|
297061
|
- |
|
akiva
|
webboard
|
SQL injection vulnerability in WB/Default.asp in Akiva WebBoard before 8 SR 1 allows remote attackers to execute arbitrary SQL commands via the name parameter. NOTE: some of these details are obtain…
|
CWE-89
SQL Injection
|
CVE-2011-5203
|
2024-11-21 10:33 |
2012-10-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
297062
|
- |
|
michael_biebl
|
policykit
|
PolicyKit 0.103 sets the AdminIdentities to "wheel" by default, which allows local users in the wheel group to gain root privileges without authentication.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2011-4945
|
2024-11-21 10:33 |
2012-10-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
297063
|
- |
|
sysprogs
|
wincdemu
|
BazisVirtualCDBus.sys in WinCDEmu 3.6 allows local users to cause a denial of service (system crash) via the unmount command to batchmnt.exe.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2011-5202
|
2024-11-21 10:33 |
2012-10-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
297064
|
- |
|
steveyolam
|
tinyguestbook
|
Multiple SQL injection vulnerabilities in sign.php in tinyguestbook allow remote attackers to execute arbitrary SQL commands via the (1) name and (2) msg parameters. NOTE: some of these details are …
|
CWE-89
SQL Injection
|
CVE-2011-5201
|
2024-11-21 10:33 |
2012-09-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
297065
|
- |
|
dedecms
|
dedecms
|
Multiple SQL injection vulnerabilities in DeDeCMS, possibly 5.6, allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) list.php, (2) members.php, or (3) book.php.
|
CWE-89
SQL Injection
|
CVE-2011-5200
|
2024-11-21 10:33 |
2012-09-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
297066
|
- |
|
steveyolam
|
tinyguestbook
|
Cross-site scripting (XSS) vulnerability in sign.php in tinyguestbook allows remote attackers to inject arbitrary web script or HTML via the msg parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2011-5199
|
2024-11-21 10:33 |
2012-09-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
297067
|
- |
|
neturf
|
ecommerce_shopping_cart
|
SQL injection vulnerability in search.php in Neturf eCommerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the SearchFor parameter. NOTE: some of these details are obt…
|
CWE-89
SQL Injection
|
CVE-2011-5198
|
2024-11-21 10:33 |
2012-09-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
297068
|
- |
|
public_knowledge_project
|
open_harvester_systems
|
Cross-site request forgery (CSRF) vulnerability in index/manager/fileUpload in Public Knowledge Project Open Harvester Systems 2.3.1 and earlier allows remote attackers to hijack the authentication o…
|
CWE-352
Origin Validation Error
|
CVE-2011-5197
|
2024-11-21 10:33 |
2012-09-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
297069
|
- |
|
public_knowledge_project
|
open_journal_systems
|
Cross-site request forgery (CSRF) vulnerability in index/manager/fileUpload in Public Knowledge Project Open Journal Systems 2.3.6 and earlier allows remote attackers to hijack the authentication of …
|
CWE-352
Origin Validation Error
|
CVE-2011-5196
|
2024-11-21 10:33 |
2012-09-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
297070
|
- |
|
public_knowledge_project
|
open_conference_systems
|
Cross-site request forgery (CSRF) vulnerability in index/manager/fileUpload in Public Knowledge Project Open Conference Systems 2.3.4 and earlier allows remote attackers to hijack the authentication …
|
CWE-352
Origin Validation Error
|
CVE-2011-5195
|
2024-11-21 10:33 |
2012-09-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|