows remote attackers to inject arbitrary web script or HTML via the action parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2010-0940
|
2017-08-17 10:32 |
2010-03-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257792
|
- |
|
web-site-development
|
etek_systems_hit_counter
|
Multiple cross-site scripting (XSS) vulnerabilities in eTek Systems Hit Counter 2.0 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) index.php, (2) inc/login.php…
|
CWE-79
Cross-site Scripting
|
CVE-2010-0941
|
2017-08-17 10:32 |
2010-03-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257793
|
- |
|
jvideodirect
|
com_jvideodirect
|
Directory traversal vulnerability in the jVideoDirect (com_jvideodirect) component for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.…
|
CWE-22
Path Traversal
|
CVE-2010-0942
|
2017-08-17 10:32 |
2010-03-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257794
|
- |
|
joomlart
|
com_jashowcase
|
Directory traversal vulnerability in the JA Showcase (com_jashowcase) component for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter in a jashowc…
|
CWE-22
Path Traversal
|
CVE-2010-0943
|
2017-08-17 10:32 |
2010-03-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257795
|
- |
|
thorsten_riess
|
com_jcollection
|
Directory traversal vulnerability in the JCollection (com_jcollection) component for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.ph…
|
CWE-22
Path Traversal
|
CVE-2010-0944
|
2017-08-17 10:32 |
2010-03-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257796
|
- |
|
hotbrackets
|
com_hotbrackets
|
SQL injection vulnerability in the HotBrackets Tournament Brackets (com_hotbrackets) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.
|
CWE-89
SQL Injection
|
CVE-2010-0945
|
2017-08-17 10:32 |
2010-03-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257797
|
- |
|
bfs.kilu
|
bigforum
|
SQL injection vulnerability in profil.php in Bigforum 4.5, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter.
|
CWE-89
SQL Injection
|
CVE-2010-0948
|
2017-08-17 10:32 |
2010-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257798
|
- |
|
dev4u
|
dev4u_cms
|
SQL injection vulnerability in go_target.php in dev4u CMS allows remote attackers to execute arbitrary SQL commands via the kontent_id parameter.
|
CWE-89
SQL Injection
|
CVE-2010-0951
|
2017-08-17 10:32 |
2010-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257799
|
- |
|
insanevisions
|
onecms
|
SQL injection vulnerability in index.php in OneCMS 2.5, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter in an elite action.
|
CWE-89
SQL Injection
|
CVE-2010-0952
|
2017-08-17 10:32 |
2010-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257800
|
- |
|
phpcoin
|
phpcoin
|
Directory traversal vulnerability in mod.php in phpCOIN 1.2.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the mod parameter.
|
CWE-22
Path Traversal
|
CVE-2010-0953
|
2017-08-17 10:32 |
2010-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|