| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2009-4805 | 6.8 | Multiple SQL injection vulnerabilities in EZ-Blog Beta 1, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via (1) the storyid parameter to public/view.php or (2) the kill parameter to admin/remove.php. | 2018-10-10 19:49:00 | 2010-04-23 14:30:00 |
| CVE-2009-4801 | 7.5 | EZ-Blog Beta 1 does not require authentication, which allows remote attackers to create or delete arbitrary posts via requests to PHP scripts. | 2018-10-10 19:49:00 | 2010-04-23 14:30:00 |
| CVE-2009-4796 | 7.5 | Multiple SQL injection vulnerabilities in the ExecuteQueries function in private/system/classes/listfactory.class.php in glFusion 1.1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) order and (2) direction parameter | 2018-10-10 19:49:00 | 2010-04-22 14:30:00 |
| CVE-2009-4794 | 7.5 | Multiple SQL injection vulnerabilities in Community CMS 0.5 allow remote attackers to execute arbitrary SQL commands via the (1) article_id parameter to view.php and the (2) a parameter in an event action to calendar.php, reachable through index.php. | 2018-10-10 19:49:00 | 2010-04-22 14:30:00 |
| CVE-2009-4791 | 7.5 | Multiple SQL injection vulnerabilities in Family Connections (aka FCMS) before 1.8.2 allow remote attackers to execute arbitrary SQL commands via the (1) letter parameter to addressbook.php, (2) id parameter to recipes.php, (3) year parameter to regi | 2018-10-10 19:49:00 | 2010-04-22 14:30:00 |
| CVE-2009-4783 | 7.5 | Multiple SQL injection vulnerabilities in Theeta CMS, possibly 0.01, allow remote attackers to execute arbitrary SQL commands via the start parameter to (1) forum.php and (2) thread.php in community/, and (3) blog/index.php. | 2018-10-10 19:49:00 | 2010-04-21 14:30:00 |
| CVE-2009-4782 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in Theeta CMS, possibly 0.01, allow remote attackers to inject arbitrary web script or HTML via the (1) start, (2) forum, and (3) cat parameters to community/thread.php; (4) start and (5) cat parame | 2018-10-10 19:49:00 | 2010-04-21 14:30:00 |
| CVE-2009-4511 | 4.0 | Multiple directory traversal vulnerabilities in the web administration interface on the TANDBERG Video Communication Server (VCS) before X5.1 allow remote authenticated users to read arbitrary files via a .. (dot dot) in the page parameter to (1) hel | 2018-10-10 19:49:00 | 2010-04-13 17:30:00 |
| CVE-2010-0009 | 4.3 | Apache CouchDB 0.8.0 through 0.10.1 allows remote attackers to obtain sensitive information by measuring the completion time of operations that verify (1) hashes or (2) passwords. | 2018-10-10 19:49:00 | 2010-04-05 16:30:00 |
| CVE-2010-0062 | 6.8 | Heap-based buffer overflow in quicktime.qts in CoreMedia and QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a malformed .3g2 movie file with H.263 encod | 2018-10-10 19:49:00 | 2010-03-30 18:30:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: