CVEs published in March 2010
515 vulnerabilities, 79 critical, 1 exploited.
- chris wederka tgm newsletterCross-site scripting (XSS) vulnerability in the TGM-Newsletter (tgm_newsletter) extension 0.0.2...4.3 Medium
- chris wederka tgm newsletterSQL injection vulnerability in the TGM-Newsletter (tgm_newsletter) extension 0.0.2 for TYPO3...7.5 High
- taskcenter recent project recentCross-site scripting (XSS) vulnerability in the UserTask Center, Recent (taskcenter_recent)...4.3 Medium
- marcus krause t3sec saltedpwTYPO3 Authentication Bypass via Salted user password hashes extension7.5 High
- mads brunn t3quixplorerCross-site scripting (XSS) vulnerability in the Typo3 Quixplorer (t3quixplorer) extension before...4.3 Medium
- sk-typo3 sk simplegalleryCross-site scripting (XSS) vulnerability in the Simple Gallery (sk_simplegallery) extension 0.0.9...4.3 Medium
- sk-typo3 sk simplegallerySQL injection vulnerability in the Simple Gallery (sk_simplegallery) extension 0.0.9 and earlier...7.5 High
- jochen rau sk bookreviewSQL injection vulnerability in the Book Reviews (sk_bookreview) extension 0.0.12 and earlier for...7.5 High
- laurent foulloy sav filter monthsSQL injection vulnerability in the SAV Filter Months (sav_filter_months) extension before 1.0.5...7.5 High
- laurent foulloy sav filter selectorsSQL injection vulnerability in the SAV Filter Selectors (sav_filter_selectors) extension before 1...7.5 High
- laurent foulloy sav filter abcSQL injection vulnerability in the SAV Filter Alphabetic (sav_filter_abc) extension before 1.0.9...7.5 High
- steffen kamper reports logviewCross-site scripting (XSS) vulnerability in the Reports Logfile View (reports_logview) extension...4.3 Medium
- fr.simon rundell pd diocesedatabaseSQL injection vulnerability in the Diocese of Portsmouth Database (pd_diocesedatabase) extension...7.5 High
- mathias schreiber nf cleandbSQL injection vulnerability in the CleanDB (nf_cleandb) extension 1.0.7 and earlier for TYPO3...7.5 High
- tim lochmueller mydashboardCross-site scripting (XSS) vulnerability in the myDashboard (mydashboard) extension 0.1.13 and...4.3 Medium
- matthias kall mk wastebasketSQL injection vulnerability in the MK Wastebasket (mk_wastebasket) extension 2.1.0 and earlier...7.5 High
- joachim-ruhs educatorSQL injection vulnerability in the Educator extension 0.1.5 for TYPO3 allows remote attackers to...7.5 High
- christian hennecke chsellectorCross-site scripting (XSS) vulnerability in the Sellector.com Widget Integration (chsellector)...4.3 Medium
- chi hoang ch lightemUnspecified vulnerability in the Power Extension Manager (ch_lightem) extension 1.0.34 and...5.0 Medium
- typo3 brainstormingSQL injection vulnerability in the Brainstorming extension 0.1.8 and earlier for TYPO3 allows...7.5 High
- mischa heimann yatseCross-site scripting (XSS) vulnerability in the Yet another TYPO3 search engine (YATSE) extension...4.3 Medium
- mischa heimann yatseSQL injection vulnerability in the Yet another TYPO3 search engine (YATSE) extension before 0.3.2...7.5 High
- allomani audio \& video librarySQL injection vulnerability in login.php in Allomani Audio & Video Library (Songs & Clips version...7.5 High
- allomani movies librarySQL injection vulnerability in login.php in Allomani Movies Library (Movies & Clips) 2.7.0 allows...7.5 High
- supercrackmunkey simpleloginsysSQL injection vulnerability in checkuser.php in SimpleLoginSys 0.5, when magic_quotes_gpc is...6.8 Medium
- technotoad tt web site managerSQL injection vulnerability in tt/index.php in TT Web Site Manager 0.5, when magic_quotes_gpc is...6.8 Medium
- boldfx model agency manager proSQL injection vulnerability in photos.php in Model Agency Manager PRO (formerly Modeling Agency...7.5 High
- x10media adult scriptSQL injection vulnerability in report.php in x10 Adult Media Script 1.7 allows remote attackers...7.5 High
- x10media adult scriptMultiple cross-site scripting (XSS) vulnerabilities in x10 Adult Media Script 1.7 allow remote...4.3 Medium
- questions answered answeredSQL injection vulnerability in the administrative interface in Questions Answered 1.3 allows...7.5 High
- junglescripts ajax short url scriptSQL injection vulnerability in x/login in JungleScripts Ajax Short Url Script allows remote...7.5 High
- olivier michaud pierre-yves quickdev4phpDirectory traversal vulnerability in download.php in Quickdev 4 PHP allows remote attackers to...5.0 Medium
- arabportal arab portalDirectory traversal vulnerability in modules/aljazeera/admin/setup.php in Arab Portal 2.2 and...5.1 Medium
- paymentprocessorscript ppscriptSQL injection vulnerability in shop.htm in PaymentProcessorScript.net PPScript allows remote...7.5 High
- netpet cmsDirectory traversal vulnerability in confirm.php in Netpet CMS 1.9 allows remote attackers to...7.5 High
- limnySQL injection vulnerability in the CheckLogin function in includes/functions.php in Limny 1.01,...6.8 Medium
- andrews-web aw-banneradMultiple SQL injection vulnerabilities in Admin/index.asp in Andrews-Web (A-W) BannerAd 1.0 allow...7.5 High
- gnudipSQL injection vulnerability in cgi-bin/gnudip.cgi in GnuDIP 2.1.1 allows remote attackers to...7.5 High
- bob jewell discloserSQL injection vulnerability in index.php in Discloser 0.0.4 rc2 allows remote attackers to...7.5 High
- gnome pangoArray index error in the hb_ot_layout_build_glyph_classes function in pango/opentype/hb-ot-layout...4.3 Medium
- broadcomUnspecified vulnerability in the Broadcom Integrated NIC Management Firmware 1.x before 1.40.0.0...10.0 High
- chris simon com abbrevDirectory traversal vulnerability in the Abbreviations Manager (com_abbrev) component 1.1 for...7.5 High
- acidcat cmsAcidcat CMS 3.5.3 and earlier stores sensitive information under the web root with insufficient...5.0 Medium
- utilo rezerviPHP remote file inclusion vulnerability in include/mail.inc.php in Rezervi 3.0.2 and earlier,...6.8 Medium
- joomlamo com cartweberpDirectory traversal vulnerability in the CARTwebERP (com_cartweberp) component 1.56.75 for Joomla...4.3 Medium
- templateplazza com tpjobsSQL injection vulnerability in the TPJobs (com_tpjobs) component for Joomla! allows remote...7.5 High
- mitchell sleeper l4d statsSQL injection vulnerability in player.php in Left 4 Dead (L4D) Stats 1.1 allows remote attackers...7.5 High
- obsession-design image-galleryCross-site scripting (XSS) vulnerability in display.php in Obsession-Design Image-Gallery (ODIG)...4.3 Medium
- kmsoft guestbookKMSoft Guestbook (aka GBook) 1.0 stores sensitive information under the web root with...5.0 Medium
- pordus pd portalPD PORTAL 4.0 stores sensitive information under the web root with insufficient access control,...5.0 Medium
- Show moreLoading…