Show filters
570 Total Results
Displaying 481-490 of 570
Sort by:
Attacker Value
Unknown
CVE-2010-0955
Disclosure Date: March 10, 2010 (last updated October 04, 2023)
SQL injection vulnerability in index.php in Bild Flirt Community 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
0
Attacker Value
Unknown
CVE-2010-0799
Disclosure Date: March 02, 2010 (last updated October 04, 2023)
Directory traversal vulnerability in misc/tell_a_friend/tell.php in phpunity.newsmanager allows remote attackers to read arbitrary files via a .. (dot dot) in the id parameter.
0
Attacker Value
Unknown
CVE-2010-0328
Disclosure Date: January 15, 2010 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in the Unit Converter (cs2_unitconv) extension 1.0.4 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
0
Attacker Value
Unknown
CVE-2009-2913
Disclosure Date: August 21, 2009 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in index.php in XZero Community Classifieds 4.97.8 allows remote attackers to inject arbitrary web script or HTML via the URI. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
0
Attacker Value
Unknown
CVE-2009-2914
Disclosure Date: August 21, 2009 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in index.php in XZero Community Classifieds 4.97.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the name of an uploaded file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
0
Attacker Value
Unknown
CVE-2009-2893
Disclosure Date: August 20, 2009 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in index.php in XZero Community Classifieds 4.97.8 allow remote attackers to inject arbitrary web script or HTML via (1) the postevent parameter in a post action or (2) the _xzcal_y parameter.
0
Attacker Value
Unknown
CVE-2009-1652
Disclosure Date: May 16, 2009 (last updated October 04, 2023)
admin/adminaddeditdetails.php in Business Community Script does not properly restrict access, which allows remote attackers to gain privileges and add administrators via a direct request.
0
Attacker Value
Unknown
CVE-2009-1651
Disclosure Date: May 16, 2009 (last updated October 04, 2023)
SQL injection vulnerability in admin/member_details.php in 2daybiz Business Community Script allows remote attackers to execute arbitrary SQL commands via the mid parameter.
0
Attacker Value
Unknown
CVE-2008-6160
Disclosure Date: February 18, 2009 (last updated October 04, 2023)
Semantically-Interconnected Online Communities (SIOC) 5.x before 5.x-1.2 and 6.x before 6.x-1.1, a module for Drupal, does not properly implement menu and database APIs, which allows remote attackers to obtain usernames and read hashed emails and comments via unspecified vectors.
0
Attacker Value
Unknown
CVE-2009-0406
Disclosure Date: February 03, 2009 (last updated October 04, 2023)
SQL injection vulnerability in index.php in Community CMS 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
0
