Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ryan dewhurst vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2009-2733
Multiple cross-site scripting (XSS) vulnerabilities in Achievo prior to 1.4.0 allow remote malicious users to inject arbitrary web script or HTML via (1) the scheduler title in the scheduler module, and the (2) atksearch[contractnumber], (3) atksearch_AE_customer[customer], (4) a...
Achievo Achievo 0.8.0 Rc1Achievo Achievo 0.8.0Achievo Achievo 0.7.3Achievo Achievo 1.3.3Achievo AchievoAchievo Achievo 1.1.0Achievo Achievo 1.0.0Achievo Achievo 0.9.0Achievo Achievo 0.7.2Achievo Achievo 0.9.1Achievo Achievo 1.3.0Achievo Achievo 1.0.4Achievo Achievo 1.0.3Achievo Achievo 0.7.1Achievo Achievo 0.7.0Achievo Achievo 1.3.2Achievo Achievo 1.3.1Achievo Achievo 0.8.1Achievo Achievo 0.8.0 Rc2Achievo Achievo 1.2.0Achievo Achievo 1.2.1Achievo Achievo 1.0.2
NA
CVE-2013-5748
Cross-site request forgery (CSRF) vulnerability in management/prioritize_planning.php in SimpleRisk prior to 20130916-001 allows remote malicious users to hijack the authentication of users for requests that add projects via an add_project action.
Simplerisk Simplerisk
NA
CVE-2009-2579
SQL injection vulnerability in reward_points.post.php in the Reward points addon in CS-Cart prior to 2.0.6 allows remote authenticated users to execute arbitrary SQL commands via the sort_order parameter in a reward_points.userlog action to index.php, a different vulnerability th...
Cs-cart Cs-cart 1.3.2Cs-cart Cs-cart 2.0Cs-cart Cs-cart 1.2Cs-cart Cs-cart 1.1Cs-cart Cs-cart 2.0.4Cs-cart Cs-cart 1.3.5Cs-cart Cs-cart 1.3.0Cs-cart Cs-cart 1.3.3Cs-cart Cs-cartCs-cart Cs-cart 1.3.5sp3Cs-cart Cs-cart 1.3.5sp2
NA
CVE-2009-27333
Achievo versions 1.3.4 and below suffer from cross site scripting vulnerabilities.
NA
CVE-2009-2734
SQL injection vulnerability in the get_employee function in classweekreport.inc in Achievo prior to 1.4.0 allows remote malicious users to execute arbitrary SQL commands via the userid parameter (aka user_id variable) to dispatch.php.
Achievo Achievo 0.8.0Achievo Achievo 0.7.3Achievo Achievo 1.3.3Achievo AchievoAchievo Achievo 1.1.0Achievo Achievo 1.0.4Achievo Achievo 1.0.0Achievo Achievo 0.9.0Achievo Achievo 0.8.1Achievo Achievo 0.7.2Achievo Achievo 0.9.1Achievo Achievo 1.3.0Achievo Achievo 1.0.3Achievo Achievo 1.0.2Achievo Achievo 0.7.0Achievo Achievo 0.8.0 Rc1Achievo Achievo 1.3.2Achievo Achievo 1.3.1Achievo Achievo 0.8.0 Rc2Achievo Achievo 0.7.1Achievo Achievo 1.2.0Achievo Achievo 1.2.1
NA
CVE-2009-27343
Achievo versions 1.3.4 and below suffer from a remote SQL injection vulnerability.
NA
CVE-2009-25793
CS-Cart versions 2.0.5 and below suffer from a remote SQL injection vulnerability.
NA
CVE-2013-5749
Cross-site scripting (XSS) vulnerability in management/prioritize_planning.php in SimpleRisk prior to 20130916-001 allows remote malicious users to inject arbitrary web script or HTML via the new_project parameter.
Simplerisk Simplerisk
NA
CVE-2015-2292
Multiple SQL injection vulnerabilities in admin/class-bulk-editor-list-table.php in the WordPress SEO by Yoast plugin prior to 1.5.7, 1.6.x prior to 1.6.4, and 1.7.x prior to 1.7.4 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the (1) order_...
Yoast Wordpress Seo 1.6.2Yoast Wordpress Seo 1.6.3Yoast Wordpress SeoYoast Wordpress Seo 1.7.3Yoast Wordpress Seo 1.7.3.1Yoast Wordpress Seo 1.6.0Yoast Wordpress Seo 1.6.1Yoast Wordpress Seo 1.7.3.2Yoast Wordpress Seo 1.7.3.3Yoast Wordpress Seo 1.7.1Yoast Wordpress Seo 1.7.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463CVE-2024-29895injectCVE-2023-52689CVE-2024-5049CVE-2024-5051privilege escalationphysicalCVE-2023-52676
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook