| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2009-2161 | 5.1 | Directory traversal vulnerability in backend/admin-functions.php in TorrentTrader Classic 1.09, when used on a case-insensitive web site, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the ss_uri parameter, | 2018-10-10 19:39:00 | 2009-06-22 19:30:00 |
| CVE-2009-2160 | 5.0 | TorrentTrader Classic 1.09 allows remote attackers to (1) obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function; and allows remote attackers to (2) obtain other potentially sensitive information via a | 2018-10-10 19:39:00 | 2009-06-22 19:30:00 |
| CVE-2009-2159 | 6.4 | backup-database.php in TorrentTrader Classic 1.09 does not require administrative authentication, which allows remote attackers to create and download a backup database by making a direct request and then retrieving a .gz file from backups/. | 2018-10-10 19:39:00 | 2009-06-22 19:30:00 |
| CVE-2009-2157 | 6.5 | Multiple SQL injection vulnerabilities in TorrentTrader Classic 1.09 allow remote authenticated users to execute arbitrary SQL commands via (1) the origmsg parameter to account-inbox.php; the categ parameter to (2) delreq.php and (3) admin-delreq.php | 2018-10-10 19:39:00 | 2009-06-22 19:30:00 |
| CVE-2009-2156 | 3.5 | Multiple cross-site scripting (XSS) vulnerabilities in TorrentTrader Classic 1.09 allow remote authenticated users to inject arbitrary web script or HTML via (1) the Title field to requests.php, related to viewrequests.php; and (2) the Torrent Name f | 2018-10-10 19:39:00 | 2009-06-22 19:30:00 |
| CVE-2009-2134 | 5.0 | pivot/tb.php in Pivot 1.40.4 and 1.40.7 allows remote attackers to obtain sensitive information via an invalid url parameter, which reveals the installation path in an error message. | 2018-10-10 19:39:00 | 2009-06-19 19:30:00 |
| CVE-2009-2133 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in Pivot 1.40.4 and 1.40.7 allow remote attackers to inject arbitrary web script or HTML via the (1) menu or (2) sort parameter to pivot/index.php, (3) the value of a check array parameter in a dele | 2018-10-10 19:39:00 | 2009-06-19 18:00:00 |
| CVE-2009-2119 | 4.3 | Cross-site scripting (XSS) vulnerability in the login interface (my.logon.php3) in F5 FirePass SSL VPN 5.5 through 5.5.2 and 6.0 through 6.0.3 allows remote attackers to inject arbitrary web script or HTML via a base64-encoded xcho parameter. | 2018-10-10 19:39:00 | 2009-06-18 21:30:00 |
| CVE-2009-2116 | 4.0 | Directory traversal vulnerability in admin.php in SkyBlueCanvas 1.1 r237 allows remote authenticated administrators to list directory contents via a .. (dot dot) in the dir parameter. | 2018-10-10 19:39:00 | 2009-06-18 21:30:00 |
| CVE-2009-2115 | 6.8 | admin.php in SkyBlueCanvas 1.1 r237 allows remote authenticated administrators to obtain sensitive information via an invalid id parameter, which reveals the installation path in an error message. | 2018-10-10 19:39:00 | 2009-06-18 21:30:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: