20519 matches found
CVE-2011-3614
creationtimestamp| type| source ---|---|--- 2020-01-22 20:44:13+00:00| seen| https://t.me/cibsecurity/9359 2020-01-23 01:37:45+00:00| seen| https://t.me/cveNotify/376 2020-01-28 18:34:21+00:00| seen| https://t.me/cibsecurity/9450...
CVE-2011-3621
creationtimestamp| type| source ---|---|--- 2020-01-22 20:44:12+00:00| seen| https://t.me/cibsecurity/9358 2020-01-23 01:37:46+00:00| seen| https://t.me/cveNotify/377...
CVE-2011-3622
CVE-2011-3622 describes an XSS vulnerability in the admin login screen of the Phorum web forum software prior to version 5.2.18. The issue is documented across multiple sources (NVD) as a Cross-Site Scripting vulnerability, with impact details indicating user interaction may be required depending...
CVE-2011-3582
creationtimestamp| type| source ---|---|--- 2020-01-22 18:44:06+00:00| seen| https://t.me/cibsecurity/9351...
CVE-2011-3595
creationtimestamp| type| source ---|---|--- 2020-01-22 18:44:06+00:00| seen| https://t.me/cibsecurity/9350 2020-01-23 01:37:39+00:00| seen| https://t.me/cveNotify/371...
CVE-2011-3610
creationtimestamp| type| source ---|---|--- 2020-01-22 18:44:04+00:00| seen| https://t.me/cibsecurity/9349 2020-01-23 01:37:40+00:00| seen| https://t.me/cveNotify/372...
CVE-2011-3612
Cross-Site Request Forgery CSRF vulnerability exists in panel.php in UseBB before 1.0.12...
CVE-2011-3621
The CVE-2011-3621 entry concerns a reverse proxy handling flaw in FluxBB prior to 1.4.7 when FORUM_BEHIND_REVERSE_PROXY is enabled. The description is supported by the NVD entry, which lists a CVSS2 base score of 7.5 (HIGH) and a CVSS3.1 base score of 9.8 (CRITICAL), indicating a potentially seve...
CVE-2011-3614
CVE-2011-3614 affects Vanilla Forums (Facebook, Twitter, and Embedded plugins) prior to version 2.0.17.9. The issue is an Access Control vulnerability that could impact confidentiality, integrity, and availability. Remediation: upgrade to Vanilla Forums 2.0.17.9 or newer; apply any vendor-supplie...
CVE-2011-3613
Vanilla Forums before 2.0.17.9 contains a cookie handling issue that can lead to information disclosure. The vulnerability affects Vanilla Forums (PHP-based open source forum) and is described across multiple connected entries (CVE-2011-3613; CNVD-2020-13206). Root cause: improper cookie handling...
CVE-2011-3612
CVE-2011-3612 concerns a Cross-Site Request Forgery in UseBB’s panel.php, affecting versions before 1.0.12. The vulnerability arises from CSRF in the panel backend, enabling unauthorized actions by an attacker if a user is authenticated. The provided sources confirm the affected component and the...
CVE-2011-4943
creationtimestamp| type| source ---|---|--- 2020-01-22 16:44:06+00:00| seen| https://t.me/cibsecurity/9343...
CVE-2011-3611
Summary: CVE-2011-3611 describes a File Inclusion vulnerability in UseBB prior to 1.0.12, triggered by the act parameter in admin.php. The underlying issue is improper handling of input in the affected parameter, allowing an attacker to include arbitrary files. Affected software: UseBB
CVE-2011-3595
CVE-2011-3595 involves multiple Cross-site Scripting (XSS) vulnerabilities in Joomla! up to version 1.7.0. The issue resides in index.php, within the search word, extension, asset, and author parameters, enabling XSS in affected requests. The provided documents confirm the affected software versi...
CVE-2011-3582
A Cross-site Request Forgery CSRF vulnerability exists in Advanced Electron Forums AEF through 1.0.9 due to inadequate confirmation for sensitive transactions in the administrator functions...
CVE-2011-3582
CVE-2011-3582 affects Advanced Electron Forums (AEF) up to version 1.0.9. The issue is a Cross-site Request Forgery (CSRF) vulnerability caused by inadequate confirmation for sensitive administrator actions. The description across sources confirms the admin function CSRF exposure, with no explici...
CVE-2011-4943
ImpressPages CMS v1.0.12 has Unspecified Remote Code Execution fixed in v1.0.13...
CVE-2011-4943
ImpressPages CMS v1.0.12 is affected by an Unspecified Remote Code Execution vulnerability, with a fix released in v1.0.13. The CVE entry (CVE-2011-4943) is documented with high NVD scores (CVSSv2 base 7.5, CVSSv3 base 9.8) indicating network-based, unauthenticated remote code execution that coul...