|
295971
|
- |
|
simplemachines
|
smf
|
Cross-site request forgery (CSRF) vulnerability in Simple Machines Forum (SMF) 2.x before 2.0.1 allows remote attackers to hijack the authentication of administrators or moderators via vectors involv…
|
CWE-352
Origin Validation Error
|
CVE-2011-4173
|
2024-11-21 10:31 |
2011-10-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295972
|
- |
|
kent-web
|
web_forum
|
Multiple cross-site scripting (XSS) vulnerabilities in KENT-WEB WEB FORUM before 5.1 allow remote attackers to inject arbitrary web script or HTML via (1) an e-mail address field or (2) a cookie, a r…
|
CWE-79
Cross-site Scripting
|
CVE-2011-4172
|
2024-11-21 10:31 |
2011-10-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295973
|
- |
|
ibm
|
websphere_ilog_rule_team_server
|
Cross-site scripting (XSS) vulnerability in content/error.jsp in IBM WebSphere ILOG Rule Team Server 7.1.1 allows remote attackers to inject arbitrary web script or HTML via the project parameter to …
|
CWE-79
Cross-site Scripting
|
CVE-2011-4171
|
2024-11-21 10:31 |
2011-10-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295974
|
- |
|
kent-web
|
web_forum
|
Cross-site scripting (XSS) vulnerability in KENT-WEB WEB FORUM 5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to "web form entries."
|
CWE-79
Cross-site Scripting
|
CVE-2011-3984
|
2024-11-21 10:31 |
2011-10-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295975
|
- |
|
kent-web
|
web_forum
|
Cross-site scripting (XSS) vulnerability in KENT-WEB WEB FORUM 5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to cookies.
|
CWE-79
Cross-site Scripting
|
CVE-2011-3983
|
2024-11-21 10:31 |
2011-10-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295976
|
- |
|
gnome
|
empathy
|
Cross-site scripting (XSS) vulnerability in the theme_adium_append_message function in empathy-theme-adium.c in the Adium theme in libempathy-gtk in Empathy 3.2.1 and earlier allows remote attackers …
|
CWE-79
Cross-site Scripting
|
CVE-2011-4170
|
2024-11-21 10:31 |
2011-10-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295977
|
- |
|
xia_zuojie
|
nexusphp
|
SQL injection vulnerability in thanks.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter.
|
CWE-89
SQL Injection
|
CVE-2011-4026
|
2024-11-21 10:31 |
2011-10-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295978
|
- |
|
ocsinventory-ng
|
ocs_inventory_ng
|
Cross-site scripting (XSS) vulnerability in ocsinventory in OCS Inventory NG 2.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
CWE-79
Cross-site Scripting
|
CVE-2011-4024
|
2024-11-21 10:31 |
2011-10-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295979
|
- |
|
lockon
|
ec-cube
|
SQL injection vulnerability in data/class/SC_Query.php in EC-CUBE 2.11.0 through 2.11.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
|
CWE-89
SQL Injection
|
CVE-2011-3988
|
2024-11-21 10:31 |
2011-10-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295980
|
- |
|
asterisk
|
open_source
|
chan_sip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.7.1 and 10.x before 10.0.0-rc1 does not properly initialize variables during request parsing, which allows remote authent…
|
CWE-20
Improper Input Validation
|
CVE-2011-4063
|
2024-11-21 10:31 |
2011-10-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|