Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-3822 State: PUBLISHED Published: 2011-09-24T00:00:00Z Last Updated: 2024-09-16T19:36:38.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: XOOPS 2.5.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/system/xoops_version.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/xoops-2.5.0 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3823 State: PUBLISHED Published: 2011-09-24T00:00:00Z Last Updated: 2024-09-16T23:21:02.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: Yamamah 1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/default/index.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/yamamah_1.0 - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3824 State: PUBLISHED Published: 2011-09-24T00:00:00Z Last Updated: 2024-09-16T23:20:35.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: Your Own URL Shortener (YOURLS) 1.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by includes/auth.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/yourls-1.5 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3825 State: PUBLISHED Published: 2011-09-24T00:00:00Z Last Updated: 2024-09-17T01:16:53.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zend Framework 1.11.3 in Zend Server CE 5.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by Validate.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/Zend - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3826 State: PUBLISHED Published: 2011-09-24T00:00:00Z Last Updated: 2024-09-16T23:11:17.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zikula 1.2.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/voodoodolly/version.php and certain other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/27/6 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/zikula-1.2.4 - http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
CVE ID: CVE-2011-3827 State: PUBLISHED Published: 2012-09-19T10:00:00 Last Updated: 2024-08-06T23:46:03.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: The iCalendar component in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before Support Pack 3 allows remote attackers to cause a denial of service (out-of-bounds read and daemon crash) via a crafted date-time string in a .ics attachment. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/kb/doc.php?id=7010767 - http://secunia.com/secunia_research/2012-30/ - http://archives.neohapsis.com/archives/bugtraq/2012-09/0075.html - https://bugzilla.novell.com/show_bug
earch/2012-30/ - http://archives.neohapsis.com/archives/bugtraq/2012-09/0075.html - https://bugzilla.novell.com/show_bug.cgi?id=733887 - http://www.securitytracker.com/id?1027540
CVE ID: CVE-2011-3828 State: PUBLISHED Published: 2011-11-26T02:00:00 Last Updated: 2024-08-06T23:46:03.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: DVRemoteAx.ax 2.1.0.39 in the DVR Remote ActiveX control allows remote attackers to execute arbitrary code via a crafted DVRobot.dll file in a manifest directory on a web server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/520549/100/100/threaded - http://secunia.com/secunia_research/2011-80/
CVE ID: CVE-2011-3829 State: PUBLISHED Published: 2012-01-29T02:00:00 Last Updated: 2024-08-06T23:46:03.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to obtain sensitive information via the file name, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/50632 - http://secunia.com/secunia_research/2011-75/ - http://www.exploit-db.com/exploits/18108 - http://secunia.com/advisories/45453 - http://www.osvdb.org/76999 - http://packetstormsecurity.org/files/106933/sit_file_upload.rb.
unia.com/advisories/45453 - http://www.osvdb.org/76999 - http://packetstormsecurity.org/files/106933/sit_file_upload.rb.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/71233
CVE ID: CVE-2011-3830 State: PUBLISHED Published: 2012-01-29T02:00:00 Last Updated: 2024-08-06T23:46:03.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in Support Incident Tracker (aka SiT!) 3.65 allows remote attackers to inject arbitrary web script or HTML via the search_string parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/50632 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71234 - http://secunia.com/secunia_research/2011-76/ - http://secunia.com/advisories/45453 - http://www.osvdb.org/77000
CVE ID: CVE-2011-3831 State: PUBLISHED Published: 2012-01-29T02:00:00 Last Updated: 2024-08-06T23:46:03.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in incident_attachments.php in Support Incident Tracker (aka SiT!) 3.65 allows remote attackers to execute arbitrary SQL commands via an uploaded file with a crafted file name. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/50632 - http://www.kb.cert.org/vuls/id/576355 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71235 - http://secunia.com/advisories/45453 - http://www.osvdb.org/77001 - http://secunia.com/secunia_research/2011-77/
CVE ID: CVE-2011-3832 State: PUBLISHED Published: 2012-01-29T02:00:00 Last Updated: 2024-08-06T23:46:03.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in config.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated administrators to execute arbitrary PHP code via the application_name parameter in a save action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/50632 - http://www.osvdb.org/77002 - http://secunia.com/advisories/45453 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71236 - http://secunia.com/secunia_research/2011-78/
CVE ID: CVE-2011-3833 State: PUBLISHED Published: 2012-01-29T02:00:00 Last Updated: 2024-08-06T23:46:03.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to execute arbitrary PHP code by uploading a PHP file, then accessing it via a direct request to the file in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/71651 - http://www.securityfocus.com/bid/50632 - http://www.kb.cert.org/vuls/id/576355 - http://secunia.com/secunia_research/2011-79/ - htt
securityfocus.com/bid/50632 - http://www.kb.cert.org/vuls/id/576355 - http://secunia.com/secunia_research/2011-79/ - http://www.securityfocus.com/bid/50896 - http://www.exploit-db.com/exploits/18108 - http://secunia.com/advisories/45453 - http://packetstormsecurity.org/files/106933/sit_file_upload.rb.txt - http://www.osvdb.org/77003 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71237
CVE ID: CVE-2011-3834 State: PUBLISHED Published: 2011-12-16T19:00:00 Last Updated: 2024-08-06T23:46:03.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the in_avi.dll plugin in Winamp before 5.623 allow remote attackers to execute arbitrary code via an AVI file with a crafted value for (1) the number of streams or (2) the size of the RIFF INFO chunk, leading to a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2011-81/ - http://forums.winamp.com/showthread.php?t=332010 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14981 - ht
wthread.php?t=332010 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14981 - http://secunia.com/advisories/46882
CVE ID: CVE-2011-3835 State: PUBLISHED Published: 2011-12-24T19:00:00 Last Updated: 2024-08-06T23:46:03.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Wuzly 2.0 allow remote attackers to inject arbitrary web script or HTML via the Referer header to (1) admin/login.php and (2) admin/404.php; the (3) q parameter to search.php; the (4) theme_name parameter to theme_settings.php, (5) extension_name parameter to extension_settings.php, (6) q parameter to search.php, (7) type parameter to comments.php, sort parameter to (8) pages.php and (9) posts.php, and the (10) type and (11) q parameter to media.php in admin/; the sidebar
arameter to (8) pages.php and (9) posts.php, and the (10) type and (11) q parameter to media.php in admin/; the sidebar parameter to (12) add_widget.php and (13) widgets.php, id parameter to (14) category_delete.php, (15) comment.php, (16) page_delete.php, and (17) post_delete.php, (18) type parameter to media.php, and (19) id and (20) sidebar parameter to widget_delete.php in mobile/; and the (21) name, (22) email, (23) website, and (24) comment parameters to index.php; and the (25) username parameter to admin/login.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/77929 - http://osvdb.org/77938 - http://secunia.com/secunia_research/2011-86/ - http://osv
eferences: - http://osvdb.org/77929 - http://osvdb.org/77938 - http://secunia.com/secunia_research/2011-86/ - http://osvdb.org/77914 - http://osvdb.org/77931 - http://osvdb.org/77923 - http://osvdb.org/77928 - http://osvdb.org/77925 - http://secunia.com/secunia_research/2011-84/ - http://osvdb.org/77933 - http://osvdb.org/77921 - http://secunia.com/advisories/46163 - http://osvdb.org/77922 - http://osvdb.org/77927 - http://osvdb.org/77924 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71906 - http://osvdb.org/77935 - http://osvdb.org/77936 - http://osvdb.org/77934 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71902 - http://osvdb.org/77930 - http://osvdb.org/77932 - http://o
https://exchange.xforce.ibmcloud.com/vulnerabilities/71902 - http://osvdb.org/77930 - http://osvdb.org/77932 - http://osvdb.org/77926 - http://osvdb.org/77937 - http://osvdb.org/77920 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71899
CVE ID: CVE-2011-3836 State: PUBLISHED Published: 2011-12-24T19:00:00 Last Updated: 2024-08-06T23:46:03.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Wuzly 2.0 allow remote attackers to hijack the authentication of administrators for requests that (1) add an administrator, (2) perform cross-site scripting (XSS), (3) perform SQL injection, or have other unspecified impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/71901 - http://osvdb.org/77911 - http://secunia.com/advisories/46163 - http://secunia.com/secunia_research/
nerabilities/71901 - http://osvdb.org/77911 - http://secunia.com/advisories/46163 - http://secunia.com/secunia_research/2011-85/
CVE ID: CVE-2011-3837 State: PUBLISHED Published: 2011-12-24T19:00:00 Last Updated: 2024-08-06T23:46:03.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in blog_system/data_functions.php in Wuzly 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the preview parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/71903 - http://secunia.com/advisories/46163 - http://osvdb.org/77912 - http://secunia.com/secunia_research/2011-87/
CVE ID: CVE-2011-3838 State: PUBLISHED Published: 2011-12-24T19:00:00 Last Updated: 2024-08-06T23:46:03.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Wuzly 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) u parameter to fp.php, (2) epage parameter to newpage.php, (3) epost parameter to newpost.php, and (4) username parameter to login.php in admin/; or the (5) username parameter to mobile/login.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/77916 - http://osvdb.org/77915 - http://osvdb.org/77918 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71904 - http://osvdb.
://osvdb.org/77915 - http://osvdb.org/77918 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71904 - http://osvdb.org/77917 - http://secunia.com/advisories/46163 - http://osvdb.org/77919 - http://secunia.com/secunia_research/2011-88/
CVE ID: CVE-2011-3839 State: PUBLISHED Published: 2011-12-24T19:00:00 Last Updated: 2024-08-06T23:46:03.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administration functionality in Wuzly 2.0 allows remote attackers to bypass authentication by setting the dXNlcm5hbWU cookie. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/77913 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71905 - http://secunia.com/secunia_research/2011-89/ - http://secunia.com/advisories/46163
CVE ID: CVE-2011-3841 State: PUBLISHED Published: 2011-12-27T11:00:00 Last Updated: 2024-08-06T23:46:03.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in uploadify/get_profile_avatar.php in the WP Symposium plugin before 11.12.08 for WordPress allows remote attackers to inject arbitrary web script or HTML via the uid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/51017 - http://secunia.com/advisories/47243 - http://www.wpsymposium.com/2011/12/v11-12-08/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/71748 - http://secunia.com/secunia_research/2011-82/
CVE ID: CVE-2011-3844 State: PUBLISHED Published: 2012-03-08T02:00:00 Last Updated: 2024-08-06T23:46:03.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Safari 5.0.5 does not properly implement the setInterval function, which allows remote attackers to spoof the address bar via a crafted web page. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/44976 - http://www.securitytracker.com/id?1026775 - http://osvdb.org/79848 - http://www.securityfocus.com/bid/52323
CVE ID: CVE-2011-3845 State: PUBLISHED Published: 2012-03-08T02:00:00 Last Updated: 2024-08-06T23:46:03.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Apple Safari 5.1.2, when a plug-in with a blocking function is installed, allows user-assisted remote attackers to execute arbitrary code via a crafted web page that is accessed during user interaction with the plug-in, leading to improper coordination between an API call and the plug-in unloading functionality, as demonstrated by the Adobe Flash and RealPlayer plug-ins. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/73713 -
onal Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/73713 - http://secunia.com/advisories/45758 - http://osvdb.org/79849 - http://www.securityfocus.com/bid/52325
CVE ID: CVE-2011-3846 State: PUBLISHED Published: 2012-04-12T10:00:00Z Last Updated: 2024-09-17T00:46:12.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) 6.2.2.7 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43012
CVE ID: CVE-2011-3848 State: PUBLISHED Published: 2011-10-27T20:00:00 Last Updated: 2024-08-06T23:46:03.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Puppet 2.6.x before 2.6.10 and 2.7.x before 2.7.4 allows remote attackers to write X.509 Certificate Signing Request (CSR) to arbitrary locations via (1) a double-encoded key parameter in the URI in 2.7.x, (2) the CN in the Subject of a CSR in 2.6 and 0.25. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2011/dsa-2314 - http://lists.opensuse.org/opensuse-updates/2011-10/msg00033.html - https://groups.google.com/group/puppet-announce/browse_thr
//lists.opensuse.org/opensuse-updates/2011-10/msg00033.html - https://groups.google.com/group/puppet-announce/browse_thread/thread/e57ce2740feb9406 - https://puppet.com/security/cve/cve-2011-3848 - http://www.ubuntu.com/usn/USN-1217-1 - http://secunia.com/advisories/46628
CVE ID: CVE-2011-3849 State: PUBLISHED Published: 2011-11-19T02:00:00 Last Updated: 2024-08-06T23:46:03.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in dxserver before 6279 in CA Directory 8.1 and CA Directory r12 before SP7 CR1 allows remote attackers to cause a denial of service (daemon crash) via a crafted SNMP packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/520547/100/0/threaded - https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7b286545DB-00B9-4B4C-8DE7-F00827F3CC75%7d
CVE ID: CVE-2011-3850 State: PUBLISHED Published: 2011-09-28T10:00:00 Last Updated: 2024-08-06T23:46:03.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Atahualpa theme before 3.6.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/46297 - https://sitewat.ch/en/Advisories/8 - https://wpvulndb.com/vulnerabilities/9788
CVE ID: CVE-2011-3851 State: PUBLISHED Published: 2011-09-28T10:00:00Z Last Updated: 2024-09-17T02:27:48.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the News theme before 0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cpage parameter. Additional Analyst Notes: - CVE Program Container: References: - https://sitewat.ch/en/Advisories/9
CVE ID: CVE-2011-3852 State: PUBLISHED Published: 2011-09-28T10:00:00Z Last Updated: 2024-09-16T18:08:45.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the EvoLve theme before 1.2.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter. Additional Analyst Notes: - CVE Program Container: References: - https://sitewat.ch/en/Advisories/10
CVE ID: CVE-2011-3853 State: PUBLISHED Published: 2011-09-28T10:00:00Z Last Updated: 2024-09-17T00:51:58.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Hybrid theme before 0.10 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cpage parameter. Additional Analyst Notes: - CVE Program Container: References: - https://sitewat.ch/en/Advisories/11
CVE ID: CVE-2011-3854 State: PUBLISHED Published: 2011-09-28T10:00:00 Last Updated: 2024-08-06T23:46:03.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the ZenLite theme before 4.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/46296 - https://sitewat.ch/en/Advisories/12
CVE ID: CVE-2011-3855 State: PUBLISHED Published: 2011-09-28T10:00:00Z Last Updated: 2024-09-17T04:24:34.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the F8 Lite theme before 4.2.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter. Additional Analyst Notes: - CVE Program Container: References: - https://sitewat.ch/en/Advisories/13
CVE ID: CVE-2011-3856 State: PUBLISHED Published: 2011-09-28T10:00:00Z Last Updated: 2024-09-17T03:54:50.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Elegant Grunge theme before 1.0.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter. Additional Analyst Notes: - CVE Program Container: References: - https://sitewat.ch/en/Advisories/14
CVE ID: CVE-2011-3857 State: PUBLISHED Published: 2011-09-28T10:00:00Z Last Updated: 2024-09-16T22:36:48.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Antisnews theme before 1.10 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter. Additional Analyst Notes: - CVE Program Container: References: - https://sitewat.ch/en/Advisories/15
CVE ID: CVE-2011-3858 State: PUBLISHED Published: 2011-09-28T10:00:00Z Last Updated: 2024-09-16T23:16:21.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Pixiv Custom theme before 2.1.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter. Additional Analyst Notes: - CVE Program Container: References: - https://sitewat.ch/en/Advisories/16
CVE ID: CVE-2011-3859 State: PUBLISHED Published: 2011-09-28T10:00:00Z Last Updated: 2024-09-17T03:18:25.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Trending theme before 0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cpage parameter. Additional Analyst Notes: - CVE Program Container: References: - https://sitewat.ch/en/Advisories/17
CVE ID: CVE-2011-3860 State: PUBLISHED Published: 2011-09-28T10:00:00 Last Updated: 2024-08-06T23:46:03.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Cover WP theme before 1.6.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter. Additional Analyst Notes: - CVE Program Container: References: - https://sitewat.ch/en/Advisories/18 - http://www.securityfocus.com/bid/50334