Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
dotclear dotclear vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv2
CVE-2016-6523
Multiple cross-site scripting (XSS) vulnerabilities in the media manager in Dotclear prior to 2.10 allow remote malicious users to inject arbitrary web script or HTML via the (1) q or (2) link_type parameter to admin/media.php.
Dotclear Dotclear
9
CVSSv2
CVE-2016-9268
Unrestricted file upload vulnerability in the Blog appearance in the "Install or upgrade manually" module in Dotclear up to and including 2.10.4 allows remote authenticated super-administrators to execute arbitrary code by uploading a theme file with an zip extension, a...
Dotclear Dotclear
4.3
CVSSv2
CVE-2015-5651
Cross-site scripting (XSS) vulnerability in Dotclear prior to 2.8.1 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Dotclear Dotclear
4.3
CVSSv2
CVE-2014-5316
Cross-site scripting (XSS) vulnerability in Dotclear prior to 2.6.4 allows remote malicious users to inject arbitrary web script or HTML via a crafted page.
Dotclear Dotclear 2.0
Dotclear Dotclear 2.2.1
Dotclear Dotclear 2.1
Dotclear Dotclear 2.0.1
Dotclear Dotclear 2.4.4
Dotclear Dotclear 2.0.2
Dotclear Dotclear 2.1.4
Dotclear Dotclear 2.4.3
Dotclear Dotclear 2.2.2
Dotclear Dotclear 2.6
Dotclear Dotclear 2.5.2
Dotclear Dotclear 2.3.0
Dotclear Dotclear 2.1.1
Dotclear Dotclear 2.3.1
Dotclear Dotclear 2.6.1
Dotclear Dotclear 2.5.1
Dotclear Dotclear 2.4.2
Dotclear Dotclear 2.1.5
Dotclear Dotclear 2.1.7
Dotclear Dotclear 2.2.3
Dotclear Dotclear 2.5.3
Dotclear Dotclear 2.2
5.8
CVSSv2
CVE-2014-3781
The dcXmlRpc::setUser method in nc/core/class.dc.xmlrpc.php in Dotclear prior to 2.6.3 allows remote malicious users to bypass authentication via an empty password in an XML-RPC request.
Dotclear Dotclear
Dotclear Dotclear 2.6
Dotclear Dotclear 2.6.1
6
CVSSv2
CVE-2014-3782
Multiple incomplete blacklist vulnerabilities in the filemanager::isFileExclude method in the Media Manager in Dotclear prior to 2.6.3 allow remote authenticated users to execute arbitrary PHP code by uploading a file with a (1) double extension or (2) .php5, (3) .phtml, or some ...
Dotclear Dotclear
Dotclear Dotclear 2.6
Dotclear Dotclear 2.6.1
6
CVSSv2
CVE-2014-3783
SQL injection vulnerability in admin/categories.php in Dotclear prior to 2.6.3 allows remote authenticated users with the manage categories permission to execute arbitrary SQL commands via the categories_order parameter.
Dotclear Dotclear 1.2.3
Dotclear Dotclear 2.0
Dotclear Dotclear 2.2.1
Dotclear Dotclear 2.1
Dotclear Dotclear 2.0.1
Dotclear Dotclear 2.4.4
Dotclear Dotclear
Dotclear Dotclear 2.0.2
Dotclear Dotclear 2.1.4
Dotclear Dotclear 2.4.3
Dotclear Dotclear 2.2.2
Dotclear Dotclear 2.6
Dotclear Dotclear 1.2.5
Dotclear Dotclear 2.5.2
Dotclear Dotclear 2.3.0
Dotclear Dotclear 2.1.1
Dotclear Dotclear 1.2.2
Dotclear Dotclear 2.3.1
Dotclear Dotclear 2.6.1
Dotclear Dotclear 1.2.6
Dotclear Dotclear 2.5.1
Dotclear Dotclear 2.4.2
7.5
CVSSv2
CVE-2014-1613
Dotclear prior to 2.6.2 allows remote malicious users to execute arbitrary PHP code via a serialized object in the dc_passwd cookie to a password-protected page, which is not properly handled by (1) inc/public/lib.urlhandlers.php or (2) plugins/pages/_public.php.
Dotclear Dotclear 2.0
Dotclear Dotclear 2.2.1
Dotclear Dotclear 2.1
Dotclear Dotclear 2.0.1
Dotclear Dotclear 2.4.4
Dotclear Dotclear
Dotclear Dotclear 2.0.2
Dotclear Dotclear 2.1.4
Dotclear Dotclear 2.4.3
Dotclear Dotclear 2.2.2
Dotclear Dotclear 2.6
Dotclear Dotclear 2.5.2
Dotclear Dotclear 2.3.0
Dotclear Dotclear 2.1.1
Dotclear Dotclear 2.3.1
Dotclear Dotclear 2.5.1
Dotclear Dotclear 2.4.2
Dotclear Dotclear 2.1.5
Dotclear Dotclear 2.1.7
Dotclear Dotclear 2.2.3
Dotclear Dotclear 2.5.3
Dotclear Dotclear 2.2
4.3
CVSSv2
CVE-2012-3414
Cross-site scripting (XSS) vulnerability in swfupload.swf in SWFUpload 2.2.0.1 and previous versions, as used in WordPress prior to 3.3.2, TinyMCE Image Manager 1.1, and other products, allows remote malicious users to inject arbitrary web script or HTML via the movieName paramet...
Wordpress Wordpress 3.0.5
Swfupload Project Swfupload 2.0.2
Wordpress Wordpress 3.0.2
Wordpress Wordpress 3.2.1
Wordpress Wordpress 3.1.4
Wordpress Wordpress 3.0
Wordpress Wordpress 3.2
Swfupload Project Swfupload 2.2.0
Wordpress Wordpress 3.0.1
Wordpress Wordpress 3.1.3
Swfupload Project Swfupload 2.1.0
Tinymce Image Manager 1.1
Wordpress Wordpress
Wordpress Wordpress 3.0.4
Wordpress Wordpress 3.1
Wordpress Wordpress 3.1.2
Wordpress Wordpress 3.0.6
Swfupload Project Swfupload
Wordpress Wordpress 3.1.1
Wordpress Wordpress -
Wordpress Wordpress 3.3
Wordpress Wordpress 3.0.3
1 EDB exploit
2 Github repositories
1 Article
4.3
CVSSv2
CVE-2012-1039
Multiple cross-site scripting (XSS) vulnerabilities in Dotclear prior to 2.4.2 allow remote malicious users to inject arbitrary web script or HTML via the (1) login_data parameter to admin/auth.php; (2) nb parameter to admin/blogs.php; (3) type, (4) sortby, (5) order, or (6) stat...
Dotclear Dotclear 1.2.3
Dotclear Dotclear 2.0
Dotclear Dotclear 2.2.1
Dotclear Dotclear 2.1
Dotclear Dotclear 2.0.1
Dotclear Dotclear 2.0.2
Dotclear Dotclear 2.1.4
Dotclear Dotclear 2.2.2
Dotclear Dotclear 1.2.5
Dotclear Dotclear 2.3.0
Dotclear Dotclear 2.1.1
Dotclear Dotclear 1.2.2
Dotclear Dotclear
Dotclear Dotclear 1.2.6
Dotclear Dotclear 2.1.5
Dotclear Dotclear 2.1.7
Dotclear Dotclear 2.2.3
Dotclear Dotclear 1.2.7
Dotclear Dotclear 2.2
Dotclear Dotclear 1.2.4
Dotclear Dotclear 2.1.6
Dotclear Dotclear 2.1.3
4 EDB exploits
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
deserialization
CVE-2024-4541
CVE-2024-3080
CVE-2024-4787
log injection
CVE-2024-5967
inject
CVE-2024-30078
CVE-2024-5899
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
NEXT »