Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2011
September

CVEs published in September 2011

403 vulnerabilities, 66 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

newgensoft omnidocsNewgen OmniDocs allows remote attackers to bypass intended access restrictions via (1) a modified...CVE-2011-3645Public exploit7.5 HighSeptember 27, 2011
manageengine eventlog analyzerMultiple cross-site scripting (XSS) vulnerabilities in ManageEngine EventLog Analyzer 6.1 allow...CVE-2010-48414.3 MediumSeptember 27, 2011
manageengine eventlog analyzerMultiple buffer overflows in the Syslog server in ManageEngine EventLog Analyzer 6.1 allow remote...CVE-2010-48407.5 HighSeptember 27, 2011
eclimeCross-site scripting (XSS) vulnerability in login.php in Eclime 1.1.2b allows remote attackers to...CVE-2010-4852Public exploit4.3 MediumSeptember 27, 2011
eclimeMultiple SQL injection vulnerabilities in Eclime 1.1.2b allow remote attackers to execute...CVE-2010-4851Public exploit7.5 HighSeptember 27, 2011
diferiorMultiple cross-site scripting (XSS) vulnerabilities in Diferior 8.03 allow remote attackers to...CVE-2010-4850Public exploit4.3 MediumSeptember 27, 2011
alibabaclone alibaba clone b2bSQL injection vulnerability in countrydetails.php in Alibaba Clone B2B 3.4 allows remote...CVE-2010-4849Public exploit7.5 HighSeptember 27, 2011
axscripts axslinksMultiple cross-site scripting (XSS) vulnerabilities in addlink.php in AXScripts AxsLinks 0.3...CVE-2010-48484.3 MediumSeptember 27, 2011
mhproducts mhp downloadshopSQL injection vulnerability in view_item.php in MH Products MHP Downloadshop allows remote...CVE-2010-4847Public exploit7.5 HighSeptember 27, 2011
mhproducts pay pal shop digitalSQL injection vulnerability in view_item.php in MH Products Pay Pal Shop Digital allows remote...CVE-2010-4846Public exploit7.5 HighSeptember 27, 2011
mhproducts projekt shopMultiple SQL injection vulnerabilities in MH Products Projekt Shop allow remote attackers to...CVE-2010-4845Public exploit7.5 HighSeptember 27, 2011
mhproducts easy online shopSQL injection vulnerability in content.php in MH Products Easy Online Shop allows remote...CVE-2010-4844Public exploit7.5 HighSeptember 27, 2011
phpwebscripts ad manager proSQL injection vulnerability in website-page.php in PHP Web Scripts Ad Manager Pro 3.0 allows...CVE-2010-4843Public exploit7.5 HighSeptember 27, 2011
mhproducts download centerSQL injection vulnerability in admin/login.php in MHP DownloadScript (aka MH Products Download...CVE-2010-4842Public exploit7.5 HighSeptember 27, 2011
zikulaZikula 1.2.4 allows remote attackers to obtain sensitive information via a direct request to a ...CVE-2011-38265.0 MediumSeptember 24, 2011
zend framework, server +1 moreZend Framework 1.11.3 in Zend Server CE 5.1.0 allows remote attackers to obtain sensitive...CVE-2011-38255.0 MediumSeptember 24, 2011
yourlsYour Own URL Shortener (YOURLS) 1.5 allows remote attackers to obtain sensitive information via a...CVE-2011-38245.0 MediumSeptember 24, 2011
yamamahYamamah 1.0 allows remote attackers to obtain sensitive information via a direct request to a ...CVE-2011-38235.0 MediumSeptember 24, 2011
xoopsXOOPS 2.5.0 allows remote attackers to obtain sensitive information via a direct request to a ...CVE-2011-38225.0 MediumSeptember 24, 2011
xajax-project xajaxxajax 0.6 beta1 allows remote attackers to obtain sensitive information via a direct request to a...CVE-2011-38215.0 MediumSeptember 24, 2011
webmastersite wsn softwareWSN Software 6.0.6 allows remote attackers to obtain sensitive information via a direct request...CVE-2011-38205.0 MediumSeptember 24, 2011
53x11 wow server statusWoW Server Status 4.1 allows remote attackers to obtain sensitive information via a direct...CVE-2011-38195.0 MediumSeptember 24, 2011
wordpressWordPress 2.9.2 and 3.0.4 allows remote attackers to obtain sensitive information via a direct...CVE-2011-38185.0 MediumSeptember 24, 2011
websitebaker2 website bakerWebsite Baker 2.8.1 allows remote attackers to obtain sensitive information via a direct request...CVE-2011-38175.0 MediumSeptember 24, 2011
webinsta mailing list managerWEBinsta mailing list manager 1.3e allows remote attackers to obtain sensitive information via a...CVE-2011-38165.0 MediumSeptember 24, 2011
webidsupport webidWeBid 1.0.0 allows remote attackers to obtain sensitive information via a direct request to a ...CVE-2011-38155.0 MediumSeptember 24, 2011
k5n webcalendarWebCalendar 1.2.3, and other versions before 1.2.5, allows remote attackers to obtain sensitive...CVE-2011-38145.0 MediumSeptember 24, 2011
vwar virtual warVirtual War (aka VWar) 1.5.0r15 allows remote attackers to obtain sensitive information via a...CVE-2011-38135.0 MediumSeptember 24, 2011
vanillaforums vanillaVanilla 2.0.16 allows remote attackers to obtain sensitive information via a direct request to a ...CVE-2011-38125.0 MediumSeptember 24, 2011
tomatocartTomatoCart 1.1.3 allows remote attackers to obtain sensitive information via a direct request to...CVE-2011-38115.0 MediumSeptember 24, 2011
tinywebgalleryTinyWebGallery (TWG) 1.8.3 allows remote attackers to obtain sensitive information via a direct...CVE-2011-38105.0 MediumSeptember 24, 2011
thehostingtoolTheHostingTool (THT) 1.2.3 allows remote attackers to obtain sensitive information via a direct...CVE-2011-38095.0 MediumSeptember 24, 2011
thebuggenie the bug genieThe Bug Genie 2.1.2 allows remote attackers to obtain sensitive information via a direct request...CVE-2011-38085.0 MediumSeptember 24, 2011
textpatternTextpattern 4.2.0 allows remote attackers to obtain sensitive information via a direct request to...CVE-2011-38075.0 MediumSeptember 24, 2011
tecnick tcexamTCExam 11.1.015 allows remote attackers to obtain sensitive information via a direct request to a...CVE-2011-38065.0 MediumSeptember 24, 2011
taskfreak taskfreak\! multi-mysqlTaskFreak! multi-mysql-0.6 allows remote attackers to obtain sensitive information via a direct...CVE-2011-38055.0 MediumSeptember 24, 2011
basic-cms sweetriceSweetRice 0.7.1 allows remote attackers to obtain sensitive information via a direct request to a...CVE-2011-38045.0 MediumSeptember 24, 2011
sugarcrmSugarCRM 6.1.0 allows remote attackers to obtain sensitive information via a direct request to a ...CVE-2011-38035.0 MediumSeptember 24, 2011
status statusnetStatusNet 0.9.6 allows remote attackers to obtain sensitive information via a direct request to a...CVE-2011-38025.0 MediumSeptember 24, 2011
simpletestSimpleTest 1.0.1 allows remote attackers to obtain sensitive information via a direct request to...CVE-2011-38015.0 MediumSeptember 24, 2011
s9y serendipitySerendipity 1.5.5 allows remote attackers to obtain sensitive information via a direct request to...CVE-2011-38005.0 MediumSeptember 24, 2011
elazos reosReOS 2.0.5 allows remote attackers to obtain sensitive information via a direct request to a .php...CVE-2011-37995.0 MediumSeptember 24, 2011
rapidleechRapid Leech 2.3-v42-svn322 allows remote attackers to obtain sensitive information via a direct...CVE-2011-37985.0 MediumSeptember 24, 2011
projectpierProjectPier 0.8.0.3 allows remote attackers to obtain sensitive information via a direct request...CVE-2011-37975.0 MediumSeptember 24, 2011
prestashopPrestaShop 1.4.0.6 allows remote attackers to obtain sensitive information via a direct request...CVE-2011-37965.0 MediumSeptember 24, 2011
betella podcast generatorPodcast Generator 1.3 allows remote attackers to obtain sensitive information via a direct...CVE-2011-37955.0 MediumSeptember 24, 2011
pligg cmsPligg CMS 1.1.3 allows remote attackers to obtain sensitive information via a direct request to a...CVE-2011-37945.0 MediumSeptember 24, 2011
lucidcrew pixiePixie 1.04 allows remote attackers to obtain sensitive information via a direct request to a .php...CVE-2011-37935.0 MediumSeptember 24, 2011
pixelpostPixelpost 1.7.3 allows remote attackers to obtain sensitive information via a direct request to a...CVE-2011-37925.0 MediumSeptember 24, 2011
matomoPiwik 1.1 allows remote attackers to obtain sensitive information via a direct request to a .php...CVE-2011-37915.0 MediumSeptember 24, 2011
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open