PT-2011-4737 · WordPress · Web Minimalist 200901 Theme

Name of the Vulnerable Software and Affected Versions: Web Minimalist 200901 theme for WordPress version 1.2 and earlier Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the PATH INFO to "index.php". Recommendations: For Web Minimali...

CVE-2011-3865: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Black-LetterHead theme before 1.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php...

CVE-2011-3862: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Morning Coffee theme before 3.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php...

CVE-2011-3861: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Web Minimalist 200901 theme before 1.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php...

CVE-2010-4851

Multiple SQL injection vulnerabilities in Eclime 1.1.2b allow remote attackers to execute arbitrary SQL commands via the 1 ref or 2 pollid parameter to index.php, or the 3 country parameter to createaccount.php...

Sql injection

Multiple SQL injection vulnerabilities in MH Products Projekt Shop allow remote attackers to execute arbitrary SQL commands via the 1 ts parameter to details.php and possibly the 2 ilceler parameter to index.php...

CVE-2010-4845

Multiple SQL injection vulnerabilities in MH Products Projekt Shop allow remote attackers to execute arbitrary SQL commands via the 1 ts parameter to details.php and possibly the 2 ilceler parameter to index.php...

PT-2011-1780

Name of the Vulnerable Software and Affected Versions MH Products Projekt Shop affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the ts parameter to "details.php" and possibly the ilceler parameter to...

CVE-2010-4851: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Eclime 1.1.2b allow remote attackers to execute arbitrary SQL commands via the 1 ref or 2 pollid parameter to index.php, or the 3 country parameter to createaccount.php...

CVE-2010-4845: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in MH Products Projekt Shop allow remote attackers to execute arbitrary SQL commands via the 1 ts parameter to details.php and possibly the 2 ilceler parameter to index.php...

PT-2011-1786

Name of the Vulnerable Software and Affected Versions Eclime version 1.1.2b Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the ref or poll id parameter to "index.php", or the country parameter to "create account.php". Recommendations For...

700,000 sites on Inmotion Hosting Server hacked by TiGER-M@TE in one shot !

700,000 sites on Inmotion Hosting Server hacked by TiGER-M@TE in one shot ! 700,000 websites hosted on InMotion Hosting network hacked by TiGER-M@TE includingTrinity FM, Blast Magazine. It was not just a server hack, actually whole data center got hacked. List of all hacked 700000 sites are...

Information disclosure

Yamamah 1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/default/index.php and certain other files...

PT-2011-4692

Name of the Vulnerable Software and Affected Versions StatusNet version 0.9.6 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by accessing specific files, such as tpl/index.php, which reveals the installation path...

PT-2011-4713

Name of the Vulnerable Software and Affected Versions Yamamah version 1.0 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by accessing specific files, such as "themes/default/index.php", which reveals the...

CVE-2011-3823: Exposure of Sensitive Information to an Unauthorized Actor

Yamamah 1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/default/index.php and certain other files...

CVE-2011-3802: Exposure of Sensitive Information to an Unauthorized Actor

StatusNet 0.9.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by tpl/index.php and certain other files...

CVE-2011-3802

StatusNet 0.9.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by tpl/index.php and certain other files...

Information disclosure

AneCMS 1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by widgets/menu/index.php and certain other files...

Information disclosure

HelpCenter Live 2.1.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/HelpCenter/index.php and certain other files...