CVE-2014-7175

creationtimestamp| type| source ---|---|--- 2020-06-01 20:55:39+00:00| seen| https://t.me/cibsecurity/12479...

CVE-2014-8937

creationtimestamp| type| source ---|---|--- 2020-06-01 20:55:38+00:00| seen| https://t.me/cibsecurity/12478...

CVE-2014-8938

creationtimestamp| type| source ---|---|--- 2020-06-01 20:55:36+00:00| seen| https://t.me/cibsecurity/12477...

CVE-2014-8940

creationtimestamp| type| source ---|---|--- 2020-06-01 20:55:35+00:00| seen| https://t.me/cibsecurity/12475...

CVE-2014-8939

creationtimestamp| type| source ---|---|--- 2020-06-01 20:55:35+00:00| seen| https://t.me/cibsecurity/12476...

CVE-2014-8941

creationtimestamp| type| source ---|---|--- 2020-06-01 20:55:34+00:00| seen| https://t.me/cibsecurity/12474...

CVE-2014-8942

creationtimestamp| type| source ---|---|--- 2020-06-01 20:55:33+00:00| seen| https://t.me/cibsecurity/12473...

CVE-2014-8943

creationtimestamp| type| source ---|---|--- 2020-06-01 20:55:32+00:00| seen| https://t.me/cibsecurity/12472...

CVE-2014-8944

creationtimestamp| type| source ---|---|--- 2020-06-01 20:55:31+00:00| seen| https://t.me/cibsecurity/12471...

CVE-2014-8945

creationtimestamp| type| source ---|---|--- 2020-06-01 20:55:29+00:00| seen| https://t.me/cibsecurity/12470...

CVE-2014-9702

creationtimestamp| type| source ---|---|--- 2020-06-01 20:55:28+00:00| seen| https://t.me/cibsecurity/12469...

CVE-2014-8942

Lexiglot through 2014-11-20 allows CSRF...

CVE-2014-9702

system/classes/DbPDO.php in Cmfive through 2015-03-15, when database connectivity malfunctions, allows remote attackers to obtain sensitive information username and password via any request, such as a password reset request...

CVE-2014-8939

Lexiglot through 2014-11-20 allows remote attackers to obtain sensitive information full path via an include/smarty/plugins/modifier.dateformat.php request if PHP has a non-recommended configuration that produces warning messages...

CVE-2014-8944

Lexiglot through 2014-11-20 allows XSS Reflected via the username, or XSS Stored via the admin.php?page=config installname, intromessage, or newfilecontent parameter...

CVE-2014-8945

admin.php?page=projects in Lexiglot through 2014-11-20 allows command injection via username and password fields...

Design/Logic Flaw

Lexiglot through 2014-11-20 allows remote attackers to obtain sensitive information names and details of projects by visiting the /update.log URI...

Directory traversal

FarLinX X25 Gateway through 2014-09-25 allows directory traversal via the log-handling feature...

Command injection

admin.php?page=projects in Lexiglot through 2014-11-20 allows command injection via username and password fields...

Cross site request forgery (csrf)

Lexiglot through 2014-11-20 allows CSRF...