|
355381
|
- |
|
pligg
|
pligg_cms
|
Multiple open redirect vulnerabilities in Pligg 1.0.2 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the (1) return parameter to pligg/lo…
|
CWE-20
Improper Input Validation
|
CVE-2009-4788
|
2010-06-3 13:00 |
2010-04-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355382
|
- |
|
mojoblog
|
mojoblog
|
Multiple PHP remote file inclusion vulnerabilities in the MojoBlog component RC 0.15 for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path paramete…
|
CWE-94
Code Injection
|
CVE-2009-4789
|
2010-06-3 13:00 |
2010-04-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355383
|
- |
|
mojoblog
|
mojoblog
|
Per http://extensions.joomla.org/extensions/3374/details:
Editor's note
This extension has been unpublished for the following reason:
* This extension is not compatible with Joomla! 1.5
|
CWE-94
Code Injection
|
CVE-2009-4789
|
2010-06-3 13:00 |
2010-04-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355384
|
- |
|
sysax
|
multi_server
|
Multiple directory traversal vulnerabilities in Sysax Multi Server 4.5 allow remote authenticated users to read or modify arbitrary files via crafted FTP commands. NOTE: the provenance of this infor…
|
CWE-22
Path Traversal
|
CVE-2009-4790
|
2010-06-3 13:00 |
2010-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355385
|
- |
|
amsn
|
amsn
|
login_screen.tcl in aMSN (aka Alvaro's Messenger) before 0.97.1 saves a password after logout, which allows physically proximate attackers to hijack a session by visiting an unattended workstation.
|
CWE-255
Credentials Management
|
CVE-2008-7255
|
2010-06-3 13:00 |
2010-04-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355386
|
- |
|
lispeltuut
|
com_archeryscores
|
Directory traversal vulnerability in archeryscores.php in the Archery Scores (com_archeryscores) component 1.0.6 for Joomla! allows remote attackers to include and execute arbitrary local files via a…
|
CWE-22
Path Traversal
|
CVE-2010-1718
|
2010-06-1 13:00 |
2010-05-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355387
|
- |
|
freebsd
|
freebsd
|
jail.c in jail in FreeBSD 8.0 and 8.1-PRERELEASE, when the "-l -U root" options are omitted, does not properly restrict access to the current working directory, which might allow local users to read,…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2010-2022
|
2010-06-1 13:00 |
2010-05-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355388
|
- |
|
intervations
|
filecopa
|
Directory traversal vulnerability in the FTP service in FileCOPA before 5.03 allows remote attackers to read or overwrite arbitrary files via unknown vectors. NOTE: the provenance of this informatio…
|
CWE-22
Path Traversal
|
CVE-2010-2112
|
2010-06-1 13:00 |
2010-05-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355389
|
- |
|
brekeke
|
pbx
|
Cross-site request forgery (CSRF) vulnerability in pbx/gate in Brekeke PBX 2.4.4.8 allows remote attackers to hijack the authentication of users for requests that change passwords via the pbxadmin.we…
|
CWE-352
Origin Validation Error
|
CVE-2010-2114
|
2010-06-1 13:00 |
2010-05-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355390
|
- |
|
solarwinds
|
tftp_server
|
SolarWinds TFTP Server 10.4.0.10 allows remote attackers to cause a denial of service (no new connections) via a crafted read request.
|
CWE-20
Improper Input Validation
|
CVE-2010-2115
|
2010-06-1 13:00 |
2010-05-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
