20526 matches found
CVE-2011-5226
CVE-2011-5226: A CSRF flaw in wordpress_sentinel.php of the WordPress Sentinel plugin (version 1.0.0) allows remote attackers to hijack an administrator’s session by crafting requests that trigger snapshots. This affects the Sentinel plugin for WordPress; exploitation context and in-the-wild deta...
CVE-2011-5234
CVE-2011-5234 describes a SQL injection vulnerability in the file user.php of Social Network Community 2, exploitable via the userId parameter to allow remote execution of arbitrary SQL commands. The connected documents confirm the vulnerability type and affected component but do not provide reme...
CVE-2011-5226
Cross-site request forgery CSRF vulnerability in wordpresssentinel.php in the Sentinel plugin 1.0.0 for WordPress allows remote attackers to hijack the authentication of an administrator for requests that trigger snapshots...
CVE-2011-5215
SQL injection vulnerability in index.php in Video Community Portal allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2011-5216
CVE-2011-5216 concerns the WordPress SCORM Cloud plugin prior to version 1.0.7. The vulnerability is an SQL injection in ajax.php that allows remote attackers to execute arbitrary SQL commands through the active parameter. The affected component is the plugin’s server-side PHP handling in ajax.ph...
CVE-2011-5221
CVE-2011-5221 affects WebSVN (before 2.3.1). The vulnerability is a cross-site scripting (XSS) in the getLog function of svnlook.php, allowing an attacker to inject arbitrary web script or HTML via the path parameter to comp.php, diff.php, or revision.php. Impact: client-side script execution in ...
CVE-2011-5228
AppRain CMF is vulnerable to Cross-Site Scripting (XSS) in the Search module (quickstart/search) for version 0.1.5 and earlier (
CVE-2011-5217
CVE-2011-5217 : Affected product is Hitachi JP1/ServerConductor/DeploymentManager, specifically the PXE Mtftp service. The vulnerability is a directory traversal issue described as allowing remote attackers to read arbitrary files via unknown vectors, affecting JP2 versions prior to 08-55 (Japane...
CVE-2011-5221
Cross-site scripting XSS vulnerability in the getLog function in svnlook.php in WebSVN before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via the path parameter to 1 comp.php, 2 diff.php, or 3 revision.php...
CVE-2011-5223
The provided documents confirm CVE-2011-5223 is a CSRF vulnerability in Cacti’s logout.php affecting versions before 0.8.7i. Affected component is Cacti (web interface); the underlying issue is CSRF that can hijack a user’s authenticated session. The exact exploit vectors, affected product versio...
CVE-2011-5215
The CVE-2011-5215 entry concerns a SQL injection in index.php of the Video Community Portal. The vulnerability arises from unsafely handling the id parameter, enabling remote attackers to execute arbitrary SQL commands. The issue is documented across multiple sources (NVD, CVE listings) with no a...
CVE-2011-5218
CVE-2011-5218 describes an SQL injection in DotA OpenStats 1.3.9 and earlier. The vulnerability allows remote attackers to execute arbitrary SQL commands through the id parameter to index.php. The NVD entry indicates a high base score (7.5) with network access, low attack complexity, no authentic...
CVE-2011-5220
PHP-SCMS 1.6.8 and earlier are affected by an XSS in templates/default/Admin/Login.html. The vulnerability arises from unsanitized lang parameter passed to index.php, allowing remote attackers to inject arbitrary script/HTML. Impact is described as cross-site scripting with no explicit exploitati...
CVE-2011-5229
SQL injection vulnerability in quickstart/profile/index.php in the Forum module in appRain CMF 0.1.5 allows remote attackers to execute arbitrary SQL commands via the PATHINFO...
CVE-2011-5229
Summary of CVE-2011-5229 (appRain CMF): SQL injection in the Forum module’s quickstart/profile/index.php (PATH_INFO) of appRain CMF 0.1.5 can allow remote SQL commands execution. Affected product/version: appRain CMF
CVE-2011-5223
Cross-site request forgery CSRF vulnerability in logout.php in Cacti before 0.8.7i allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
Fedora 18 : dokuwiki-0-0.14.20121013.fc18 (2012-16550)
upgrade to latest upstream Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenab...
USN-1616-1: Python 3.1 vulnerabilities
It was discovered that Python would prepend an empty string to sys.path under certain circumstances. A local attacker with write access to the current working directory could exploit this to execute arbitrary code. This issue only affected Ubuntu 10.04 LTS. CVE-2008-5983 It was discovered that th...