|
294571
|
- |
|
spamtitan
|
webtitan
|
The (1) Traceroute and (2) Ping implementations in tools.php in SpamTitan WebTitan before 3.60 allow remote authenticated users to execute arbitrary commands via shell metacharacters in an argument, …
|
CWE-94
Code Injection
|
CVE-2011-4639
|
2024-11-21 10:32 |
2012-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
294572
|
- |
|
spamtitan
|
webtitan
|
Multiple SQL injection vulnerabilities in SpamTitan WebTitan before 3.60 allow remote attackers to execute arbitrary SQL commands via (1) the username parameter to login-x.php, and allow remote authe…
|
CWE-89
SQL Injection
|
CVE-2011-4638
|
2024-11-21 10:32 |
2012-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
294573
|
- |
|
frii
|
proc\
|
ProcessTable.pm in the Proc::ProcessTable module 0.45 for Perl, when TTY information caching is enabled, allows local users to overwrite arbitrary files via a symlink attack on /tmp/TTYDEVS.
|
CWE-59
Link Following
|
CVE-2011-4363
|
2024-11-21 10:32 |
2012-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
294574
|
- |
|
tiki
|
tikiwiki_cms\/groupware
|
Cross-site scripting (XSS) vulnerability in tiki-cookie-jar.php in TikiWiki CMS/Groupware before 8.2 and LTS before 6.5 allows remote attackers to inject arbitrary web script or HTML via arbitrary pa…
|
CWE-79
Cross-site Scripting
|
CVE-2011-4551
|
2024-11-21 10:32 |
2012-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
294575
|
- |
|
rsyslog
|
rsyslog
|
Integer overflow in the rsCStrExtendBuf function in runtime/stringbuf.c in the imfile module in rsyslog 4.x before 4.6.6, 5.x before 5.7.4, and 6.x before 6.1.4 allows local users to cause a denial o…
|
CWE-189
Numeric Errors
|
CVE-2011-4623
|
2024-11-21 10:32 |
2012-09-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
294576
|
- |
|
wikkawiki
|
wikkawiki
|
Cross-site request forgery (CSRF) vulnerability in the AdminUsers component in WikkaWiki 1.3.1 and 1.3.2 allows remote attackers to hijack the authentication of administrators for requests that remov…
|
CWE-352
Origin Validation Error
|
CVE-2011-4452
|
2024-11-21 10:32 |
2012-09-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
294577
|
- |
|
wikkawiki
|
wikkawiki
|
libs/Wakka.class.php in WikkaWiki 1.3.1 and 1.3.2, when the spam_logging option is enabled, allows remote attackers to write arbitrary PHP code to the spamlog_path file via the User-Agent HTTP header…
|
NVD-CWE-noinfo
|
CVE-2011-4451
|
2024-11-21 10:32 |
2012-09-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
294578
|
- |
|
wikkawiki
|
wikkawiki
|
Directory traversal vulnerability in handlers/files.xml/files.xml.php in WikkaWiki 1.3.1 and 1.3.2 allows remote attackers to read or delete arbitrary files via a non-initial .. (dot dot) in the file…
|
CWE-22
Path Traversal
|
CVE-2011-4450
|
2024-11-21 10:32 |
2012-09-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
294579
|
- |
|
wikkawiki
|
wikkawiki
|
actions/files/files.php in WikkaWiki 1.3.1 and 1.3.2, when INTRANET_MODE is enabled, supports file uploads for file extensions that are typically absent from an Apache HTTP Server TypesConfig file, w…
|
NVD-CWE-noinfo
|
CVE-2011-4449
|
2024-11-21 10:32 |
2012-09-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
294580
|
- |
|
wikkawiki
|
wikkawiki
|
SQL injection vulnerability in actions/usersettings/usersettings.php in WikkaWiki 1.3.1 and 1.3.2 allows remote attackers to execute arbitrary SQL commands via the default_comment_display parameter i…
|
CWE-89
SQL Injection
|
CVE-2011-4448
|
2024-11-21 10:32 |
2012-09-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|