|
298791
|
- |
|
bluecoat
|
sgos proxysg proxysg_sg210-10 proxysg_sg210-25 proxysg_sg210-5 proxysg_sg510-10 proxysg_sg510-20 proxysg_sg510-25 proxysg_sg510-5 proxysg_sg810-10 proxysg_sg810-20 pr…
|
The Active Content Transformation functionality in Blue Coat ProxySG before SGOS 4.3.4.2, 5.x before SGOS 5.4.5.1, 5.5 before SGOS 5.5.4.1, and 6.x before SGOS 6.1.2.1 allows remote attackers to bypa…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2010-5190
|
2024-11-21 10:22 |
2012-08-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298792
|
- |
|
bluecoat
|
sgos proxysg proxysg_sg210-10 proxysg_sg210-25 proxysg_sg210-5 proxysg_sg510-10 proxysg_sg510-20 proxysg_sg510-25 proxysg_sg510-5 proxysg_sg810-10 proxysg_sg810-20 pr…
|
Blue Coat ProxySG before SGOS 4.3.4.1, 5.x before SGOS 5.4.5.1, 5.5 before SGOS 5.5.4.1, and 6.x before SGOS 6.1.1.1 allows remote authenticated users to execute arbitrary CLI commands by leveraging …
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2010-5189
|
2024-11-21 10:22 |
2012-08-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298793
|
- |
|
silverstripe
|
silverstripe
|
SilverStripe 2.3.x before 2.3.6 allows remote attackers to obtain sensitive information via the (1) debug_memory parameter to core/control/Director.php or (2) debug_profile parameter to main.php.
|
CWE-200
Information Exposure
|
CVE-2010-5188
|
2024-11-21 10:22 |
2012-08-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298794
|
- |
|
silverstripe
|
silverstripe
|
SilverStripe 2.3.x before 2.3.8 and 2.4.x before 2.4.1, when running on servers with certain configurations, allows remote attackers to obtain sensitive information via a direct request to PHP files …
|
CWE-200
Information Exposure
|
CVE-2010-5187
|
2024-11-21 10:22 |
2012-08-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298795
|
- |
|
silverstripe
|
silverstripe
|
Cross-site scripting (XSS) vulnerability in SilverStripe 2.3.x before 2.3.6 allows remote attackers to inject arbitrary web script or HTML via vectors related to DataObjectSet pagination.
|
CWE-79
Cross-site Scripting
|
CVE-2010-5095
|
2024-11-21 10:22 |
2012-08-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298796
|
- |
|
silverstripe
|
silverstripe
|
The deleteinstallfiles function in control/ContentController.php in SilverStripe 2.3.x before 2.3.7 does not require ADMIN permissions, which allows remote attackers to delete index.php and "disrupt …
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2010-5094
|
2024-11-21 10:22 |
2012-08-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298797
|
- |
|
silverstripe
|
silverstripe
|
Member_ProfileForm in security/Member.php in SilverStripe 2.3.x before 2.3.7 allows remote attackers to hijack user accounts by saving data using the email address (ID) of another user.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2010-5093
|
2024-11-21 10:22 |
2012-08-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298798
|
- |
|
silverstripe
|
silverstripe
|
The Add Member dialog in the Security admin page in SilverStripe 2.4.0 saves user passwords in plaintext, which allows local users to obtain sensitive information by reading a database.
|
CWE-255
Credentials Management
|
CVE-2010-5092
|
2024-11-21 10:22 |
2012-08-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298799
|
- |
|
silverstripe
|
silverstripe
|
The setName function in filesystem/File.php in SilverStripe 2.3.x before 2.3.8 and 2.4.x before 2.4.1 allows remote authenticated users with CMS author privileges to execute arbitrary PHP code by cha…
|
CWE-94
Code Injection
|
CVE-2010-5091
|
2024-11-21 10:22 |
2012-08-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298800
|
- |
|
silverstripe
|
silverstripe
|
SilverStripe before 2.4.2 allows remote authenticated users to change administrator passwords via vectors related to admin/security.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2010-5090
|
2024-11-21 10:22 |
2012-08-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|