|
298691
|
- |
|
typo3
|
typo3
|
SQL injection vulnerability in the list module in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allows remote authenticated users with certain permissions to execute arbitrary…
|
CWE-89
SQL Injection
|
CVE-2010-5103
|
2024-11-21 10:22 |
2012-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298692
|
- |
|
typo3
|
typo3
|
Directory traversal vulnerability in mod/tools/em/class.em_unzip.php in the unzip library in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allows remote attackers to write arb…
|
CWE-22
Path Traversal
|
CVE-2010-5102
|
2024-11-21 10:22 |
2012-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298693
|
- |
|
typo3
|
typo3
|
Directory traversal vulnerability in the TypoScript setup in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allows remote authenticated administrators to read arbitrary files v…
|
CWE-22
Path Traversal
|
CVE-2010-5101
|
2024-11-21 10:22 |
2012-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298694
|
- |
|
typo3
|
typo3
|
Multiple cross-site scripting (XSS) vulnerabilities in the Install Tool in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allow remote authenticated users to inject arbitrary w…
|
CWE-79
Cross-site Scripting
|
CVE-2010-5100
|
2024-11-21 10:22 |
2012-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298695
|
- |
|
typo3
|
typo3
|
Cross-site scripting (XSS) vulnerability in the FORM content object in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5, allows remote authenticated users to inject arbitrary web…
|
CWE-79
Cross-site Scripting
|
CVE-2010-5098
|
2024-11-21 10:22 |
2012-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298696
|
- |
|
typo3
|
typo3
|
Cross-site scripting (XSS) vulnerability in the click enlarge functionality in TYPO3 4.3.x before 4.3.9 and 4.4.x before 4.4.5 when the caching framework is enabled, allows remote attackers to inject…
|
CWE-79
Cross-site Scripting
|
CVE-2010-5097
|
2024-11-21 10:22 |
2012-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298697
|
- |
|
bitweaver
|
bitweaver
|
Directory traversal vulnerability in wiki/rankings.php in Bitweaver 2.7 and 2.8.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the style parameter.
|
CWE-22
Path Traversal
|
CVE-2010-5086
|
2024-11-21 10:22 |
2012-03-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298698
|
- |
|
hulihanapplications
|
amethyst
|
Multiple cross-site request forgery (CSRF) vulnerabilities in admin/update_user in Hulihan Amethyst 0.1.5, and possibly earlier, allow remote attackers to hijack the authentication of administrators …
|
CWE-352
Origin Validation Error
|
CVE-2010-5085
|
2024-11-21 10:22 |
2012-02-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298699
|
- |
|
e107
|
e107
|
The cross-site request forgery (CSRF) protection mechanism in e107 before 0.7.23 uses a predictable random token based on the creation date of the administrator account, which allows remote attackers…
|
CWE-352
Origin Validation Error
|
CVE-2010-5084
|
2024-11-21 10:22 |
2012-02-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298700
|
- |
|
phpnuke
|
web_links_module php-nuke
|
SQL injection vulnerability in the Web_Links module for PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL commands via the url parameter in an Add action to modules.php.
|
CWE-89
SQL Injection
|
CVE-2010-5083
|
2024-11-21 10:22 |
2012-02-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|