Show filters
118 Total Results
Displaying 61-70 of 118
Sort by:
Attacker Value
Unknown
CVE-2012-5199
Disclosure Date: February 16, 2013 (last updated October 05, 2023)
Unspecified vulnerability in HP ArcSight Connector Appliance 6.3 and earlier and ArcSight Logger 5.2 and earlier allows remote authenticated users to execute arbitrary code via unknown vectors.
0
Attacker Value
Unknown
CVE-2012-5198
Disclosure Date: February 16, 2013 (last updated October 05, 2023)
Unspecified vulnerability in HP ArcSight Connector Appliance before 6.3 and ArcSight Logger 5.2 and earlier allows remote attackers to obtain sensitive information via unknown vectors.
0
Attacker Value
Unknown
CVE-2012-5289
Disclosure Date: October 04, 2012 (last updated October 05, 2023)
Multiple SQL injection vulnerabilities in Plogger 1.0 RC1 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) index.php or (2) gallery.php.
0
Attacker Value
Unknown
CVE-2012-2960
Disclosure Date: August 08, 2012 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in the import functionality in HP ArcSight Connector appliance 6.2.0.6244.0 and ArcSight Logger appliance 5.2.0.6288.0 allows remote attackers to inject arbitrary web script or HTML via a crafted file.
0
Attacker Value
Unknown
CVE-2010-4876
Disclosure Date: October 07, 2011 (last updated October 04, 2023)
SQL injection vulnerability in viewpost.php in mBlogger 1.0.04 allows remote attackers to execute arbitrary SQL commands via the postID parameter.
0
Attacker Value
Unknown
CVE-2009-5090
Disclosure Date: September 12, 2011 (last updated October 04, 2023)
SQL injection vulnerability in editcomments.php in Bloggeruniverse Beta 2, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter and possibly other unspecified vectors.
0
Attacker Value
Unknown
CVE-2011-0728
Disclosure Date: March 29, 2011 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in templatefunctions.py in Loggerhead before 1.18.1 allows remote authenticated users to inject arbitrary web script or HTML via a filename, which is not properly handled in a revision view.
0
Attacker Value
Unknown
CVE-2010-2146
Disclosure Date: June 03, 2010 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in banned.php in Visitor Logger allows remote attackers to execute arbitrary PHP code via a URL in the VL_include_path parameter.
0
Attacker Value
Unknown
CVE-2009-4253
Disclosure Date: December 10, 2009 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in dspStats.php in PowerPhlogger 2.2.5 allows remote attackers to inject arbitrary web script or HTML via the edit parameter.
0
Attacker Value
Unknown
CVE-2009-4254
Disclosure Date: December 10, 2009 (last updated October 04, 2023)
PowerPhlogger 2.2.5 allows remote attackers to obtain sensitive information via a direct request to (1) edCss.inc.php, (2) foot.inc.php, (3) get_csscolors.inc.php, (4) head.inc.php, (5) head_stuff.inc.php, (6) loglist.inc.php, and (7) pphlogger_send.inc.php in include/, which reveals the installation path in an error message.
0
