| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2010-2013 | 4.3 | Cross-site scripting (XSS) vulnerability in cp/edit_email.php in LiSK CMS 4.4 allows remote attackers to inject arbitrary web script or HTML via the id parameter. | 2018-10-10 19:58:00 | 2010-05-24 17:30:00 |
| CVE-2010-2007 | 6.8 | Multiple cross-site request forgery (CSRF) vulnerabilities in LetoDMS (formerly MyDMS) 1.7.2 and earlier allow remote attackers to hijack the authentication of administrators for requests that use (1) op/op.EditUserData.php, (2) op/op.UsrMgr.php, (3) | 2018-10-10 19:58:00 | 2010-05-20 21:30:00 |
| CVE-2010-2006 | 6.5 | Directory traversal vulnerability in op/op.Login.php in LetoDMS (formerly MyDMS) 1.7.2 and earlier allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the lang parameter. | 2018-10-10 19:58:00 | 2010-05-20 21:30:00 |
| CVE-2010-2003 | 4.3 | Cross-site scripting (XSS) vulnerability in misc/get_admin.php in Advanced Poll 2.08 allows remote attackers to inject arbitrary web script or HTML via the mysql_host parameter. | 2018-10-10 19:58:00 | 2010-05-20 17:30:00 |
| CVE-2010-1997 | 2.1 | Cross-site scripting (XSS) vulnerability in admin/edit.php in Saurus CMS 4.7.0 allows remote authenticated users, with "Article list" edit privileges, to inject arbitrary web script or HTML via the pealkiri parameter. | 2018-10-10 19:58:00 | 2010-05-20 17:30:00 |
| CVE-2010-1995 | 2.1 | Multiple cross-site scripting (XSS) vulnerabilities in index.php in TomatoCMS before 2.0.5 allow remote authenticated users, with "Add new article" privileges, to inject arbitrary web script or HTML via the (1) title, (2) subTitle, and (3) author par | 2018-10-10 19:58:00 | 2010-05-20 17:30:00 |
| CVE-2010-1994 | 7.5 | SQL injection vulnerability in index.php in TomatoCMS before 2.0.5 allows remote attackers to execute arbitrary SQL commands via the q parameter in conjunction with a /news/search PATH_INFO. | 2018-10-10 19:58:00 | 2010-05-20 17:30:00 |
| CVE-2010-1993 | 5.0 | Opera 9.52 does not properly handle an IFRAME element with a mailto: URL in its SRC attribute, which allows remote attackers to cause a denial of service (resource consumption) via an HTML document with many IFRAME elements. | 2018-10-10 19:58:00 | 2010-05-20 17:30:00 |
| CVE-2010-1992 | 5.0 | Google Chrome 1.0.154.48 executes a mail application in situations where an IFRAME element has a mailto: URL in its SRC attribute, which allows remote attackers to cause a denial of service (excessive application launches) via an HTML document with m | 2018-10-10 19:58:00 | 2010-05-20 17:30:00 |
| CVE-2010-1990 | 5.0 | Mozilla Firefox 3.6.x, 3.5.x, 3.0.19, and earlier, and SeaMonkey, executes a mail application in situations where an IFRAME element has a mailto: URL in its SRC attribute, which allows remote attackers to cause a denial of service (excessive applicat | 2018-10-10 19:58:00 | 2010-05-20 17:30:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: