cve.nowby Sazabi

CVEs published November 1, 2011

45 CVEs were published on November 1, 2011: 0 critical, 0 high.

Published: 45
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 45
Now in CISA KEV: 0
Fix available: 0

Medium, low and unrated 45

CVE-2010-4968SQL injection vulnerability in the webmaster-tips.net Flash Gallery (com_wmtpic) component 1.0 for Joomla! allows remote attackers to executUnratedNov 1, 2011
CVE-2010-4969SQL injection vulnerability in articlesdetails.php in BrotherScripts (BS) Business Directory allows remote attackers to execute arbitrary SQUnratedNov 1, 2011
CVE-2010-4970SQL injection vulnerability in handlers/getpage.php in Wiki Web Help 0.28 allows remote attackers to execute arbitrary SQL commands via the UnratedNov 1, 2011
CVE-2010-4972SQL injection vulnerability in index.php in YPNinc JokeScript allows remote attackers to execute arbitrary SQL commands via the ypncat_id paUnratedNov 1, 2011
CVE-2010-4973Cross-site scripting (XSS) vulnerability in the search feature in Campsite 3.4.0 allows remote attackers to inject arbitrary web script or HUnratedNov 1, 2011
CVE-2010-4974SQL injection vulnerability in info.php in BrotherScripts (BS) and ScriptsFeed Auto Dealer allows remote attackers to execute arbitrary SQL UnratedNov 1, 2011
CVE-2010-4975SQL injection vulnerability in the Techjoomla SocialAds For JomSocial (com_socialads) component for Joomla! allows remote attackers to execuUnratedNov 1, 2011
CVE-2010-4976Cross-site scripting (XSS) vulnerability in search/search.php in MetInfo 3.0 allows remote attackers to inject arbitrary web script or HTML UnratedNov 1, 2011
CVE-2010-4977SQL injection vulnerability in menu.php in the Canteen (com_canteen) component 1.0 for Joomla! allows remote attackers to execute arbitrary UnratedNov 1, 2011
CVE-2010-4978Cross-site scripting (XSS) vulnerability in image/view.php in CANDID allows remote attackers to inject arbitrary web script or HTML via the UnratedNov 1, 2011
CVE-2010-4979SQL injection vulnerability in image/view.php in CANDID allows remote attackers to execute arbitrary SQL commands via the image_id parameterUnratedNov 1, 2011
CVE-2010-4980SQL injection vulnerability in packagedetails.php in iScripts ReserveLogic 1.0 allows remote attackers to execute arbitrary SQL commands viaUnratedNov 1, 2011
CVE-2010-4981SQL injection vulnerability in trackads.php in YourFreeWorld Banner Management allows remote attackers to execute arbitrary SQL commands viaUnratedNov 1, 2011
CVE-2010-4982SQL injection vulnerability in address_book/contacts.php in My Kazaam Address & Contact Organizer allows remote attackers to execute arbitraUnratedNov 1, 2011
CVE-2010-4983SQL injection vulnerability in profile.php in iScripts CyberMatch 1.0 allows remote attackers to execute arbitrary SQL commands via the id pUnratedNov 1, 2011
CVE-2010-4984SQL injection vulnerability in notes.php in My Kazaam Notes Management System allows remote attackers to execute arbitrary SQL commands via UnratedNov 1, 2011
CVE-2010-4985Cross-site scripting (XSS) vulnerability in notes.php in My Kazaam Notes Management System allows remote attackers to inject arbitrary web sUnratedNov 1, 2011
CVE-2010-4986SQL injection vulnerability in detail.php in Simple Document Management System (SDMS) allows remote attackers to execute arbitrary SQL commaUnratedNov 1, 2011
CVE-2010-4987SQL injection vulnerability in default.asp in KMSoft Guestbook (aka GBook) allows remote attackers to execute arbitrary SQL commands via theUnratedNov 1, 2011
CVE-2010-4988PHP remote file inclusion vulnerability in mod_chatting/themes/default/header.php in Family Connections Who is Chatting 2.2.3 allows remote UnratedNov 1, 2011
CVE-2010-4989SQL injection vulnerability in main.asp in Ziggurat Farsi CMS allows remote attackers to execute arbitrary SQL commands via the grp parameteUnratedNov 1, 2011
CVE-2010-4990SQL injection vulnerability in the Front-edit Address Book (com_addressbook) component for Joomla! allows remote attackers to execute arbitrUnratedNov 1, 2011
CVE-2010-4991SQL injection vulnerability in the NinjaMonials (com_ninjamonials) component for Joomla! allows remote attackers to execute arbitrary SQL coUnratedNov 1, 2011
CVE-2010-4992SQL injection vulnerability in the Payments Plus component 2.1.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via tUnratedNov 1, 2011
CVE-2010-4993SQL injection vulnerability in the eventcal (com_eventcal) component 1.6.4 for Joomla! allows remote attackers to execute arbitrary SQL commUnratedNov 1, 2011
CVE-2010-4994SQL injection vulnerability in the Jobs Pro component 1.6.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the deUnratedNov 1, 2011
CVE-2010-4995SQL injection vulnerability in the NeoRecruit (com_neorecruit) component 1.6.4 for Joomla! allows remote attackers to execute arbitrary SQL UnratedNov 1, 2011
CVE-2010-4996SQL injection vulnerability in ogp_show.php in esoftpro Online Guestbook Pro 5.1 allows remote attackers to execute arbitrary SQL commands vUnratedNov 1, 2011
CVE-2010-4999SQL injection vulnerability in index.php in esoftpro Online Photo Pro 2.0 allows remote attackers to execute arbitrary SQL commands via the UnratedNov 1, 2011
CVE-2010-5001SQL injection vulnerability in view.php in esoftpro Online Contact Manager 3.0 allows remote attackers to execute arbitrary SQL commands viaUnratedNov 1, 2011
CVE-2010-5002Cross-site scripting (XSS) vulnerability in modules/slideshowmodule/slideshow.js.php in Exponent CMS 0.97.0 allows remote attackers to injecUnratedNov 1, 2011
CVE-2010-5003SQL injection vulnerability in the AutarTimonial (com_autartimonial) component 1.0.8 for Joomla! allows remote attackers to execute arbitrarUnratedNov 1, 2011
CVE-2011-0941Memory leak in Cisco Unified Communications Manager (CUCM) 6.x before 6.1(5)su2, 7.x before 7.1(5b)su3, 8.x before 8.0(3a)su1, and 8.5 beforUnratedNov 1, 2011
CVE-2011-1915SQL injection vulnerability in eClient 7.3.2.3 in Enspire Distribution Management Solution 7.3.2.7 allows remote attackers to execute arbitrUnratedNov 1, 2011
CVE-2011-4064Cross-site scripting (XSS) vulnerability in the setup interface in phpMyAdmin 3.4.x before 3.4.6 allows remote attackers to inject arbitraryUnratedNov 1, 2011
CVE-2011-4214OneOrZero Action & Information Management System (AIMS) 2.7.0 allows remote attackers to bypass authentication and obtain administrator privUnratedNov 1, 2011
CVE-2011-4215SQL injection vulnerability in lib/ooz_access.php in OneOrZero Action & Information Management System (AIMS) 2.7.0 allows remote attackers tUnratedNov 1, 2011
CVE-2011-4216Investintech.com SlimPDF Reader does not properly restrict write operations, which allows remote attackers to cause a denial of service (appUnratedNov 1, 2011
CVE-2011-4217Investintech.com SlimPDF Reader does not properly restrict read operations during block data moves, which allows remote attackers to cause aUnratedNov 1, 2011
CVE-2011-4218Investintech.com SlimPDF Reader does not prevent faulting-instruction data from affecting write operations, which allows remote attackers toUnratedNov 1, 2011
CVE-2011-4219Investintech.com SlimPDF Reader does not prevent faulting-address data from affecting branch selection, which allows remote attackers to cauUnratedNov 1, 2011
CVE-2011-4220Investintech.com SlimPDF Reader does not properly restrict the arguments to unspecified function calls, which allows remote attackers to cauUnratedNov 1, 2011
CVE-2011-4221Unspecified vulnerability in Investintech.com Able2Doc and Able2Doc Professional allows remote attackers to cause a denial of service (appliUnratedNov 1, 2011
CVE-2011-4222Unspecified vulnerability in Investintech.com Able2Extract and Able2Extract Server allows remote attackers to cause a denial of service (appUnratedNov 1, 2011
CVE-2011-4223Unspecified vulnerability in Investintech.com Absolute PDF Server allows remote attackers to cause a denial of service (application crash) oUnratedNov 1, 2011