|
303581
|
- |
|
atutor
|
acollab
|
AdPeeps 8.5d1 has a default password of admin for the admin account, which makes it easier for remote attackers to obtain access via requests to index.php.
|
CWE-255
Credentials Management
|
CVE-2009-4945
|
2024-11-21 10:10 |
2010-07-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
303582
|
- |
|
atutor
|
acollab
|
Multiple cross-site scripting (XSS) vulnerabilities in ATRC ACollab 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) address parameter to profile.php or the (2) descripti…
|
CWE-79
Cross-site Scripting
|
CVE-2009-4944
|
2024-11-21 10:10 |
2010-07-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
303583
|
- |
|
impactsoftcompany
|
adpeeps
|
index.php in AdPeeps 8.5d1 allows remote attackers to obtain sensitive information via (1) a view_adrates action with an invalid uid parameter, which reveals the installation path in an error message…
|
CWE-200
Information Exposure
|
CVE-2009-4943
|
2024-11-21 10:10 |
2010-07-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
303584
|
- |
|
atutor
|
acollab
|
Cross-site request forgery (CSRF) vulnerability in ACollab 1.2 allows remote attackers to hijack the authentication of arbitrary users for requests that add personal agenda items.
|
CWE-352
Origin Validation Error
|
CVE-2009-4942
|
2024-11-21 10:10 |
2010-07-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
303585
|
- |
|
atutor
|
acollab
|
Cross-site scripting (XSS) vulnerability in sign_in.php in ATRC ACollab 1.2 allows remote attackers to inject arbitrary web script or HTML via the f parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2009-4941
|
2024-11-21 10:10 |
2010-07-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
303586
|
- |
|
zeuscart
|
zeuscart
|
SQL injection vulnerability in index.php in Zeus Cart 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the maincatid parameter in a showmaincatlanding action.
|
CWE-89
SQL Injection
|
CVE-2009-4940
|
2024-11-21 10:10 |
2010-07-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
303587
|
- |
|
impactsoftcompany
|
adpeeps
|
Multiple cross-site scripting (XSS) vulnerabilities in index.php in AdPeeps 8.5d1 allow remote attackers to inject arbitrary web script or HTML via the (1) uid parameter, (2) uid parameter in a login…
|
CWE-79
Cross-site Scripting
|
CVE-2009-4939
|
2024-11-21 10:10 |
2010-07-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
303588
|
- |
|
warphd
|
com_jvideo
|
SQL injection vulnerability in the JVideo! (com_jvideo) component 0.3.11c Beta and 0.3.x for Joomla! allows remote attackers to execute arbitrary SQL commands via the user_id parameter in a user acti…
|
CWE-89
SQL Injection
|
CVE-2009-4938
|
2024-11-21 10:10 |
2010-07-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
303589
|
- |
|
spirate
|
small_pirate
|
Cross-site scripting (XSS) vulnerability in Small Pirate (SPirate) 2.1 allows remote attackers to inject arbitrary web script or HTML via an onmouseover action in an img BBCode tag within a url BBCod…
|
CWE-79
Cross-site Scripting
|
CVE-2009-4937
|
2024-11-21 10:10 |
2010-07-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
303590
|
- |
|
spirate
|
small_pirate
|
Multiple SQL injection vulnerabilities in Small Pirate (SPirate) 2.1 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to the default URI in an rss .xml action, or the…
|
CWE-89
SQL Injection
|
CVE-2009-4936
|
2024-11-21 10:10 |
2010-07-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|