|
298531
|
- |
|
vwar
|
virtual_war
|
SQL injection vulnerability in article.php in Virtual War (aka VWar) 1.6.1 R2 allows remote attackers to execute arbitrary SQL commands via the ratearticleselect parameter.
|
CWE-89
SQL Injection
|
CVE-2010-5063
|
2024-11-21 10:22 |
2012-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298532
|
- |
|
modx
|
modx_revolution
|
Directory traversal vulnerability in manager/controllers/default/resource/tvs.php in MODx Revolution 2.0.2-pl, and possibly earlier, when magic_quotes_gpc is disabled, allows remote attackers to read…
|
CWE-22
Path Traversal
|
CVE-2010-5278
|
2024-11-21 10:22 |
2012-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298533
|
- |
|
karim_ratib
|
views_bulk_operations
|
Unspecified vulnerability in the Views Bulk Operations module 6 before 6.x-1.10 for Drupal allows remote authenticated users with user management permissions to bypass intended access restrictions an…
|
NVD-CWE-noinfo
|
CVE-2010-5277
|
2024-11-21 10:22 |
2012-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298534
|
- |
|
memcache_project
|
memcache
|
The Memcache module 5.x before 5.x-1.10 and 6.x before 6.x-1.6 for Drupal does not properly handle the $user object in memcache_admin, which might "lead to a role change not being recognized until th…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2010-5276
|
2024-11-21 10:22 |
2012-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298535
|
- |
|
memcache_project
|
memcache
|
Cross-site scripting (XSS) vulnerability in memcache_admin in the Memcache module 5.x before 5.x-1.10 and 6.x before 6.x-1.6 for Drupal allows remote attackers to inject arbitrary web script or HTML …
|
CWE-79
Cross-site Scripting
|
CVE-2010-5275
|
2024-11-21 10:22 |
2012-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298536
|
- |
|
silverstripe
|
silverstripe
|
SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4 uses weak entropy when generating tokens for (1) the CSRF protection mechanism, (2) autologin, (3) "forgot password" functionality, and (4) pas…
|
CWE-310
Cryptographic Issues
|
CVE-2010-5079
|
2024-11-21 10:22 |
2012-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298537
|
- |
|
silverstripe
|
silverstripe
|
SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain version information v…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2010-5078
|
2024-11-21 10:22 |
2012-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298538
|
- |
|
wordpress
|
wordpress
|
The XML-RPC remote publishing interface in xmlrpc.php in WordPress before 3.0.3 does not properly check capabilities, which allows remote authenticated users to bypass intended access restrictions, a…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2010-5106
|
2024-11-21 10:22 |
2012-09-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298539
|
- |
|
pkware
|
pkzip
|
Untrusted search path vulnerability in PKZIP before 12.50.0014 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a director…
|
NVD-CWE-Other
|
CVE-2010-5274
|
2024-11-21 10:22 |
2012-09-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298540
|
- |
|
altova
|
diffdog_2011
|
Untrusted search path vulnerability in Altova DiffDog 2011 Enterprise Edition SP1 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonst…
|
NVD-CWE-Other
|
CVE-2010-5273
|
2024-11-21 10:22 |
2012-09-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|