Email address | private |
---|---|
First Active | 2007-11-26 |
Last Active | 2017-11-17 |
phpMyFAQ version 2.9.9 suffers from an issue where an administrative account can execute arbitrary code on the server by modifying LANG_CONF[main.metaDescription].
a6d03297b6d015d54d53b8b82104789e4468707199c9c312ad5200a4beca9306
WordPress Ultimate Product Catalog plugin versions 4.2.24 and below suffer from a PHP object injection vulnerability.
3a32c416cc40f0d2746a5880bfd6ee9b498b22a31a88ccef544429ac5814521e
Orangescrum version 1.6.1 suffers from cross site scripting and remote file upload vulnerabilities.
106418e31fa4cbf360e7471d81c2df8932c71452c44b9ba4675115930b0547d9
Simple Forum version 3.2 suffers from file disclosure and cross site scripting vulnerabilities.
c519964329b114e8d760a77e6a685612e9b12ead3d55187f74e177968841bad4
ALITALK version 1.9.1.1 suffers from severe remote SQL injection vulnerabilities.
e72f4f0993335bce4ad2605189a21e4ae4b90da1360217cd3c030f2263f55c0e
Project Alumni version 1.0.9 suffers from a remote file disclosure vulnerability.
4ee50a5fa4c645d2e4a04e376723b53460b3aa67f030261ddcb53559cc9fbaca
Project Alumni versions 1.0.9, 1.0.8, and possibly prior releases suffer from cross site scripting and SQL injection vulnerabilities.
ac4295d45d89f5c92cf220bd4f9ff1addec222418dbd42811ba1402402e576dc