deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2010-4904
Published: 2011-10-08
Description: SQL injection vulnerability in the Aardvertiser (com_aardvertiser) component 2.1 and 2.1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cat_name parameter in a view action to index.php.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/41293; http://www.exploit-db.com/exploits/14922; http://www.securityfocus.com/bid/43014
CVE: CVE-2010-4905
Published: 2011-10-08
Description: SQL injection vulnerability in article_details.php in Softbiz Article Directory Script allows remote attackers to execute arbitrary SQL commands via the sbiz_id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/67826; http://secunia.com/advisories/41301; http://www.exploit-db.com/exploits/14910
CVE: CVE-2010-4906
Published: 2011-10-08
Description: SQL injection vulnerability in zp-core/full-image.php in Zenphoto 1.3 and 1.3.1.2 allows remote attackers to execute arbitrary SQL commands via the a parameter.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1009-exploits/zenphoto-sqlxss.txt; http://secunia.com/advisories/41350; http://securityreason.com/securityalert/8442
CVE: CVE-2010-4907
Published: 2011-10-08
Description: Cross-site scripting (XSS) vulnerability in zp-core/admin.php in Zenphoto 1.3 allows remote attackers to inject arbitrary web script or HTML via the user parameter.  NOTE: the from parameter is already covered by CVE-2009-4562.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/1009-exploits/zenphoto-sqlxss.txt; http://secunia.com/advisories/41342; http://securityreason.com/securityalert/8442
CVE: CVE-2010-4908
Published: 2011-10-08
Description: SQL injection vulnerability in detail.php in Virtue Shopping Mall allows remote attackers to execute arbitrary SQL commands via the prodid parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/0908-exploits/vsm-sql.txt; http://secunia.com/advisories/35374; http://securityreason.com/securityalert/8443
CVE: CVE-2010-4909
Published: 2011-10-08
Description: Multiple cross-site scripting (XSS) vulnerabilities in PaysiteReviewCMS 1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) q parameter to search.php or the (2) image parameter to image.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/1009-exploits/mechbunnypsr-xss.txt; http://secunia.com/advisories/41431; http://securityreason.com/securityalert/8444
CVE: CVE-2010-4910
Published: 2011-10-08
Description: SQL injection vulnerability in index.cfm in ColdGen ColdCalendar 2.06 allows remote attackers to execute arbitrary SQL commands via the EventID parameter in a ViewEventDetails action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1009-exploits/coldcalendar-sql.txt; http://secunia.com/advisories/41333; http://securityreason.com/securityalert/8445
CVE: CVE-2010-4911
Published: 2011-10-08
Description: SQL injection vulnerability in classi/detail.php in PHP Classifieds Ads allows remote attackers to execute arbitrary SQL commands via the sid parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1009-exploits/phpclassifiedsads-sql.txt; http://securityreason.com/securityalert/8447; http://www.exploit-db.com/exploits/14891
CVE: CVE-2010-4912
Published: 2011-10-08
Description: SQL injection vulnerability in shop.php in UCenter Home 2.0 allows remote attackers to execute arbitrary SQL commands via the shopid parameter in a view action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1009-exploits/ucenter-sql.txt; http://securityreason.com/securityalert/8446; http://www.exploit-db.com/exploits/14997
CVE: CVE-2010-4913
Published: 2011-10-08
Description: Cross-site scripting (XSS) vulnerability in the search feature in ColdGen ColdUserGroup 1.06 allows remote attackers to inject arbitrary web script or HTML via the Keywords parameter.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/1009-exploits/coldusergroup-sql.txt; http://secunia.com/advisories/41335; http://securityreason.com/securityalert/8448
CVE: CVE-2010-4914
Published: 2011-10-08
Description: PHP remote file inclusion vulnerability in tools/phpmailer/class.phpmailer.php in PHP Classifieds 7.3 allows remote attackers to execute arbitrary PHP code via a URL in the lang_path parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://www.exploit-db.com/exploits/14893; https://exchange.xforce.ibmcloud.com/vulnerabilities/61603; http://www.exploit-db.com/exploits/14893
CVE: CVE-2010-4915
Published: 2011-10-08
Description: SQL injection vulnerability in index.cfm in ColdGen ColdBookmarks 1.22 allows remote attackers to execute arbitrary SQL commands via the BookmarkID parameter in an EditBookmark action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1009-exploits/coldbookmarks-sql.txt; http://secunia.com/advisories/41334; http://securityreason.com/securityalert/8449
CVE: CVE-2010-4916
Published: 2011-10-08
Description: Multiple SQL injection vulnerabilities in index.cfm in ColdGen ColdUserGroup 1.06 allow remote attackers to execute arbitrary SQL commands via the (1) ArticleID or (2) LibraryID parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1009-exploits/coldusergroup-sql.txt; http://secunia.com/advisories/41335; http://securityreason.com/securityalert/8448
CVE: CVE-2010-4917
Published: 2011-10-08
Description: SQL injection vulnerability in sources/search.php in A-Blog 2.0 allows remote attackers to execute arbitrary SQL commands via the words parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1009-exploits/ablog-sql.txt; http://securityreason.com/securityalert/8450; http://www.exploit-db.com/exploits/14894
CVE: CVE-2010-4918
Published: 2011-10-08
Description: PHP remote file inclusion vulnerability in iJoomla Magazine (com_magazine) component 3.0.1 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the config parameter to magazine.functions.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://packetstormsecurity.org/1009-exploits/ijoomlamagazine-rfi.txt; http://securityreason.com/securityalert/8451; http://www.exploit-db.com/exploits/14896
CVE: CVE-2010-4919
Published: 2011-10-08
Description: SQL injection vulnerability in detail.asp in Micronetsoft RV Dealer Website 1.0 allows remote attackers to execute arbitrary SQL commands via the vehicletypeID parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/41319; http://www.exploit-db.com/exploits/14914; https://exchange.xforce.ibmcloud.com/vulnerabilities/61611
CVE: CVE-2010-4920
Published: 2011-10-08
Description: SQL injection vulnerability in detail.asp in Micronetsoft Rental Property Management Website 1.0 allows remote attackers to execute arbitrary SQL commands via the ad_ID parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/41320; http://www.exploit-db.com/exploits/14919; https://exchange.xforce.ibmcloud.com/vulnerabilities/61619
CVE: CVE-2010-4921
Published: 2011-10-08
Description: SQL injection vulnerability in inc_pollingboothmanager.asp in DMXReady Polling Booth Manager allows remote attackers to execute arbitrary SQL commands via the QuestionID parameter in a results action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1009-exploits/dmxreadypbm-sql.txt; http://secunia.com/advisories/41306; http://securityreason.com/securityalert/8452
CVE: CVE-2010-4922
Published: 2011-10-09
Description: Multiple SQL injection vulnerabilities in Allinta CMS 22.07.2010 allow remote attackers to execute arbitrary SQL commands via the i parameter in an edit action to (1) contentAE.asp or (2) templatesAE.asp.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://securityreason.com/securityalert/8453; http://www.htbridge.ch/advisory/sql_injection_vulnerability_in_allinta_cms.html; http://www.htbridge.ch/advisory/sql_injection_vulnerability_in_allinta_cms_1.html
CVE: CVE-2010-4923
Published: 2011-10-09
Description: SQL injection vulnerability in book/detail.php in Virtue Netz Virtue Book Store allows remote attackers to execute arbitrary SQL commands via the bid parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/0908-exploits/vbs-sql.txt; http://secunia.com/advisories/35375; http://securityreason.com/securityalert/8460
CVE: CVE-2010-4924
Published: 2011-10-09
Description: PHP remote file inclusion vulnerability in logic/controller.class.php in clearBudget 0.9.8 allows remote attackers to execute arbitrary PHP code via a URL in the actionPath parameter.  NOTE: this issue has been disputed by a reliable third party
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://attrition.org/pipermail/vim/2010-August/002388.html; http://www.exploit-db.com/exploits/14614; http://www.securityfocus.com/bid/42351
CVE: CVE-2010-4925
Published: 2011-10-09
Description: SQL injection vulnerability in clic.php in the Partenaires module 1.5 for Nuked-Klan allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/66927; http://packetstormsecurity.org/1008-exploits/nukedklanpartenaires-sql.txt; http://secunia.com/advisories/40887
CVE: CVE-2010-4926
Published: 2011-10-09
Description: SQL injection vulnerability in the TimeTrack (com_timetrack) component 1.2.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the ct_id parameter in a timetrack action to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1009-exploits/joomlatimetrack-sql.txt; http://salvatorefresta.net/files/adv/TimeTrack_1.2.4_Joomla_Component_Multiple_SQL_Injection_Vulnerabilities-22092010.txt; http://secunia.com/advisories/41583
CVE: CVE-2010-4927
Published: 2011-10-09
Description: SQL injection vulnerability in the Restaurant Guide (com_restaurantguide) component 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a country action to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1009-exploits/joomlarestaurantguide-sqlxsslfi.txt; http://securityreason.com/securityalert/8458; http://www.exploit-db.com/exploits/15040
CVE: CVE-2010-4928
Published: 2011-10-09
Description: Cross-site scripting (XSS) vulnerability in the Restaurant Guide (com_restaurantguide) component 1.0.0 for Joomla! allows remote attackers to inject arbitrary web script or HTML by placing it after a > (greater than) character.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/1009-exploits/joomlarestaurantguide-sqlxsslfi.txt; http://securityreason.com/securityalert/8458; http://www.exploit-db.com/exploits/15040
CVE: CVE-2010-4929
Published: 2011-10-09
Description: SQL injection vulnerability in the Joostina (com_ezautos) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the firstCode parameter in a helpers action to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/15085; http://www.securityfocus.com/bid/43415; http://www.exploit-db.com/exploits/15085
CVE: CVE-2010-4930
Published: 2011-10-09
Description: Cross-site scripting (XSS) vulnerability in index.php in @mail Webmail before 6.2.0 allows remote attackers to inject arbitrary web script or HTML via the MailType parameter in a mail/auth/processlogin action.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/68183; http://secunia.com/advisories/41555; http://securityreason.com/securityalert/8455
CVE: CVE-2010-4931
Published: 2011-10-09
Description: Directory traversal vulnerability in maincore.php in PHP-Fusion allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the folder_level parameter.  NOTE: this issue has been disputed by a reliable third party
CVSS Score: 10.0 (HIGH)
CWE: CWE-22
References: http://attrition.org/pipermail/vim/2010-August/002391.html; http://www.exploit-db.com/exploits/14647; http://www.securityfocus.com/bid/42456
CVE: CVE-2010-4932
Published: 2011-10-09
Description: Cross-site scripting (XSS) vulnerability in search.php in Entrans before 0.3.3 allows remote attackers to inject arbitrary web script or HTML via the query parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/41543; http://www.htbridge.ch/advisory/xss_vulnerability_in_entrans.html; http://secunia.com/advisories/41543
CVE: CVE-2010-4933
Published: 2011-10-09
Description: SQL injection vulnerability in filemgmt/singlefile.php in Geeklog 1.3.8 allows remote attackers to execute arbitrary SQL commands via the lid parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1009-exploits/geeklog138-sql.txt; http://securityreason.com/securityalert/8457; http://www.exploit-db.com/exploits/15091
CVE: CVE-2010-4934
Published: 2011-10-09
Description: SQL injection vulnerability in video.php in Get Tube 4.51 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/14637; http://www.exploit-db.com/exploits/14637
CVE: CVE-2010-4935
Published: 2011-10-09
Description: SQL injection vulnerability in poll.php in Entrans 0.3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the sid parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/15126; http://www.exploit-db.com/exploits/15126
CVE: CVE-2010-4936
Published: 2011-10-09
Description: SQL injection vulnerability in the Slide Show (com_slideshow) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1008-exploits/joomlaslideshow-sql.txt; http://securityreason.com/securityalert/8461; http://www.securityfocus.com/bid/42427
CVE: CVE-2010-4937
Published: 2011-10-09
Description: Multiple SQL injection vulnerabilities in the Amblog (com_amblog) component 1.0 for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) articleid or (2) catid parameter to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://adv.salvatorefresta.net/Amblog_1.0_Joomla_Component_Multiple_SQL_Injection_Vulnerabilities-10082010.txt; http://secunia.com/advisories/40932; http://securityreason.com/securityalert/8456
CVE: CVE-2010-4938
Published: 2011-10-09
Description: SQL injection vulnerability in the Weblinks (com_weblinks) component in Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a categories action to index.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/42455; http://www.securityfocus.com/bid/42455
CVE: CVE-2010-4939
Published: 2011-10-09
Description: PHP remote file inclusion vulnerability in index.php in MailForm 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the theme parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://www.exploit-db.com/exploits/14639; http://www.exploit-db.com/exploits/14639
CVE: CVE-2010-4940
Published: 2011-10-09
Description: SQL injection vulnerability in index.php in WAnewsletter 2.1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1009-exploits/wanewsletter-sql.txt; http://securityreason.com/securityalert/8462; http://www.exploit-db.com/exploits/15090
CVE: CVE-2010-4941
Published: 2011-10-09
Description: SQL injection vulnerability in the Teams (com_teams) component 1_1028_100809_1711 for Joomla! allows remote attackers to execute arbitrary SQL commands via the PlayerID parameter in a player save action to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://adv.salvatorefresta.net/Teams_1_1028_100809_1711_Joomla_Component_Multiple_Blind_SQL_Injection_Vulnerabilities-10082010.txt; http://secunia.com/advisories/40933; http://securityreason.com/securityalert/8463
CVE: CVE-2010-4942
Published: 2011-10-09
Description: SQL injection vulnerability in location.php in the eCal module in E-Xoopport Samsara 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the lid parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1009-exploits/exoopportecal-sql.txt; http://securityreason.com/securityalert/8464; http://www.exploit-db.com/exploits/15110
CVE: CVE-2010-4943
Published: 2011-10-09
Description: Multiple PHP remote file inclusion vulnerabilities in Saurus CMS 4.7.0 allow remote attackers to execute arbitrary PHP code via a URL in the class_path parameter to (1) file.php or (2) com_del.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://www.exploit-db.com/exploits/14618; http://www.exploit-db.com/exploits/14618
CVE: CVE-2010-4944
Published: 2011-10-09
Description: SQL injection vulnerability in the Elite Experts (com_elite_experts) component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showExpertProfileDetailed action to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/15100; https://exchange.xforce.ibmcloud.com/vulnerabilities/62010; http://www.exploit-db.com/exploits/15100
CVE: CVE-2010-4945
Published: 2011-10-09
Description: SQL injection vulnerability in the CamelcityDB (com_camelcitydb2) component 2.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/0901-exploits/joomlacamel-sql.txt; http://packetstormsecurity.org/1008-exploits/joomlacamelcitydb2-sql.txt; http://securityreason.com/securityalert/8465
CVE: CVE-2010-4946
Published: 2011-10-09
Description: SQL injection vulnerability in product_info.php in ALLPC 2.5 allows remote attackers to execute arbitrary SQL commands via the products_id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/15128; http://www.exploit-db.com/exploits/15128
CVE: CVE-2010-4947
Published: 2011-10-09
Description: Cross-site scripting (XSS) vulnerability in advanced_search_result.php in ALLPC 2.5 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.exploit-db.com/exploits/15128; http://www.exploit-db.com/exploits/15128
CVE: CVE-2010-4948
Published: 2011-10-09
Description: PHP remote file inclusion vulnerability in libs/adodb/adodb.inc.php in PHP Free Photo Gallery script allows remote attackers to execute arbitrary PHP code via a URL in the path parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://www.exploit-db.com/exploits/14438; http://www.exploit-db.com/exploits/14438
CVE: CVE-2010-4949
Published: 2011-10-09
Description: Cross-site scripting (XSS) vulnerability in the (1) FreiChat component before 2.1.2 for Joomla! and the (2) FreiChatPure component before 1.2.2 for Joomla! allows remote attackers to inject arbitrary web script or HTML by entering it in an unspecified window.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://forum.joomla.org/viewtopic.php?p=2209586; http://secunia.com/advisories/40751; http://www.osvdb.org/66628
CVE: CVE-2010-4950
Published: 2011-10-09
Description: SQL injection vulnerability in the Event (event) extension before 0.3.7 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://typo3.org/extensions/repository/view/event/0.3.7/; http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-015/; http://typo3.org/extensions/repository/view/event/0.3.7/
CVE: CVE-2010-4951
Published: 2011-10-09
Description: Cross-site scripting (XSS) vulnerability in the xaJax Shoutbox (vx_xajax_shoutbox) extension before 1.0.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://typo3.org/extensions/repository/view/vx_xajax_shoutbox/1.0.1/; http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-015/; http://www.securityfocus.com/bid/42373
CVE: CVE-2010-4952
Published: 2011-10-09
Description: SQL injection vulnerability in the FE user statistic (festat) extension before 0.2.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://typo3.org/extensions/repository/view/festat/0.2.4/; http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-015/; http://www.securityfocus.com/bid/42366
CVE: CVE-2010-4953
Published: 2011-10-09
Description: Unspecified vulnerability in the JW Calendar (jw_calendar) extension 1.3.20 and earlier for TYPO3 allows remote attackers to execute arbitrary code via unknown vectors.
CVSS Score: 10.0 (HIGH)
References: http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-015/; https://exchange.xforce.ibmcloud.com/vulnerabilities/61057; http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-015/
CVE: CVE-2010-4954
Published: 2011-10-09
Description: SQL injection vulnerability in product_reviews_info.php in xt:Commerce Gambio 2008 allows remote attackers to execute arbitrary SQL commands via the products_id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1009-exploits/xtcommercegambio-sql.txt; http://securityreason.com/securityalert/8466; http://www.exploit-db.com/exploits/15039
CVE: CVE-2010-4955
Published: 2011-10-09
Description: SQL injection vulnerability in board/board.php in APBoard Developers APBoard 2.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2006-3078.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1008-exploits/apboard-sql.txt; http://securityreason.com/securityalert/8467; http://www.exploit-db.com/exploits/14559
CVE: CVE-2010-4956
Published: 2011-10-09
Description: Cross-site scripting (XSS) vulnerability in the Questionnaire (ke_questionnaire) extension before 2.2.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/67030; http://secunia.com/advisories/40950; http://typo3.org/extensions/repository/view/ke_questionnaire/2.2.3/
CVE: CVE-2010-4957
Published: 2011-10-09
Description: SQL injection vulnerability in the Questionnaire (ke_questionnaire) extension before 2.2.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/67031; http://secunia.com/advisories/40950; http://typo3.org/extensions/repository/view/ke_questionnaire/2.2.3
CVE: CVE-2010-4958
Published: 2011-10-09
Description: SQL injection vulnerability in index.php in Prado Portal 1.2.0 allows remote attackers to execute arbitrary SQL commands via the page parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1008-exploits/pradoportal-xss.txt; http://secunia.com/advisories/40902; http://securityreason.com/securityalert/8468
CVE: CVE-2010-4959
Published: 2011-10-09
Description: SQL injection vulnerability in the login feature in Pre Projects Pre Podcast Portal allows remote attackers to execute arbitrary SQL commands via the password parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/40705; http://securityreason.com/securityalert/8469; http://www.exploit-db.com/exploits/14378