|
298981
|
- |
|
6kbbs
|
6kbbs
|
Multiple SQL injection vulnerabilities in 6kbbs 8.0 build 20100901 allow remote attackers to execute arbitrary SQL commands via the (1) tids[] parameter to ajaxadmin.php and the (2) msgids[] paramete…
|
CWE-89
SQL Injection
|
CVE-2010-4812
|
2024-11-21 10:21 |
2011-07-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298982
|
- |
|
6kbbs
|
6kbbs
|
Multiple cross-site scripting (XSS) vulnerabilities in ajaxmember.php in 6kbbs 8.0 build 20100901 allow remote attackers to inject arbitrary web script or HTML via the (1) user[msn], (2) user[email],…
|
CWE-79
Cross-site Scripting
|
CVE-2010-4811
|
2024-11-21 10:21 |
2011-07-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298983
|
- |
|
awcm-cms
|
ar_web_content_manager
|
Multiple PHP remote file inclusion vulnerabilities in AR Web Content Manager (AWCM) 2.1 final allow remote attackers to execute arbitrary PHP code via a URL in the theme_file parameter to (1) include…
|
CWE-94
Code Injection
|
CVE-2010-4810
|
2024-11-21 10:21 |
2011-07-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298984
|
- |
|
liberologico
|
dbsite
|
SQL injection vulnerability in index.php in DBSite 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter.
|
CWE-89
SQL Injection
|
CVE-2010-4809
|
2024-11-21 10:21 |
2011-07-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298985
|
- |
|
valarsoft
|
webmatic
|
SQL injection vulnerability in index.php in Webmatic allows remote attackers to execute arbitrary SQL commands via the p parameter.
|
CWE-89
SQL Injection
|
CVE-2010-4808
|
2024-11-21 10:21 |
2011-07-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298986
|
- |
|
coppermine-gallery
|
coppermine_photo_gallery
|
Cross-site scripting (XSS) vulnerability in Coppermine Photo Gallery (CPG) before 1.4.27 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
CWE-79
Cross-site Scripting
|
CVE-2010-4667
|
2024-11-21 10:21 |
2011-06-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298987
|
- |
|
google
|
android
|
The Android browser in Android before 2.3.4 allows remote attackers to obtain SD card contents via crafted content:// URIs, related to (1) BrowserActivity.java and (2) BrowserSettings.java in com/and…
|
CWE-200
Information Exposure
|
CVE-2010-4804
|
2024-11-21 10:21 |
2011-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298988
|
- |
|
cmsmadesimple
|
cms_made_simple
|
Unspecified vulnerability in the News module in CMS Made Simple (CMSMS) before 1.9.1 has unknown impact and attack vectors.
|
NVD-CWE-noinfo
|
CVE-2010-4663
|
2024-11-21 10:21 |
2011-06-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298989
|
- |
|
ibm
|
web_content_manager
|
Race condition in IBM Web Content Manager (WCM) 7.0.0.1 before CF003 allows remote authenticated users to cause a denial of service (infinite recursive query) via unspecified vectors, related to a St…
|
CWE-362
Race Condition
|
CVE-2010-4807
|
2024-11-21 10:21 |
2011-05-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298990
|
- |
|
ibm
|
web_content_manager
|
The authoring tool in IBM Web Content Manager (WCM) 6.1.5, and 7.0.0.1 before CF003, allows remote authenticated users to bypass intended access restrictions on draft creation by leveraging certain r…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2010-4806
|
2024-11-21 10:21 |
2011-05-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|