|
298111
|
- |
|
novell
|
zenworks_configuration_management
|
Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management (ZCM) 10 before 10.3 allows remote attackers to execute arbitrary cod…
|
CWE-22
Path Traversal
|
CVE-2010-5323
|
2024-11-21 10:23 |
2015-06-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298112
|
- |
|
ajsquare
|
zeuscart
|
Cross-site scripting (XSS) vulnerability in ZeusCart 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter in a search action to index.php.
|
CWE-79
Cross-site Scripting
|
CVE-2010-5322
|
2024-11-21 10:23 |
2015-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298113
|
- |
|
memht
|
memht_portal
|
Multiple cross-site request forgery (CSRF) vulnerabilities in MemHT Portal 4.0.1 allow remote attackers to hijack the authentication of administrators for requests that (1) modify settings via a conf…
|
CWE-352
Origin Validation Error
|
CVE-2010-5320
|
2024-11-21 10:23 |
2015-01-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298114
|
- |
|
kan-studio
|
kandidat_cms
|
Multiple cross-site request forgery (CSRF) vulnerabilities in Kandidat CMS 1.4.2 allow remote attackers to hijack the authentication of administrators for requests that (1) modify settings via a vali…
|
CWE-352
Origin Validation Error
|
CVE-2010-5319
|
2024-11-21 10:23 |
2015-01-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298115
|
- |
|
basic-cms
|
sweetrice
|
The password-reset feature in as/index.php in SweetRice CMS before 0.6.7.1 allows remote attackers to modify the administrator's password by specifying the administrator's e-mail address in the email…
|
CWE-255
Credentials Management
|
CVE-2010-5318
|
2024-11-21 10:23 |
2015-01-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298116
|
- |
|
basic-cms
|
sweetrice
|
Multiple SQL injection vulnerabilities in index.php in SweetRice CMS before 0.6.7.1 allow remote attackers to execute arbitrary SQL commands via (1) the file_name parameter in an attachment action, (…
|
CWE-89
SQL Injection
|
CVE-2010-5317
|
2024-11-21 10:23 |
2015-01-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298117
|
- |
|
basic-cms
|
sweetrice
|
Cross-site scripting (XSS) vulnerability in as/index.php in SweetRice CMS before 0.6.7.1 allows remote attackers to inject arbitrary web script or HTML via a top_height cookie.
|
CWE-79
Cross-site Scripting
|
CVE-2010-5316
|
2024-11-21 10:23 |
2015-01-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298118
|
- |
|
chialab_\&_channelweb
|
bedita
|
Multiple cross-site request forgery (CSRF) vulnerabilities in BEdita before 3.1 allow remote attackers to hijack the authentication of administrators for requests that (1) create categories via a dat…
|
CWE-352
Origin Validation Error
|
CVE-2010-5315
|
2024-11-21 10:23 |
2015-01-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298119
|
- |
|
chialab_\&_channelweb
|
bedita
|
Cross-site scripting (XSS) vulnerability in controllers/home_controller.php in BEdita before 3.1 allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter to news/…
|
CWE-79
Cross-site Scripting
|
CVE-2010-5314
|
2024-11-21 10:23 |
2015-01-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298120
|
- |
|
linux
|
linux_kernel
|
Race condition in arch/x86/kvm/x86.c in the Linux kernel before 2.6.38 allows L2 guest OS users to cause a denial of service (L1 guest OS crash) via a crafted instruction that triggers an L2 emulatio…
|
CWE-362
Race Condition
|
CVE-2010-5313
|
2024-11-21 10:23 |
2014-11-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|