20519 matches found
CVE-2011-3183
creationtimestamp| type| source ---|---|--- 2020-01-15 00:39:09+00:00| seen| https://t.me/cibsecurity/9182...
CVE-2011-2934
creationtimestamp| type| source ---|---|--- 2020-01-15 00:39:09+00:00| seen| https://t.me/cibsecurity/9183...
CVE-2011-3202
creationtimestamp| type| source ---|---|--- 2020-01-15 00:39:07+00:00| seen| https://t.me/cibsecurity/9181...
Koala Framework Cross-Site Scripting Vulnerability
Koala Framework is a web application framework. A cross-site scripting vulnerability exists in Koala Framework versions prior to 2011-11-21. The vulnerability stems from a lack of proper validation of client-side data by the web application. An attacker can exploit this vulnerability to execute...
CVE-2011-3203
creationtimestamp| type| source ---|---|--- 2020-01-14 22:39:01+00:00| seen| https://t.me/cibsecurity/9178...
CVE-2011-2715
An SQL Injection vulnerability exists in Drupal 6.20 with Data 6.x-1.0-alpha14 due to insufficient sanitization of table names or column names...
CVE-2011-2714
Drupal 6.20 with Data 6.x-1.0-alpha14 is affected by a cross-site scripting vulnerability due to insufficient sanitization of table descriptions, field names, or labels before display. The CVE-2011-2714 entry notes this issue, but the connected sources do not provide exploit details, active explo...
CVE-2011-3202
A Cross-Site Scripting XSS vulnerability exists in the g parameter to index.php in Jcow CMS 4.2 and earlier...
CVE-2011-3183
A Cross-Site Scripting XSS vulnerability exists in the rcID parameter in Concrete CMS 5.4.1.1 and earlier...
CVE-2011-2933
An Arbitrary File Upload vulnerability exists in admin/media/upload.php in WebsiteBaker 2.8.1 and earlier due to a failure to restrict uploaded files with .htaccess, .php4, .php5, and .phtl extensions...
CVE-2011-2706
The CVE-2011-2706 entry describes an XSS vulnerability in the reorder administrator functions of sNews 1.71. Affected software: sNews (version 1.71). Vulnerable component: the reorder administrator functionality, with cross-site scripting possible through that pathway. Exploitation details, speci...
CVE-2011-2933
CVE-2011-2933: Affected software is WebsiteBaker 2.8.1 and earlier. The vulnerability is an Arbitrary File Upload in admin/media/upload.php caused by failure to restrict uploaded files with extensions .htaccess, .php4, .php5, and .phtl. Connected sources confirm thisē°. The provided documents do n...
CVE-2011-3183
Concrete CMS 5.4.1.1 and earlier are affected by a Cross-Site Scripting (XSS) vulnerability in the rcID parameter . The provided documents identify the issue as an XSS in Concrete CMS prior to/including version 5.4.1.1, but they do not provide any specific root cause details, exploit information,...
CVE-2011-3202
CVE-2011-3202 is a Cross-Site Scripting (XSS) vulnerability in the g parameter to index.php in Jcow CMS 4.2 and earlier. The provided documents describe the vulnerability but do not specify a patch or fixed version. Exploitation details are not provided beyond the XSS condition. No mitigations ar...
CVE-2011-3203
CVE-2011-3203 affects JCow CMS versions 4.x up to 4.2 and 5.2 up to 5.2, where the attachment parameter passed to index.php enables a Code Execution vulnerability. The root cause is a flaw in processing the attachment parameter that can be exploited to achieve arbitrary code execution. Public ref...
CVE-2011-2670
creationtimestamp| type| source ---|---|--- 2020-01-13 16:52:10+00:00| seen| https://t.me/cibsecurity/9138...
CVE-2011-2670
Mozilla Firefox before 3.6 is vulnerable to XSS via the rendering of Cascading Style Sheets...
CVE-2011-2670
CVE-2011-2670 affects Mozilla Firefox prior to 3.6. The vulnerability arises in the rendering of Cascading Style Sheets (CSS), enabling cross-site scripting (XSS). The impact per sources is arbitrary script execution in the affected browser. Affected product/version: Firefox