Show filters
154 Total Results
Displaying 141-150 of 154
Sort by:
Attacker Value
Unknown
CVE-2010-3891
Disclosure Date: November 12, 2010 (last updated October 04, 2023)
Cross-site request forgery (CSRF) vulnerability in ESAdmin/security.do in the administrator interface in IBM OmniFind Enterprise Edition before 9.1 allows remote attackers to hijack the authentication of administrators for requests that add an administrative user via a saveNewUser action.
0
Attacker Value
Unknown
CVE-2010-3890
Disclosure Date: November 12, 2010 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in IBM OmniFind Enterprise Edition before 9.1 allows remote attackers to inject arbitrary web script or HTML via the command parameter to the administration interface, as demonstrated by the command parameter to ESAdmin/collection.do.
0
Attacker Value
Unknown
CVE-2010-2680
Disclosure Date: July 12, 2010 (last updated October 04, 2023)
Directory traversal vulnerability in the JExtensions JE Section/Property Finder (jesectionfinder) component for Joomla! allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the view parameter to index.php.
0
Attacker Value
Unknown
CVE-2009-4163
Disclosure Date: December 02, 2009 (last updated October 04, 2023)
SQL injection vulnerability in the TW Productfinder (tw_productfinder) extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
0
Attacker Value
Unknown
CVE-2009-2772
Disclosure Date: August 14, 2009 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in PG Roommate Finder Solution allow remote attackers to inject arbitrary web script or HTML via the part parameter to (1) quick_search.php and (2) viewprofile.php.
0
Attacker Value
Unknown
CVE-2008-5786
Disclosure Date: December 31, 2008 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in the Silva Find extension 1.1.5 and earlier in Silva 1.x before 1.6.3.2, Silva 2.0 before 2.0.12.2, and Silva 2.1 before 2.1.0.2 allows remote attackers to inject arbitrary web script or HTML via the fulltext parameter.
0
Attacker Value
Unknown
CVE-2008-5307
Disclosure Date: December 02, 2008 (last updated October 04, 2023)
SQL injection vulnerability in admin/index.php in PG Roommate Finder Solution allows remote attackers to execute arbitrary SQL commands via the login_lg parameter. NOTE: some of these details are obtained from third party information.
0
Attacker Value
Unknown
CVE-2007-4331
Disclosure Date: August 14, 2007 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in index.php in FindNix allows remote attackers to include the contents of arbitrary URLs and conduct cross-site scripting (XSS) attacks via a URL in the page parameter.
0
Attacker Value
Unknown
CVE-2007-2452
Disclosure Date: June 04, 2007 (last updated October 04, 2023)
Heap-based buffer overflow in the visit_old_format function in locate/locate.c in locate in GNU findutils before 4.2.31 might allow context-dependent attackers to execute arbitrary code via a long pathname in a locate database that has the old format, a different vulnerability than CVE-2001-1036.
0
Attacker Value
Unknown
CVE-2007-1838
Disclosure Date: April 03, 2007 (last updated October 04, 2023)
SQL injection vulnerability in view.php in the Friendfinder 3.3 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the id parameter.
0
