| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2014-3774 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in items.php in TeamPass before 2.1.20 allow remote attackers to inject arbitrary web script or HTML via the group parameter, which is not properly handled in a (1) hid_cat or (2) open_folder form e | 2014-08-07 14:07:00 | 2014-08-07 11:13:00 |
| CVE-2014-3773 | 7.5 | Multiple SQL injection vulnerabilities in TeamPass before 2.1.20 allow remote attackers to execute arbitrary SQL commands via the login parameter in a (1) send_pw_by_email or (2) generate_new_password action in sources/main.queries.php; iDisplayStart | 2014-08-07 14:07:00 | 2014-08-07 11:13:00 |
| CVE-2014-3772 | 7.5 | TeamPass before 2.1.20 allows remote attackers to bypass access restrictions via a request to index.php followed by a direct request to a file that calls the session_start function before checking the CPM key, as demonstrated by a request to sources/ | 2014-08-07 14:03:00 | 2014-08-07 11:13:00 |
| CVE-2014-3771 | 7.5 | TeamPass before 2.1.20 allows remote attackers to bypass access restrictions via the language file path in a (1) request to index.php or (2) "change_user_language" request to sources/main.queries.php. | 2014-08-07 13:57:00 | 2014-08-07 11:13:00 |
| CVE-2013-7394 | 9.0 | The "runshellscript echo.sh" script in Splunk before 5.0.5 allows remote authenticated users to execute arbitrary commands via a crafted string. NOTE: this issue was SPLIT from CVE-2013-6771 per ADT2 due to different vulnerability types. | 2014-08-07 13:37:00 | 2014-08-07 11:13:00 |
| CVE-2013-6771 | 9.3 | Directory traversal vulnerability in the collect script in Splunk before 5.0.5 allows remote attackers to execute arbitrary commands via a .. (dot dot) in the file parameter. NOTE: this issue was SPLIT per ADT2 due to different vulnerability types. | 2014-08-07 13:34:00 | 2014-08-07 11:13:00 |
| CVE-2014-5183 | 6.5 | SQL injection vulnerability in includes/mode-edit.php in the Simple Retail Menus (simple-retail-menus) plugin before 4.1 for WordPress allows remote authenticated editors to execute arbitrary SQL commands via the targetmenu parameter in an edit actio | 2014-08-07 13:30:00 | 2014-08-06 19:55:00 |
| CVE-2014-5187 | 5.0 | Directory traversal vulnerability in the Tom M8te (tom-m8te) plugin 1.5.3 for WordPress allows remote attackers to read arbitrary files via the file parameter to tom-download-file.php. | 2014-08-07 13:25:00 | 2014-08-06 19:55:00 |
| CVE-2014-5186 | 6.5 | SQL injection vulnerability in the All Video Gallery (all-video-gallery) plugin 1.2 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter in an edit action in the allvideogallery_videos page t | 2014-08-07 13:22:00 | 2014-08-06 19:55:00 |
| CVE-2014-5185 | 6.0 | SQL injection vulnerability in the Quartz plugin 1.01.1 for WordPress allows remote authenticated users with Contributor privileges to execute arbitrary SQL commands via the quote parameter in an edit action in the quartz/quote_form.php page to wp-ad | 2014-08-07 13:14:00 | 2014-08-06 19:55:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: