CVE-2013-2109

WordPress plugin wp-cleanfix has Remote Code Execution...

CVE-2013-2109

CVE-2013-2109 affects WordPress plugin wp-cleanfix, with a Remote Code Execution vulnerability. The NVD lists CVSS-2.0 base score 6.8 (Partial confidentiality, integrity, availability impact) and CVSS-3.1 base score 8.8 (High impact, network attack, user interaction required). The connected docum...

CVE-2013-2109

WordPress plugin wp-cleanfix has Remote Code Execution...

CVE-2013-2108

The CVE-2013-2108 entry concerns WordPress WP Cleanfix Plugin (v2.4.4) susceptible to a Cross‑Site Request Forgery (CSRF). Multiple connected sources corroborate a CSRF flaw in this plugin, with additional references noting related exposure of remote execution and XSS in WP CleanFix, and an explo...

CVE-2013-2108

WordPress WP Cleanfix Plugin 2.4.4 has CSRF...

CVE-2013-1353

CVE-2013-1353 affects Orange HRM 2.7.1 and is documented as a cross-site scripting (XSS) vulnerability via the vacancy name. The linked NVD entry provides CVSS metrics: CVSSv2 base score 3.5 (LOW) and CVSSv3.1 base score 5.4 (MEDIUM). CVSSv3.1 vector is CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:...

CVE-2012-6686

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-4357. Reason: This candidate is a duplicate of CVE-2013-4357. Notes: All CVE users should reference CVE-2013-4357 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2012-6686

CVE-2012-6686 is a duplicate of CVE-2013-4357. Connected documents describe the underlying issue as an eglibc getaddrinfo handling flaw that can enable denial of service. The F5 advisory explicitly notes the vulnerability in eglibc before 2.14 and that none of their supported products are affecte...

CVE-2013-3091

An Authentication Bypass vulnerability in Belkin N300 F7D7301v1 router allows remote attackers to bypass authentication using "Javascript debugging."...

CVE-2013-3096

Technical details (affected product/version, root cause, exploitability, or fix) are not publicly available in the provided documents. Monitor for updates.

CVE-2013-3067

Linksys WRT310Nv2 2.0.0.1 is vulnerable to XSS...

CVE-2013-3067

The provided records identify CVE-2013-3067 as affecting Linksys WRT310Nv2 with firmware 2.0.0.1, stating it is vulnerable to cross-site scripting (XSS). The available sources do not describe the exact vulnerable component, exploitable conditions, payloads, impact beyond XSS, or a patch/mitigatio...

CVE-2013-3091

The CVE-2013-3091 entry concerns Belkin N300 (F7D7301v1) routers, where an authentication bypass is possible via “Javascript debugging.” The NVD entry documents a network-based vulnerability with CVSSv3.1 base score 9.8 (CRITICAL), indicating high confidentiality, integrity, and availability impa...

CVE-2013-3629

ISPConfig 3.0.5.2 has Arbitrary PHP Code Execution...

CVE-2013-3637

ProjectPier 0.8.8 does not use the Secure flag for cookies...

Immunity Canvas: ZABBIX

Name| zabbix ---|--- CVE| CVE-2013-3628 Exploit Pack| CANVAS Description| Zabbix = 2.0.8 PHP File inclusion exploit Notes| Repeatability: Infinite VENDOR: Zabbix CVE Url: http://cve.mitre.org/cgi-bin/cvename.cgi?name=2013-3628 CVE Name: CVE-2013-3628...

CVE-2013-3637

CVE-2013-3637 affects ProjectPier 0.8.8, with the root issue that session cookies are set without the Secure flag. This means cookies can be transmitted over non-HTTPS connections, potentially exposing session identifiers. The available records (NVD, Red Hat, PRIO, and CVE listings) confirm the i...

CVE-2013-3636

CVE-2013-3636 affects ProjectPier 0.8.8, describing a remote information disclosure caused by session cookies lacking the HttpOnly flag. Multiple connected sources (NVD, Red Hat, CVE lists, etc.) confirm the weakness and its impact (cookie-based information disclosure) without detailing a patch. ...

CVE-2013-3635

CVE-2013-3635 affects ProjectPier 0.8.8. The vulnerability is a stored cross-site scripting (XSS) flaw in the application, with the XSS payloads reported in fields such as Contact Name, Contact Company Name, and Contact Description. Multiple connected sources corroborate that this vulnerability c...

CVE-2013-3629

ISPConfig 3.0.5.2 has Arbitrary PHP Code Execution...