|
292031
|
- |
|
mikrotik
|
routeros
|
The winbox service in MikroTik RouterOS 5.15 and earlier allows remote attackers to cause a denial of service (CPU consumption), read the router version, and possibly have other impacts via a request…
|
CWE-16
Configuration
|
CVE-2012-6050
|
2024-11-21 10:45 |
2012-11-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292032
|
- |
|
opensolution
|
quick.cart
|
Open Solution Quick.Cart 5.0 allows remote attackers to obtain sensitive information via (1) a long string or (2) invalid characters in a cookie, which reveals the installation path in an error messa…
|
CWE-200
Information Exposure
|
CVE-2012-6049
|
2024-11-21 10:45 |
2012-11-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292033
|
- |
|
guitar-pro
|
guitar_pro
|
Guitar Pro 6.1.1 r10791 allows remote attackers to cause a denial of service (crash) via a long string in a gpx file.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2012-6048
|
2024-11-21 10:45 |
2012-11-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292034
|
- |
|
x7_group
|
x7_chat
|
Cross-site request forgery (CSRF) vulnerability in X7 Chat 2.0.5.1 and earlier allows remote attackers to hijack the authentication of administrators for requests that add a user to an arbitrary grou…
|
CWE-352
Origin Validation Error
|
CVE-2012-6047
|
2024-11-21 10:45 |
2012-11-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292035
|
- |
|
phpenter
|
php_enter
|
Static code injection vulnerability in admin/banners.php in PHP Enter allows remote attackers to inject arbitrary PHP code into horad.php via the code parameter.
|
CWE-94
Code Injection
|
CVE-2012-6046
|
2024-11-21 10:45 |
2012-11-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292036
|
- |
|
ramui
|
ramui_forum
|
Cross-site scripting (XSS) vulnerability in gb/user/index.php in Ramui Forum, possibly 1.0 Beta, allows remote attackers to inject arbitrary web script or HTML via the query parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2012-6045
|
2024-11-21 10:45 |
2012-11-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292037
|
- |
|
mjsware
|
m-player
|
M-Player 0.4 allows remote attackers to cause a denial of service (crash) via a crafted MP3 file.
|
CWE-20
Improper Input Validation
|
CVE-2012-6044
|
2024-11-21 10:45 |
2012-11-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292038
|
- |
|
php-fusion
|
php-fusion
|
Cross-site scripting (XSS) vulnerability in downloads.php in PHP-Fusion 7.02.04 allows remote attackers to inject arbitrary web script or HTML via the cat_id parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2012-6043
|
2024-11-21 10:45 |
2012-11-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292039
|
- |
|
geopainting
|
gpsmapedit
|
GPSMapEdit 1.1.73.2 allows user-assisted remote attackers to cause a denial of service (crash) via a long string in a lst file.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2012-6042
|
2024-11-21 10:45 |
2012-11-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292040
|
- |
|
morequick
|
greenbrowser
|
Double free vulnerability in GreenBrowser before 6.0.1002, when the keyword search bar (F6) is activated, allows remote attackers to execute arbitrary code via a crafted iframe.
|
CWE-399
Resource Management Errors
|
CVE-2012-6041
|
2024-11-21 10:45 |
2012-11-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|