|
291961
|
- |
|
starcms
|
starcms
|
Cross-site scripting (XSS) vulnerability in index.php in starCMS allows remote attackers to inject arbitrary web script or HTML via the q parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2012-4998
|
2024-11-21 10:43 |
2012-09-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291962
|
- |
|
anecms
|
anecms
|
Directory traversal vulnerability in acp/index.php in AneCMS allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the p parameter.
|
CWE-22
Path Traversal
|
CVE-2012-4997
|
2024-11-21 10:43 |
2012-09-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291963
|
- |
|
rivetcode
|
rivettracker
|
Multiple SQL injection vulnerabilities in RivetTracker 1.03 and earlier allow remote attackers to execute arbitrary SQL commands via the hash parameter to (1) dltorrent.php or (2) torrent_functions.p…
|
CWE-89
SQL Injection
|
CVE-2012-4996
|
2024-11-21 10:43 |
2012-09-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291964
|
- |
|
limesurvey
|
limesurvey
|
Cross-site scripting (XSS) vulnerability in admin/userrighthandling.php in LimeSurvey before 1.91+ Build 120224 allows remote attackers to inject arbitrary web script or HTML via the full_name parame…
|
CWE-79
Cross-site Scripting
|
CVE-2012-4995
|
2024-11-21 10:43 |
2012-09-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291965
|
- |
|
limesurvey
|
limesurvey
|
SQL injection vulnerability in admin/admin.php in LimeSurvey before 1.91+ Build 120224 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a browse action. NO…
|
CWE-89
SQL Injection
|
CVE-2012-4994
|
2024-11-21 10:43 |
2012-09-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291966
|
- |
|
rivetcode
|
rivettracker
|
torrent_functions.php in RivetTracker 1.03 and earlier does not properly restrict access, which allows remote attackers to have an unspecified impact.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2012-4993
|
2024-11-21 10:43 |
2012-09-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291967
|
- |
|
flashfxp
|
flashfxp
|
Multiple buffer overflows in FlashFXP.exe in FlashFXP 4.2 allow remote authenticated users to execute arbitrary code via a long unicode string to (1) TListbox or (2) TComboBox.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2012-4992
|
2024-11-21 10:43 |
2012-09-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291968
|
- |
|
silverstripe
|
silverstripe
|
Multiple cross-site scripting (XSS) vulnerabilities in SilverStripe 2.3.x before 2.3.13 and 2.4.x before 2.4.7 allow remote attackers to inject arbitrary web script or HTML via (1) a crafted string t…
|
CWE-79
Cross-site Scripting
|
CVE-2012-4968
|
2024-11-21 10:43 |
2012-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291969
|
- |
|
mozilla google
|
firefox chrome
|
The SPDY protocol 3 and earlier, as used in Mozilla Firefox, Google Chrome, and other products, can perform TLS encryption of compressed data without properly obfuscating the length of the unencrypte…
|
CWE-310
Cryptographic Issues
|
CVE-2012-4930
|
2024-11-21 10:43 |
2012-09-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
291970
|
- |
|
debian mozilla google
|
debian_linux firefox chrome
|
The TLS protocol 1.2 and earlier, as used in Mozilla Firefox, Google Chrome, Qt, and other products, can encrypt compressed data without properly obfuscating the length of the unencrypted data, which…
|
CWE-310
Cryptographic Issues
|
CVE-2012-4929
|
2024-11-21 10:43 |
2012-09-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|