|
299501
|
- |
|
brunetton
|
littlephpgallery
|
Directory traversal vulnerability in gallery.php in Brunetton LittlePhpGallery 1.0.2, when magic_quotes_gpc is disabled, allows remote attackers to list, include, and execute arbitrary local files vi…
|
CWE-22
Path Traversal
|
CVE-2010-4406
|
2024-11-21 10:20 |
2010-12-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
299502
|
- |
|
anything-digital
|
sh404sef
|
Cross-site scripting (XSS) vulnerability in the Yannick Gaultier sh404SEF component before 2.1.8.777 for Joomla! allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
CWE-79
Cross-site Scripting
|
CVE-2010-4405
|
2024-11-21 10:20 |
2010-12-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
299503
|
- |
|
anything-digital
|
sh404sef
|
SQL injection vulnerability in the Yannick Gaultier sh404SEF component before 2.1.8.777 for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
|
CWE-89
SQL Injection
|
CVE-2010-4404
|
2024-11-21 10:20 |
2010-12-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
299504
|
- |
|
devbits
|
register-plus
|
The Register Plus plugin 3.5.1 and earlier for WordPress allows remote attackers to obtain sensitive information via a direct request to (1) dash_widget.php and (2) register-plus.php, which reveals t…
|
CWE-200
Information Exposure
|
CVE-2010-4403
|
2024-11-21 10:20 |
2010-12-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
299505
|
- |
|
devbits
|
register-plus
|
Multiple cross-site scripting (XSS) vulnerabilities in wp-login.php in the Register Plus plugin 3.5.1 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (…
|
CWE-79
Cross-site Scripting
|
CVE-2010-4402
|
2024-11-21 10:20 |
2010-12-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
299506
|
- |
|
dynpg
|
dynpg
|
languages.inc.php in DynPG CMS 4.2.0 allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message.
|
CWE-200
Information Exposure
|
CVE-2010-4401
|
2024-11-21 10:20 |
2010-12-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
299507
|
- |
|
dynpg
|
dynpg
|
SQL injection vulnerability in _rights.php in DynPG CMS 4.2.0 allows remote attackers to execute arbitrary SQL commands via the giveRights_UserId parameter.
|
CWE-89
SQL Injection
|
CVE-2010-4400
|
2024-11-21 10:20 |
2010-12-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
299508
|
- |
|
dynpg
|
dynpg
|
Directory traversal vulnerability in languages.inc.php in DynPG CMS 4.1.1 and 4.2.0, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the CHG_D…
|
CWE-22
Path Traversal
|
CVE-2010-4399
|
2024-11-21 10:20 |
2010-12-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
299509
|
- |
|
novo-ws
|
orbis_cms
|
Unrestricted file upload vulnerability in fileman_file_upload.php in Orbis CMS 1.0.2 allows remote authenticated users to execute arbitrary code by uploading a .php file, and then accessing it via a …
|
NVD-CWE-Other
|
CVE-2010-4313
|
2024-11-21 10:20 |
2010-12-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
299510
|
- |
|
artica
|
pandora_fms
|
PHP remote file inclusion vulnerability in extras/pandora_diag.php in Pandora FMS before 3.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the argv[1] parameter.
|
CWE-94
Code Injection
|
CVE-2010-4283
|
2024-11-21 10:20 |
2010-12-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|