CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
46852 | CVE-2010-4268 | Candidate | SQL injection vulnerability in the Pulse Infotech Flip Wall (com_flipwall) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php. | Assigned (20101116) | None (candidate not yet proposed) | View | |
47108 | CVE-2010-4524 | Candidate | Cross-site scripting (XSS) vulnerability in lib/mhtxthtml.pl in MHonArc 2.6.16 allows remote attackers to inject arbitrary web script or HTML via a malformed start tag and end tag for a SCRIPT element, as demonstrated by <scr<body>ipt> and </scr<body>ipt> sequences. | Assigned (20101209) | None (candidate not yet proposed) | View | |
47364 | CVE-2010-4780 | Candidate | SQL injection vulnerability in the check_banlist function in includes/sessions.php in Enano CMS 1.1.7pl1; 1.0.6pl2; and possibly other versions before 1.1.8, 1.0.6pl3, and 1.1.7pl2 allows remote attackers to execute arbitrary SQL commands via the email parameter to index.php. NOTE: some of these details are obtained from third party information. | Assigned (20110407) | None (candidate not yet proposed) | View | |
47620 | CVE-2010-5036 | Candidate | SQL injection vulnerability in addsale.php in iScripts eSwap 2.0 allows remote attackers to execute arbitrary SQL commands via the type parameter. | Assigned (20111102) | None (candidate not yet proposed) | View | |
47876 | CVE-2010-5292 | Candidate | Amberdms Billing System (ABS) before 1.4.1, when a multi-instance installation is configured, might allow local users to obtain sensitive information by reading the cache in between runs of the include/cron/services_usage.php cron job. | Assigned (20140110) | None (candidate not yet proposed) | View |
Page 390 of 20943, showing 5 records out of 104715 total, starting on record 1946, ending on 1950