| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2010-2695 | 6.5 | Directory traversal vulnerability in the SFTP/SSH2 virtual server in Xlight FTP Server 3.5.0, 3.5.5, and possibly other versions before 3.6 allows remote authenticated users to read, overwrite, or delete arbitrary files via .. (dot dot) sequences in | 2018-10-10 19:59:00 | 2010-07-12 17:30:00 |
| CVE-2010-2686 | 7.5 | Multiple SQL injection vulnerabilities in clientes.asp in the TopManage OLK module 1.91.30 for SAP allow remote attackers to execute arbitrary SQL commands via the (1) PriceFrom, (2) PriceTo, and (3) InvFrom parameters, as reachable from olk/c_p/sear | 2018-10-10 19:59:00 | 2010-07-12 13:27:00 |
| CVE-2010-2679 | 7.5 | SQL injection vulnerability in the Weblinks (com_weblinks) component in Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to index.php. | 2018-10-10 19:59:00 | 2010-07-08 22:30:00 |
| CVE-2010-2678 | 7.5 | SQL injection vulnerability in xmap (com_xmap) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php. | 2018-10-10 19:59:00 | 2010-07-08 22:30:00 |
| CVE-2010-2668 | 6.4 | Unspecified vulnerability in Adaptive Micro Systems ALPHA Ethernet Adapter II Web-Manager 3.40.2 allows remote attackers to bypass authentication and read or write configuration files via unknown vectors. | 2018-10-10 19:59:00 | 2010-07-08 22:30:00 |
| CVE-2010-2629 | 7.5 | The Cisco Content Services Switch (CSS) 11500 with software 8.20.4.02 and the Application Control Engine (ACE) 4710 with software A2(3.0) do not properly handle LF header terminators in situations where the GET line is terminated by CRLF, which allow | 2018-10-10 19:59:00 | 2010-07-06 17:17:00 |
| CVE-2010-2251 | 7.5 | The get1 command, as used by lftpget, in LFTP before 4.0.6 does not properly validate a server-provided filename before determining the destination filename of a download, which allows remote servers to create or overwrite arbitrary files via a Conte | 2018-10-10 19:59:00 | 2010-07-06 17:17:00 |
| CVE-2010-2624 | 7.5 | Multiple SQL injection vulnerabilities in iScripts EasySnaps 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) comment parameter to add_comments.php, (2) values parameter to tags_details.php, or (3) begin parameter to greetings | 2018-10-10 19:59:00 | 2010-07-02 20:30:00 |
| CVE-2010-2615 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in admin/admin.php in Grafik CMS 1.1.2, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) page_menu and (2) description parameters in an edit_page actio | 2018-10-10 19:59:00 | 2010-07-02 12:44:00 |
| CVE-2010-2614 | 7.5 | SQL injection vulnerability in admin/admin.php in Grafik CMS 1.1.2, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit_page action. | 2018-10-10 19:59:00 | 2010-07-02 12:44:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: