Show filters
9 Total Results
Displaying 1-9 of 9
Sort by:
Attacker Value
Unknown
CVE-2024-51813
Disclosure Date: November 19, 2024 (last updated November 20, 2024)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Anantaddons, Anantsites Anant Addons for Elementor allows DOM-Based XSS.This issue affects Anant Addons for Elementor: from n/a through 1.0.5.
0
Attacker Value
Unknown
CVE-2014-125083
Disclosure Date: January 19, 2023 (last updated October 20, 2023)
A vulnerability has been found in Anant Labs google-enterprise-connector-dctm up to 3.2.3 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument username/domain leads to sql injection. The patch is named 6fba04f18ab7764002a1da308e7cd9712b501cb7. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218911.
0
Attacker Value
Unknown
CVE-2011-3702
Disclosure Date: September 23, 2011 (last updated October 04, 2023)
Ananta Gazelle 1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/template.php and certain other files.
0
Attacker Value
Unknown
CVE-2009-3171
Disclosure Date: September 11, 2009 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in Anantasoft Gazelle CMS 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) user parameter to user.php or (2) lookup parameter to search.php.
0
Attacker Value
Unknown
CVE-2009-3180
Disclosure Date: September 11, 2009 (last updated October 04, 2023)
Anantasoft Gazelle CMS 1.0 allows remote attackers to conduct a password reset for other users via a modified user parameter to renew.php.
0
Attacker Value
Unknown
CVE-2009-3181
Disclosure Date: September 11, 2009 (last updated October 04, 2023)
Directory traversal vulnerability in Anantasoft Gazelle CMS 1.0 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the customizetemplate parameter in a direct request to admin/settemplate.php.
0
Attacker Value
Unknown
CVE-2009-3182
Disclosure Date: September 11, 2009 (last updated October 04, 2023)
Unrestricted file upload vulnerability in admin/editor/filemanager/browser.html in Anantasoft Gazelle CMS 1.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in user/File/.
0
Attacker Value
Unknown
CVE-2009-3167
Disclosure Date: September 11, 2009 (last updated October 04, 2023)
Directory traversal vulnerability in index.php in Anantasoft Gazelle CMS 1.0, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the template parameter.
0
Attacker Value
Unknown
CVE-2008-6665
Disclosure Date: April 08, 2009 (last updated October 04, 2023)
change.php in Ananta CMS 1.0b5, with magic_quotes_gpc disabled, allows remote attackers to gain administrator privileges via a crafted email parameter, possibly related to code injection.
0
