CVE-2011-5108

Cross-site scripting XSS vulnerability in config.php in AdaptCMS 2.0.0 and 2.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-5103

SQL injection vulnerability in Alurian Prismotube PHP Video Script allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

CVE-2011-5104

Cross-site scripting XSS vulnerability in wpsc-admin/display-sales-logs.php in WP e-Commerce plugin 3.8.7.1 and possibly earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the customtext parameter. NOTE: some of these details are obtained from third party...

CVE-2011-5109

CVE-2011-5109 describes multiple SQL injection vulnerabilities in Freelancer calendar 1.01 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via the SearchField parameter in a search action to (1) category_list.php, (2) Copy_of_calendar_list.php, (3) customer_s...

CVE-2011-5108

Cross-site scripting XSS vulnerability in config.php in AdaptCMS 2.0.0 and 2.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-5115

Cross-site scripting XSS vulnerability in DLGuard, possibly 4.6 and earlier, allows remote attackers to inject arbitrary web script or HTML via the searchCart parameter to index.php...

CVE-2011-5116

CVE-2011-5116 affects SetSeed CMS via an SQL injection in the setseed-hub component. Affected versions include 5.8.20 and 5.11.2 and earlier; the vulnerability allows remote attackers to execute arbitrary SQL commands through the loggedInUser cookie. Root cause: insufficient sanitization in the w...

CVE-2011-5115

DLGuard is affected by an XSS vulnerability (likely in version 4.6 and earlier) that can be triggered via the searchCart parameter to index.php. The root cause is insufficient input sanitization, allowing injection of arbitrary scripts/HTML. OpenVAS notes the vulnerability with a WillNotFix remed...

CVE-2011-5112

SQL injection vulnerability in Alameda comalameda component before 1.0.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the storeid parameter to index.php...

CVE-2011-5108

CVE-2011-5108 affects AdaptCMS 2.0.0 and 2.0.1, with the vulnerability located in the config.php file. The issue is a Cross-Site Scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The NVD entry lists a MEDIUM base score (4.3) and note...

CVE-2011-5107

CVE-2011-5107 is an XSS in the WordPress plugin Alert Before Your Post (post_alert.php) affecting possibly version 0.1.1 and earlier. The vulnerability allows an attacker to inject arbitrary script via the name parameter, potentially affecting a user’s browser context. Remediation: update to the ...

CVE-2011-5104

Cross-site scripting XSS vulnerability in wpsc-admin/display-sales-logs.php in WP e-Commerce plugin 3.8.7.1 and possibly earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the customtext parameter. NOTE: some of these details are obtained from third party...

CVE-2011-5106

CVE-2011-5106 is a Cross-Site Scripting (XSS) vulnerability affecting the WordPress plugin Flexible Custom Post Type prior to version 0.1.7 . The issue is triggered in edit-post.php via the id parameter, allowing remote attackers to inject arbitrary web script or HTML. Affected plugin versions in...

CVE-2011-5105

CVE-2011-5105 affects ManageEngine ADSelfService Plus 4.5 Build 4521, with XSS in EmployeeSearch.cc exploited via searchType and searchString parameters. Root cause: insufficient input sanitization leading to arbitrary script/HTML execution in a user session. Impact: remote attacker could inject ...

CVE-2011-5112

CVE-2011-5112 describes an SQL injection in the Joomla! extension Alameda (com_alameda) before 1.0.1, enabling remote attackers to execute arbitrary SQL commands via the storeid parameter to index.php. Affected: Alameda component (

CVE-2011-5110

CVE-2011-5110 involves multiple SQL injection vulnerabilities in Blogs Manager (version 1.101 and earlier). The underlying issue is improper handling of the SearchField parameter during a search action, allowing remote attackers to inject SQL via endpoints such as _authors_list.php, _blogs_list.p...

CVE-2011-5114

The CVE-2011-5114 entry describes multiple cross-site scripting (XSS) vulnerabilities in the Barracuda Link Balancer 330, firmware 1.3.2.005 and earlier, specifically on the Authoritative DNS – DNS Zones page. The flaw allows remote attackers to inject arbitrary web script or HTML via the zoneid ...

CVE-2011-5104

CVE-2011-5104 affects the WP e-Commerce plugin (WordPress) in the file wpsc-admin/display-sales-logs.php with a vulnerability in the custom_text parameter, allowing remote attackers to inject arbitrary script/HTML (XSS). The issue is observed in WP e-Commerce 3.8.7.1 and possibly earlier. Remedia...

CVE-2011-5103

The CVE-2011-5103 entry describes an SQL injection in the Alurian Prismotube PHP Video Script, exploitable via the id parameter to index.php. The root cause is unsanitized input being used in SQL queries, enabling remote attackers to execute arbitrary SQL commands. Documented impact indicates pot...

CVE-2011-5113

CVE-2011-5113 affects Joomla! Techfolio (com_techfolio) 1.0. An SQL injection vulnerability is present in frontend/models/techfoliodetail.php, allowing remote attackers to execute arbitrary SQL commands via the catid parameter. Impact is partial confidentiality, integrity, and availability per th...