| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2009-4925 | 6.8 | Multiple SQL injection vulnerabilities in Portale e-commerce Creasito (aka creasito e-commerce content manager) 1.3.16, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the username parameter to (1) admi | 2018-10-10 19:49:00 | 2010-07-12 13:27:00 |
| CVE-2009-4890 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in the login application in vBook 4.2.17 allow remote attackers to inject arbitrary web script or HTML via the (1) title and (2) message parameters. | 2018-10-10 19:49:00 | 2010-06-11 14:30:00 |
| CVE-2009-4886 | 5.0 | Multiple directory traversal vulnerabilities in phpCommunity 2 2.1.8 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) file parameter to module/admin/files/show_file.php and the (2) path parameter to module/admin/files/show | 2018-10-10 19:49:00 | 2010-06-11 14:30:00 |
| CVE-2009-4885 | 4.3 | Cross-site scripting (XSS) vulnerability in templates/1/login.php in phpCommunity 2 2.1.8 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. | 2018-10-10 19:49:00 | 2010-06-11 14:30:00 |
| CVE-2009-4884 | 6.8 | Multiple SQL injection vulnerabilities in phpCommunity 2 2.1.8, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via (1) the forum_id parameter in a forum action to index.php, (2) the topic_id parameter in a | 2018-10-10 19:49:00 | 2010-06-11 14:30:00 |
| CVE-2009-4849 | 6.8 | Multiple cross-site request forgery (CSRF) vulnerabilities in ToutVirtual VirtualIQ Pro 3.2 build 7882 and 3.5 build 8691 allow remote attackers to hijack the authentication of administrators for requests that (1) create a new user account via a save | 2018-10-10 19:49:00 | 2010-05-07 18:30:00 |
| CVE-2009-4848 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in ToutVirtual VirtualIQ Pro 3.2 build 7882 and 3.5 build 8691 allow remote attackers to inject arbitrary web script or HTML via the (1) userId parameter to tvserver/server/user/setPermissions.jsp, | 2018-10-10 19:49:00 | 2010-05-07 18:30:00 |
| CVE-2009-4845 | 5.0 | The configuration page in ToutVirtual VirtualIQ Pro 3.2 build 7882 contains cleartext SSH credentials, which allows remote attackers to obtain sensitive information by reading the username and password fields. | 2018-10-10 19:49:00 | 2010-05-07 18:24:00 |
| CVE-2009-4844 | 5.0 | ToutVirtual VirtualIQ Pro 3.2 build 7882 does not restrict access to the /status URI on port 9080, which allows remote attackers to obtain sensitive Tomcat information via a direct request. | 2018-10-10 19:49:00 | 2010-05-07 18:24:00 |
| CVE-2009-4843 | 7.5 | ToutVirtual VirtualIQ Pro before 3.5 build 8691 does not require administrative authentication for JBoss console access, which allows remote attackers to execute arbitrary commands via requests to (1) the JMX Management Console or (2) the Web Console | 2018-10-10 19:49:00 | 2010-05-07 18:24:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: