Browse CVE records published in November 2010, with severity, affected products, CWE, KEV, and source-backed vulnerability context.
Showing 50 of 429 matching CVEs · Page 3 of 9.
SQL injection vulnerability in googlemap/index.php in EMO Realty Manager allows remote attackers to execute arbitrary SQL commands via the cat1 parameter.
Published Nov 2, 2011 · Updated Aug 7, 2024
SQL injection vulnerability in view.php in esoftpro Online Contact Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Published Nov 1, 2011 · Updated Aug 7, 2024
SQL injection vulnerability in stats.php in Elite Gaming Ladders 3.0 allows remote attackers to execute arbitrary SQL commands via the account parameter.
Published Nov 2, 2011 · Updated Aug 7, 2024
Cross-site scripting (XSS) vulnerability in pages/match_report.php in UTStats Beta 4 and earlier allows remote attackers to inject arbitrary web script or HTML via the mid parameter.
Published Nov 2, 2011 · Updated Aug 7, 2024
SQL injection vulnerability in profile.php in iScripts CyberMatch 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Published Nov 1, 2011 · Updated Aug 7, 2024
SQL injection vulnerability in login/login_index.php in MCLogin System 1.1 and 1.2 allows remote attackers to execute arbitrary SQL commands via the myusername parameter (aka Username field) in a do_login action. NOTE: some of these details are obtained from third party information.
Published Nov 2, 2011 · Updated Aug 7, 2024
SQL injection vulnerability in main.asp in Ziggurat Farsi CMS allows remote attackers to execute arbitrary SQL commands via the grp parameter.
Published Nov 1, 2011 · Updated Aug 7, 2024
PHP remote file inclusion vulnerability in ardeaCore/lib/core/ardeaInit.php in ardeaCore PHP Framework 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the pathForArdeaCore parameter. NOTE: some of these details are obtained from third party information.
Published Nov 2, 2011 · Updated Aug 7, 2024
SQL injection vulnerability in the Payments Plus component 2.1.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the type parameter to add.html.
Published Nov 1, 2011 · Updated Aug 7, 2024
SQL injection vulnerability in ogp_show.php in esoftpro Online Guestbook Pro 5.1 allows remote attackers to execute arbitrary SQL commands via the search parameter.
Published Nov 1, 2011 · Updated Aug 7, 2024
SQL injection vulnerability in view_photo.php in 2daybiz Network Community Script allows remote attackers to execute arbitrary SQL commands via the alb parameter.
Published Nov 2, 2011 · Updated Aug 7, 2024
SQL injection vulnerability in the NeoRecruit (com_neorecruit) component 1.6.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in an offer_view action to index.php, a different vector than CVE-2007-4506.
Published Nov 1, 2011 · Updated Aug 7, 2024
SQL injection vulnerability in the Jobs Pro component 1.6.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the detailed_results parameter to search_jobs.html.
Published Nov 1, 2011 · Updated Aug 7, 2024
SQL injection vulnerability in default.asp in KMSoft Guestbook (aka GBook) allows remote attackers to execute arbitrary SQL commands via the p parameter.
Published Nov 1, 2011 · Updated Aug 7, 2024
SQL injection vulnerability in index.asp in Digital Interchange Calendar 5.8.5 allows remote attackers to execute arbitrary SQL commands via the intDivisionID parameter.
Published Nov 2, 2011 · Updated Aug 7, 2024
SQL injection vulnerability in view_group.asp in Digital Interchange Document Library 5.8.5 allows remote attackers to execute arbitrary SQL commands via the intGroupID parameter.
Published Nov 2, 2011 · Updated Aug 7, 2024
SQL injection vulnerability in standings.php in Elite Gaming Ladders 3.5 allows remote attackers to execute arbitrary SQL commands via the ladder[id] parameter.
Published Nov 2, 2011 · Updated Aug 7, 2024
Cross-site scripting (XSS) vulnerability in modules/slideshowmodule/slideshow.js.php in Exponent CMS 0.97.0 allows remote attackers to inject arbitrary web script or HTML via the u parameter.
Published Nov 1, 2011 · Updated Aug 7, 2024
SQL injection vulnerability in the NinjaMonials (com_ninjamonials) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a display action to index.php.
Published Nov 1, 2011 · Updated Aug 7, 2024
SQL injection vulnerability in the eventcal (com_eventcal) component 1.6.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php.
Published Nov 1, 2011 · Updated Aug 7, 2024
SQL injection vulnerability in the Front-edit Address Book (com_addressbook) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a contact action to index.php.
Published Nov 1, 2011 · Updated Aug 7, 2024
Cross-site scripting (XSS) vulnerability in notes.php in My Kazaam Notes Management System allows remote attackers to inject arbitrary web script or HTML via vectors involving the "Enter Reference Number Below" text box.
Published Nov 1, 2011 · Updated Aug 7, 2024
PHP remote file inclusion vulnerability in mod_chatting/themes/default/header.php in Family Connections Who is Chatting 2.2.3 allows remote attackers to execute arbitrary PHP code via a URL in the TMPL[path] parameter.
Published Nov 1, 2011 · Updated Aug 7, 2024
SQL injection vulnerability in address_book/contacts.php in My Kazaam Address & Contact Organizer allows remote attackers to execute arbitrary SQL commands via the var1 parameter.
Published Nov 1, 2011 · Updated Aug 7, 2024
SQL injection vulnerability in the webmaster-tips.net Flash Gallery (com_wmtpic) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php.
Published Nov 1, 2011 · Updated Aug 7, 2024
SQL injection vulnerability in trackads.php in YourFreeWorld Banner Management allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information.
Published Nov 1, 2011 · Updated Aug 7, 2024
Cross-site scripting (XSS) vulnerability in image/view.php in CANDID allows remote attackers to inject arbitrary web script or HTML via the image_id parameter.
Published Nov 1, 2011 · Updated Aug 7, 2024
Cross-site scripting (XSS) vulnerability in search/search.php in MetInfo 3.0 allows remote attackers to inject arbitrary web script or HTML via the searchword parameter (aka Search Box field). NOTE: some of these details are obtained from third party information.
Published Nov 1, 2011 · Updated Aug 7, 2024
SQL injection vulnerability in info.php in BrotherScripts (BS) and ScriptsFeed Auto Dealer allows remote attackers to execute arbitrary SQL commands via the id parameter.
Published Nov 1, 2011 · Updated Aug 7, 2024
SQL injection vulnerability in packagedetails.php in iScripts ReserveLogic 1.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter.
Published Nov 1, 2011 · Updated Aug 7, 2024
SQL injection vulnerability in handlers/getpage.php in Wiki Web Help 0.28 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Published Nov 1, 2011 · Updated Aug 7, 2024
SQL injection vulnerability in menu.php in the Canteen (com_canteen) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the mealid parameter to index.php.
Published Nov 1, 2011 · Updated Aug 7, 2024
SQL injection vulnerability in image/view.php in CANDID allows remote attackers to execute arbitrary SQL commands via the image_id parameter.
Published Nov 1, 2011 · Updated Aug 7, 2024
Cross-site scripting (XSS) vulnerability in VideoWhisper PHP 2 Way Video Chat component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the r parameter to index.php.
Published Nov 2, 2011 · Updated Aug 7, 2024
SQL injection vulnerability in index.php in YPNinc JokeScript allows remote attackers to execute arbitrary SQL commands via the ypncat_id parameter.
Published Nov 1, 2011 · Updated Aug 7, 2024
SQL injection vulnerability in the Techjoomla SocialAds For JomSocial (com_socialads) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the ads description field in a showad action to index.php.
Published Nov 1, 2011 · Updated Aug 7, 2024
pithos before 0.3.5 allows overwrite of arbitrary files via symlinks.
Published Nov 13, 2019 · Updated Aug 7, 2024
poppler before 0.16.3 has malformed commands that may cause corruption of the internal stack.
Published Nov 13, 2019 · Updated Aug 7, 2024
Unspecified vulnerability in statusnet through 2010 due to the way addslashes are used in SQL string escapes..
Published Nov 20, 2019 · Updated Aug 7, 2024
In ConsoleKit before 0.4.2, an intended security policy restriction bypass was found. This flaw allows an authenticated system user to escalate their privileges by initiating a remote VNC session.
Published Nov 13, 2019 · Updated Aug 7, 2024
udisks before 1.0.3 allows a local user to load arbitrary Linux kernel modules.
Published Nov 13, 2019 · Updated Aug 7, 2024
Cross-site scripting (XSS) vulnerability in statusnet through 2010 in error message contents.
Published Nov 20, 2019 · Updated Aug 7, 2024
PHP5 before 5.4.4 allows passing invalid utf-8 strings via the xmlTextWriterWriteAttribute, which are then misparsed by libxml2. This results in memory leak into the resulting output.
Published Nov 13, 2019 · Updated Aug 7, 2024
An integer overflow condition in poppler before 0.16.3 can occur when parsing CharCodes for fonts.
Published Nov 13, 2019 · Updated Aug 7, 2024
offlineimap before 6.3.2 does not check for SSL server certificate validation when "ssl = yes" option is specified which can allow man-in-the-middle attacks.
Published Nov 13, 2019 · Updated Aug 7, 2024
offlineimap before 6.3.4 added support for SSL server certificate validation but it is still possible to use SSL v2 protocol, which is a flawed protocol with multiple security deficiencies.
Published Nov 13, 2019 · Updated Aug 7, 2024
SQL injection vulnerability in managechat.php in Collabtive 0.65 allows remote attackers to execute arbitrary SQL commands via the chatstart[USERTOID] cookie in a pull action.
Published Nov 16, 2010 · Updated Aug 7, 2024
Free Simple Software 1.0 stores passwords in cleartext, which allows context-dependent attackers to obtain sensitive information.
Published Nov 26, 2010 · Updated Aug 7, 2024
epan/dissectors/packet-zbee-zcl.c in the ZigBee ZCL dissector in Wireshark 1.4.0 through 1.4.1 allows remote attackers to cause a denial of service (infinite loop) via a crafted ZCL packet, related to Discover Attributes.
Published Nov 26, 2010 · Updated Aug 7, 2024
SQL injection vulnerability in the download module in Free Simple Software 1.0 allows remote attackers to execute arbitrary SQL commands via the downloads_id parameter in a download_now action to index.php.
Published Nov 26, 2010 · Updated Aug 7, 2024
