Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

juan galiana lara vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2009-3701
Multiple cross-site scripting (XSS) vulnerabilities in the administration interface in Horde Application Framework prior to 3.3.6, Horde Groupware prior to 1.2.5, and Horde Groupware Webmail Edition prior to 1.2.5 allow remote malicious users to inject arbitrary web script or HTM...
Horde Application Framework 3.3.4Horde Application Framework 2.1Horde Application Framework 2.1.3Horde Application Framework 3.0.4Horde Application Framework 3.0Horde Application Framework 3.0.9Horde Application Framework 3.2.1Horde Groupware 1.2.3Horde GroupwareHorde Groupware 1.0.1Horde Groupware 1.2Horde Groupware 1.1.5Horde Application Framework 2.2.4 Rc1Horde Application Framework 2.2.5Horde Application Framework 2.2.3Horde Application Framework 3.0.1Horde Application Framework 2.2.6Horde Application Framework 2.0Horde Application Framework 3.0.2Horde Application Framework 3.0.3Horde Application Framework 3.1Horde Application Framework 3.1.1
NA
CVE-2010-4280
Multiple SQL injection vulnerabilities in Pandora FMS prior to 3.1.1 allow remote authenticated users to execute arbitrary SQL commands via (1) the id_group parameter in an operation/agentes/ver_agente action to ajax.php or (2) the group_id parameter in an operation/agentes/estad...
Artica Pandora Fms 3.0Artica Pandora Fms 3.1Artica Pandora Fms 2.0Artica Pandora Fms 2.1.1Artica Pandora Fms 1.3.1Artica Pandora Fms 1.3Artica Pandora Fms 2.1Artica Pandora Fms 1.2Artica Pandora Fms
NA
CVE-2009-3702
Multiple absolute path traversal vulnerabilities in PHP-Calendar 1.1 allow remote malicious users to include and execute arbitrary local files via a full pathname in the configfile parameter to (1) update08.php or (2) update10.php. NOTE: in some environments, this can be leverage...
Php-calendar Php-calendar 1.1
NA
CVE-2007-6608
Multiple cross-site scripting (XSS) vulnerabilities in OpenBiblio 0.5.2-pre4 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the (1) LAST and (2) FIRST parameters to admin/staff_del_confirm.php, (3) the name parameter to admin/theme_d...
Openbiblio Openbiblio 0.3Openbiblio Openbiblio 0.5.1Openbiblio Openbiblio 0.2Openbiblio Openbiblio 0.2.1Openbiblio Openbiblio 0.5.2Openbiblio Openbiblio 0.5.2 Pre4
NA
CVE-2010-4278
operation/agentes/networkmap.php in Pandora FMS prior to 3.1.1 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the layout parameter in an operation/agentes/networkmap action to index.php.
Artica Pandora Fms 3.1Artica Pandora Fms 3.0Artica Pandora Fms 2.0Artica Pandora Fms 2.1.1Artica Pandora Fms 1.3.1Artica Pandora Fms 1.3Artica Pandora Fms 2.1Artica Pandora Fms 1.2Artica Pandora Fms
NA
CVE-2010-4281
Incomplete blacklist vulnerability in the safe_url_extraclean function in ajax.php in Pandora FMS prior to 3.1.1 allows remote malicious users to execute arbitrary PHP code by using a page parameter containing a UNC share pathname, which bypasses the check for the : (colon) chara...
Artica Pandora Fms 3.0Artica Pandora Fms 3.1Artica Pandora FmsArtica Pandora Fms 2.0Artica Pandora Fms 2.1Artica Pandora Fms 2.1.1Artica Pandora Fms 1.3Artica Pandora Fms 1.3.1Artica Pandora Fms 1.2
NA
CVE-2010-4282
Multiple directory traversal vulnerabilities in Pandora FMS prior to 3.1.1 allow remote malicious users to include and execute arbitrary local files via (1) the page parameter to ajax.php or (2) the id parameter to general/pandora_help.php, and allow remote malicious users to inc...
Artica Pandora Fms 3.0Artica Pandora Fms 3.1Artica Pandora FmsArtica Pandora Fms 2.0Artica Pandora Fms 2.1Artica Pandora Fms 2.1.1Artica Pandora Fms 1.3Artica Pandora Fms 1.3.1Artica Pandora Fms 1.2
NA
CVE-2009-3703
Multiple SQL injection vulnerabilities in the WP-Forum plugin prior to 2.4 for WordPress allow remote malicious users to execute arbitrary SQL commands via (1) the search_max parameter in a search action to the default URI, related to wpf.class.php; (2) the forum parameter to an ...
Fahlstad Wp-forum 1.7.4Fahlstad Wp-forum 2.1Fahlstad Wp-forum 1.6Fahlstad Wp-forum 1.5Fahlstad Wp-forum 1.8Fahlstad Wp-forumFahlstad Wp-forum 1.7.3Fahlstad Wp-forum 1.7Fahlstad Wp-forum 1.7.8Fahlstad Wp-forum 2.0
NA
CVE-2010-4283
PHP remote file inclusion vulnerability in extras/pandora_diag.php in Pandora FMS prior to 3.1.1 allows remote malicious users to execute arbitrary PHP code via a URL in the argv[1] parameter.
Artica Pandora Fms 3.0Artica Pandora Fms 3.1Artica Pandora FmsArtica Pandora Fms 2.0Artica Pandora Fms 2.1Artica Pandora Fms 2.1.1Artica Pandora Fms 1.3Artica Pandora Fms 1.3.1Artica Pandora Fms 1.2
NA
CVE-2011-4909
Multiple cross-site scripting (XSS) vulnerabilities in Joomla! prior to 1.5.12 allow remote malicious users to inject arbitrary web script or HTML via the HTTP_REFERER header to (1) components/com_content/views/article/tmpl/form.php, (2) components/com_user/controller.php, (3) pl...
Joomla Joomla\\! 1.5.4Joomla Joomla\\! 1.5.3Joomla Joomla\\! 1.5.2Joomla Joomla\\! 1.5.1Joomla Joomla\\!Joomla Joomla\\! 1.5.10Joomla Joomla\\! 1.5.9Joomla Joomla\\! 1.5.7Joomla Joomla\\! 1.5.5Joomla Joomla\\! 1.5.0Joomla Joomla\\! 1.5.8Joomla Joomla\\! 1.5.6
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
authentication bypassCVE-2024-30051remoteCVE-2024-27954CVE-2023-51483CVE-2023-47782SSRFCVE-2024-24715CVE-2023-52424
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook