CVE-2010-1617

user/view.php in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 does not properly check a role, which allows remote authenticated users to obtain the full names of other users via the course profile page...

CVE-2010-1619

Cross-site scripting XSS vulnerability in the fixnonstandardentities function in the KSES HTML text cleaning library weblib.php, as used in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8, allows remote attackers to inject arbitrary web script or HTML via crafted HTML entities...

CVE-2010-1277

SQL injection vulnerability in the user.authenticate method in the API in Zabbix 1.8 before 1.8.2 allows remote attackers to execute arbitrary SQL commands via the user parameter in JSON data to apijsonrpc.php...

CVE-2010-1277

Zabbix 1.8.x before 1.8.2 is affected by an SQL injection in the API’s user.authenticate via the JSON payload to api_jsonrpc.php. The issue allows remote attackers to execute arbitrary SQL commands. Per connected advisories, upgrade to the latest Zabbix package (Gentoo GLSA 201311-15 recommends &...

CVE-2010-1277

SQL injection vulnerability in the user.authenticate method in the API in Zabbix 1.8 before 1.8.2 allows remote attackers to execute arbitrary SQL commands via the user parameter in JSON data to apijsonrpc.php...

MoinMoin Wiki Security Bypass Vulnerability

This host is running MoinMoin Wiki and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: secpodmoinmoinwikiaclsecbypassvuln.nasl 5394 2017-02-22 09:22:42Z teissa $ MoinMoin Wiki ACL Security Bypass Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010 SecPod,...

PYSEC-2010-15

Unspecified vulnerability in MoinMoin 1.5.x through 1.7.x, 1.8.x before 1.8.7, and 1.9.x before 1.9.2 has unknown impact and attack vectors, related to configurations that have a non-empty superuser list, the xmlrpc action enabled, the SyncPages action enabled, or OpenID configured...

CVE-2010-0668

Unspecified vulnerability in MoinMoin 1.5.x through 1.7.x, 1.8.x before 1.8.7, and 1.9.x before 1.9.2 has unknown impact and attack vectors, related to configurations that have a non-empty superuser list, the xmlrpc action enabled, the SyncPages action enabled, or OpenID configured...

CVE-2010-0283

The Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.7 before 1.7.2, and 1.8 alpha, allows remote attackers to cause a denial of service assertion failure and daemon crash via an invalid 1 AS-REQ or 2 TGS-REQ request...

Z-Blog Database Disclosure

/ /| | || || | | | | | || | / \ / || | / | | | | / / |||| | | | | | | / \ | | | / /| /| // |\ || |||| || ||||// \||\ ||| \ ..Bl4ck H4T.. ============================================================================== » Z-Blog 1.8 Remote Database Disclosure Vulnerability...

Z-Blog 1.8 Remote Database Disclosure Vulnerability

Exploit for unknown platform in category web applications =================================================== Z-Blog 1.8 Remote Database Disclosure Vulnerability =================================================== ============================================================================== +...

Directory traversal

Directory traversal vulnerability in index.php in IDevSpot iSupport 1.8 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the includefile parameter...

z-blog 1.8 catalog.asp 跨站脚本漏洞

No description provided by source...

CVE-2009-4403

CVE-2009-4403 corresponds to a cross-site scripting (XSS) vulnerability in the index.php of Rumba XML 1.8, exploitable via PATH_INFO. The documented impact is that remote attackers can inject arbitrary web script or HTML. The entry is supported by multiple sources (NVD and CVE records) with a bas...

CVE-2009-4305

SQL injection vulnerability in the SCORM module in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 allows remote authenticated users to execute arbitrary SQL commands via vectors related to an "escaping issue when processing AICC CRS file CourseTitle."...

Design/Logic Flaw

mod/glossary/showentry.php in the Glossary module for Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 does not properly perform access control, which allows attackers to read unauthorized Glossary entries via unknown vectors...

CVE-2009-4303

Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 stores 1 password hashes and 2 unspecified "secrets" in backup files, which might allow attackers to obtain sensitive information...

CVE-2009-4299

mod/glossary/showentry.php in the Glossary module for Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 does not properly perform access control, which allows attackers to read unauthorized Glossary entries via unknown vectors...

CVE-2009-4302

login/indexform.html in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 links to an index page on the HTTP port even when the page is served from an HTTPS port, which might cause login credentials to be sent in cleartext, even when SSL is intended, and allows remote attackers to obtain these...

CVE-2009-4297

Multiple cross-site request forgery CSRF vulnerabilities in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors...