|
271981
|
- |
|
mybb
|
mybb
|
Cross-site request forgery (CSRF) vulnerability in the Admin Control Panel (ACP) login in MyBB (aka MyBulletinBoard) before 1.8.4 allows remote attackers to hijack the authentication of unspecified v…
|
CWE-352
Origin Validation Error
|
CVE-2015-2334
|
2024-11-21 11:27 |
2015-03-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271982
|
- |
|
mybb
|
mybb
|
Cross-site scripting (XSS) vulnerability in the MyCode editor in MyBB (aka MyBulletinBoard) before 1.8.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
CWE-79
Cross-site Scripting
|
CVE-2015-2333
|
2024-11-21 11:27 |
2015-03-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271983
|
- |
|
mybb
|
mybb
|
Cross-site scripting (XSS) vulnerability in member.php in MyBB (aka MyBulletinBoard) before 1.8.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
CWE-79
Cross-site Scripting
|
CVE-2015-2332
|
2024-11-21 11:27 |
2015-03-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271984
|
- |
|
wpml
|
wpml
|
Cross-site scripting (XSS) vulnerability in the WPML plugin before 3.1.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the target parameter in a reminder_popup acti…
|
CWE-79
Cross-site Scripting
|
CVE-2015-2315
|
2024-11-21 11:27 |
2015-03-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271985
|
- |
|
wpml
|
wpml
|
SQL injection vulnerability in the WPML plugin before 3.1.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the lang parameter in the HTTP Referer header in a wp-link-ajax…
|
CWE-89
SQL Injection
|
CVE-2015-2314
|
2024-11-21 11:27 |
2015-03-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271986
|
- |
|
yoast
|
wordpress_seo
|
Multiple cross-site request forgery (CSRF) vulnerabilities in admin/class-bulk-editor-list-table.php in the WordPress SEO by Yoast plugin before 1.5.7, 1.6.x before 1.6.4, and 1.7.x before 1.7.4 for …
|
CWE-352
Origin Validation Error
|
CVE-2015-2293
|
2024-11-21 11:27 |
2015-03-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271987
|
- |
|
yoast
|
wordpress_seo
|
Multiple SQL injection vulnerabilities in admin/class-bulk-editor-list-table.php in the WordPress SEO by Yoast plugin before 1.5.7, 1.6.x before 1.6.4, and 1.7.x before 1.7.4 for WordPress allow remo…
|
CWE-89
SQL Injection
|
CVE-2015-2292
|
2024-11-21 11:27 |
2015-03-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271988
|
- |
|
libarchive canonical opensuse
|
libarchive ubuntu_linux opensuse
|
Absolute path traversal vulnerability in bsdcpio in libarchive 3.1.2 and earlier allows remote attackers to write to arbitrary files via a full pathname in an archive.
|
CWE-22
Path Traversal
|
CVE-2015-2304
|
2024-11-21 11:27 |
2015-03-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271989
|
- |
|
telerik
|
analytics_monitor_library
|
Multiple untrusted search path vulnerabilities in (1) EQATEC.Analytics.Monitor.Win32_vc100.dll and (2) EQATEC.Analytics.Monitor.Win32_vc100-x64.dll in Telerik Analytics Monitor Library before 3.2.125…
|
NVD-CWE-Other
|
CVE-2015-2264
|
2024-11-21 11:27 |
2015-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271990
|
- |
|
wotlab
|
community_gallery
|
Cross-site scripting (XSS) vulnerability in WoltLab Community Gallery 2.0 before 2014-12-26 allows remote attackers to inject arbitrary web script or HTML via the parameters[data][7][title] parameter…
|
CWE-79
Cross-site Scripting
|
CVE-2015-2275
|
2024-11-21 11:27 |
2015-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|