| Max CVSS | 7.5 | Min CVSS | 4.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2012-2367 | 4.0 |
Moodle 1.9.x before 1.9.18, 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to bypass the moodle/calendar:manageownentries capability requirement and add a calendar entry via a New Entry action.
|
01-12-2020 - 14:43 | 21-07-2012 - 03:38 | |
| CVE-2012-6562 | 6.8 |
engine/lib/users.php in Elgg before 1.8.5 does not properly specify permissions for the useradd action, which allows remote attackers to create arbitrary accounts.
|
29-08-2017 - 01:32 | 23-05-2013 - 15:55 | |
| CVE-2012-6554 | 6.5 |
functions/html_to_text.php in the Chat module before 1.5.2 for activeCollab allows remote authenticated users to execute arbitrary PHP code via the message[message_text] parameter to chat/add_messag, which is not properly handled when executing the p
|
29-08-2017 - 01:32 | 23-05-2013 - 15:55 | |
| CVE-2012-6563 | 4.3 |
engine/lib/access.php in Elgg before 1.8.5 does not properly clear cached access lists during plugin boot, which allows remote attackers to read private entities via unspecified vectors.
|
29-08-2017 - 01:32 | 23-05-2013 - 15:55 | |
| CVE-2012-6561 | 4.3 |
Cross-site scripting (XSS) vulnerability in engine/lib/views.php in Elgg before 1.8.5 allows remote attackers to inject arbitrary web script or HTML via the view parameter to index.php. NOTE: some of these details are obtained from third party infor
|
29-08-2017 - 01:32 | 23-05-2013 - 15:55 | |
| CVE-2012-2936 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) user or (2) page parameter to (a) admin/admin_comments.php or (b) admin/admin_links.php; or list p
|
29-08-2017 - 01:31 | 27-05-2012 - 20:55 | |
| CVE-2012-2937 | 7.5 |
Multiple SQL injection vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to execute arbitrary SQL commands via the (1) list parameter in a move action to admin/admin_index.php, (2) display parameter in a minimize action to admin/admin_
|
29-08-2017 - 01:31 | 27-05-2012 - 20:55 | |
| CVE-2012-2941 | 4.3 |
Cross-site scripting (XSS) vulnerability in search/ in Yandex.Server 2010 9.0 Enterprise allows remote attackers to inject arbitrary web script or HTML via the text parameter.
|
29-08-2017 - 01:31 | 27-05-2012 - 20:55 | |
| CVE-2012-2762 | 7.5 |
SQL injection vulnerability in include/functions_trackbacks.inc.php in Serendipity 1.6.2 allows remote attackers to execute arbitrary SQL commands via the url parameter to comment.php.
|
29-08-2017 - 01:31 | 07-06-2012 - 19:55 | |
| CVE-2012-2436 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to inject arbitrary web script or HTML via (1) an arbitrary parameter in a move or (2) minimize action to admin/admin_index.php; (3) the karma_userna
|
29-08-2017 - 01:31 | 27-05-2012 - 20:55 | |
| CVE-2007-4437 | 6.8 |
SQL injection vulnerability in albums.php in Ampache before 3.3.3.5 allows remote attackers to execute arbitrary SQL commands via the match parameter. NOTE: some details are obtained from third party information.
|
29-07-2017 - 01:32 | 20-08-2007 - 22:17 | |
| CVE-2005-3634 | 5.0 |
frameset.htm in the BSP runtime in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to log users out and redirect them to arbitrary web sites via a close command in the sap-sessioncmd parameter and a URL in the sap-exiturl p
|
11-07-2017 - 01:33 | 16-11-2005 - 21:22 | |
| CVE-2002-0656 | 7.5 |
Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a large client master key in SSL2 or (2) a large session ID in SSL3.
|
10-09-2008 - 19:12 | 12-08-2002 - 04:00 |