| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2009-4572 | 6.8 | Cross-site request forgery (CSRF) vulnerability in PhpShop 0.8.1 allows remote attackers to hijack the authentication of arbitrary users for requests that invoke the cartAdd function in a shop/cart action to the default URI. | 2018-10-10 19:49:00 | 2010-01-05 19:00:00 |
| CVE-2009-4571 | 7.5 | Multiple SQL injection vulnerabilities in index.php in PhpShop 0.8.1 allow remote attackers to execute arbitrary SQL commands via the (1) module_id parameter in an admin/function_list action, the (2) vendor_id parameter in a vendor/vendor_form action | 2018-10-10 19:49:00 | 2010-01-05 19:00:00 |
| CVE-2009-4570 | 4.3 | Cross-site scripting (XSS) vulnerability in PhpShop 0.8.1 allows remote attackers to inject arbitrary web script or HTML via the order_id parameter in an order/order_print action to the default URI. | 2018-10-10 19:49:00 | 2010-01-05 19:00:00 |
| CVE-2009-4556 | 7.2 | Quick Heal AntiVirus Plus 2009 10.00 SP1 and Quick Heal Total Security 2009 10.00 SP1 use weak permissions (Everyone: Full Control) for the product files, which allows local users to gain privileges by replacing executables with Trojan horse programs | 2018-10-10 19:49:00 | 2010-01-04 21:30:00 |
| CVE-2009-4554 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in Snitz Forums 2000 3.4.07 allow remote attackers to inject arbitrary web script or HTML via (1) the url parameter to pop_send_to_friend.asp, related to a crafted onload attribute of an IMG element | 2018-10-10 19:49:00 | 2010-01-04 21:30:00 |
| CVE-2009-4539 | 4.3 | Cross-site scripting (XSS) vulnerability in main.php in SQLiteManager 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the redirect parameter. | 2018-10-10 19:49:00 | 2010-01-04 17:30:00 |
| CVE-2009-4521 | 4.3 | Cross-site scripting (XSS) vulnerability in birt-viewer/run in Eclipse Business Intelligence and Reporting Tools (BIRT) before 2.5.0, as used in KonaKart and other products, allows remote attackers to inject arbitrary web script or HTML via the __rep | 2018-10-10 19:49:00 | 2009-12-31 19:30:00 |
| CVE-2009-4470 | 7.5 | SQL injection vulnerability in boardrule.php in DVBBS 2.0 allows remote attackers to execute arbitrary SQL commands via the groupboardid parameter. | 2018-10-10 19:49:00 | 2009-12-30 21:30:00 |
| CVE-2009-4463 | 10.0 | Intellicom NetBiter WebSCADA devices use default passwords for the HICP network configuration service, which makes it easier for remote attackers to modify network settings and cause a denial of service. NOTE: this is only a vulnerability when the ad | 2018-10-10 19:49:00 | 2009-12-30 20:00:00 |
| CVE-2009-4462 | 10.0 | Stack-based buffer overflow in the NetBiterConfig utility (NetBiterConfig.exe) 1.3.0 for Intellicom NetBiter WebSCADA allows remote attackers to execute arbitrary code via a long hn (hostname) parameter in a crafted HICP-protocol UDP packet. | 2018-10-10 19:49:00 | 2009-12-30 20:00:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: