CVE-2012-4383

contao prior to 2.11.4 has a sql injection vulnerability...

CVE-2012-5776

CVE-2012-5776 relates to multiple XSS vulnerabilities in Dokeos 2.1.1, specifically in the profile handling path (main/auth/profile.php) via parameters named for the extra_ set. The root cause is input handling that allows injected script code to be reflected in the user’s browser. Affected produ...

CVE-2012-4383

CVE-2012-4383 affects Contao core prior to 2.11.4, with an SQL injection vulnerability in contao-2.11.3\system\modules\backend\Ajax.php. The Red Hat/GHSA/osv entries confirm this issue in the Contao core and identify 2.11.4 as the fixed version. The connected documents do not detail exploit metho...

CVE-2012-6114

creationtimestamp| type| source ---|---|--- 2020-01-28 19:37:37+00:00| seen| https://t.me/cveNotify/509...

CVE-2012-6609

Directory traversal vulnerability in agetlog.cgi in Polycom HDX Video End Points before 3.0.4 and UC APL before 2.7.1.J allows remote attackers to read arbitrary files via a .. dot dot in the name parameter...

CVE-2012-6609

Directory traversal vulnerability in agetlog.cgi in Polycom HDX Video End Points before 3.0.4 and UC APL before 2.7.1.J allows remote attackers to read arbitrary files via a .. dot dot in the name parameter...

CVE-2012-6609

CVE-2012-6609 is a directory traversal in Polycom HDX Video Endpoints (before 3.0.4) and UC APL (before 2.7.1.J). An attacker can read arbitrary files by supplying .. in the name parameter via a_getlog.cgi. The NVD entry reports CVSSv2 base score 5.0 (MEDIUM) and CVSSv3.1 base score 7.5 (HIGH), w...

CVE-2012-6114

The CVE-2012-6114 issue affects the git-changelog utility in git-extras 1.7.0. A local user can cause a symlink attack targeting /tmp/changelog or /tmp/.git-effort, enabling overwriting of arbitrary files. The root cause is a symlink/privilege-exacerbated file-write vulnerability in the utility’s...

CVE-2012-6114

The git-changelog utility in git-extras 1.7.0 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/changelog or 2 /tmp/.git-effort...

CVE-2012-6448

CVE-2012-6448 describes a Cross-site Scripting (XSS) vulnerability in cPanel WebHost Manager (WHM) 11.34.0. The flaw allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Connected sources confirm the affected product/version and provide an exploit reference (Exp...

CVE-2012-6448

Cross-site Scripting XSS in cPanel WebHost Manager WHM 11.34.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-1495

install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the formsingleuserlogin parameter...

CVE-2012-1495

WebCalendar is affected by CVE-2012-1495: install/index.php in WebCalendar versions before 1.2.5 allows remote code execution via the form_single_user_login parameter (pre-auth). The vulnerability enables arbitrary code execution with web user privileges and has multiple public references detaili...

CVE-2012-1495

install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the formsingleuserlogin parameter...

CVE-2012-1496

CVE-2012-1496 affects WebCalendar prior to 1.2.5. Multiple sources document local file inclusion (LFI) in WebCalendar, with OpenVAS also listing PHP code injection in WebCalendar 1.2.4. The common impact is arbitrary file read and potential code execution within the vulnerable web application con...

CVE-2012-6613

D-Link DSR-250N devices with firmware 1.05B73WW allow Persistent Root Access because of the admin password for the admin account...

CVE-2012-6613

CVE-2012-6613 affects D-Link DSR-250N devices with firmware 1.05B73_WW. The issue allows Persistent Root Access due to the admin password for the admin account. Attack surface is network-exposed since CVSS vectors indicate remote access with low complexity and high privileges required. The NVD en...

CVE-2012-6494

CVE-2012-6494 affects Rapid7 Nexpose (Nexpose Security Console) prior to version 5.5.4. The vulnerability is a session hijacking flaw that allows remote attackers to capture a logged-in user’s session and gain unauthorized access. Proof-of-concept and exploitation details are described in vendor ...

CVE-2012-6345

CVE-2012-6345 affects Novell ZENworks Configuration Management prior to 11.2.4 and is described as an information-disclosure vulnerability that allows obtaining sensitive trace information. The available description indicates the issue involves leakage of trace data, with CVSS metrics (up to HIGH...

CVE-2012-6344

CVE-2012-6344 impacts Novell ZENworks Configuration Management prior to 11.2.4, where input handling allows cross‑site scripting (XSS). The connected sources corroborate the issue title and product/version affected, but do not provide a detailed root cause or exploit specifics beyond the XSS desc...