Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
stefan schurtz vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2012-4226
Multiple cross-site scripting (XSS) vulnerabilities in Quick Post Widget plugin 1.9.1 for WordPress allow remote malicious users to inject arbitrary web script or HTML via the (1) Title, (2) Content, or (3) New category field to wordpress/ or (4) query string to wordpress/.
Qpw.famvanakkeren Quick Post Widget 1.9.1
NA
CVE-2012-4749
Admidio 2.3.5 - Multiple Vulnerabilities
1 EDB exploit
NA
CVE-2012-5102
Cross-site scripting (XSS) vulnerability in inc/extensions.php in VertrigoServ 2.25 allows remote malicious users to inject arbitrary web script or HTML via the ext parameter.
Dariusz Handzlik Vertrigoserv 2.25
1 EDB exploit
NA
CVE-2012-6520
Multiple SQL injection vulnerabilities in the advanced search in Wikidforum 2.10 allow remote malicious users to execute arbitrary SQL commands via the (1) select_sort or (2) opt_search_select parameters. NOTE: this issue could not be reproduced by third parties.
Wikidforum Wikidforum 2.10
1 EDB exploit
NA
CVE-2012-6528
Multiple cross-site scripting (XSS) vulnerabilities in ATutor prior to 2.1 allow remote malicious users to inject arbitrary web script or HTML via the PATH_INFO to (1) themes/default/tile_search/index.tmpl.php, (2) login.php, (3) search.php, (4) password_reminder.php, (5) login.p...
Atutor Atutor 1.5.3.1
Atutor Atutor 1.6.1
Atutor Atutor 1.4.2
Atutor Atutor 1.4.1
Atutor Atutor 1.3.1
Atutor Atutor 1.3
Atutor Atutor 2.0.2
Atutor Atutor 2.0.1
Atutor Atutor 1.6.4
Atutor Atutor 1.6
Atutor Atutor 1.5.1
Atutor Atutor 1.4.3
Atutor Atutor 1.2.2
Atutor Atutor
Atutor Atutor 1.5.4
Atutor Atutor 1.5.5
Atutor Atutor 1.5.3
Atutor Atutor 1.3.3
Atutor Atutor 1.3.2
Atutor Atutor 2.0.3
Atutor Atutor 1.5.3.2
Atutor Atutor 1.5.2
1 EDB exploit
NA
CVE-2012-5913
Cross-site scripting (XSS) vulnerability in wp-integrator.php in the WordPress Integrator module 1.32 for WordPress allows remote malicious users to inject arbitrary web script or HTML via the redirect_to parameter to wp-login.php.
Wordpress Integrator Project Wordpress Integrator 1.32
1 EDB exploit
NA
CVE-2012-4748
Admidio 2.3.5 - Multiple Vulnerabilities
1 EDB exploit
NA
CVE-2011-4335
Multiple cross-site scripting (XSS) vulnerabilities in Contao prior to 2.10.2 allow remote malicious users to inject arbitrary web script or HTML via the PATH_INFO to index.php in a (1) teachers.html or (2) teachers/ action.
Contao Contao Cms 2.10.0
Contao Contao Cms 2.9.0
Contao Contao Cms 2.8.4
Contao Contao Cms 2.7.7
Contao Contao Cms 2.7.6
Contao Contao Cms 2.7.0
Contao Contao Cms 2.6.1
Contao Contao Cms 2.6.0
Contao Contao Cms 2.5.5
Contao Contao Cms 2.5.4
Contao Contao Cms 2.4.7
Contao Contao Cms 2.4.6
Contao Contao Cms 2.4.5
Contao Contao Cms 2.3.4
Contao Contao Cms 2.3.3
Contao Contao Cms 2.2.9
Contao Contao Cms 2.2.8
Contao Contao Cms 2.2.1
Contao Contao Cms 2.2.0
Contao Contao Cms 2.1.22
Contao Contao Cms 2.1.15
Contao Contao Cms 2.1.14
1 EDB exploit
6.1
CVSSv3
CVE-2011-4454
Multiple cross-site scripting vulnerabilities in Tiki 8.0 RC1 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the path info to (1) tiki-remind_password.php, (2) tiki-index.php, (3) tiki-login_scr.php, or (4) tiki-index.
Tiki Tiki
Tiki Tiki 8.0
6.1
CVSSv3
CVE-2011-4455
Multiple cross-site scripting vulnerabilities in Tiki 7.2 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the path info to (1) tiki-admin_system.php, (2) tiki-pagehistory.php, (3) tiki-removepage.php, or (4) tiki-rename_page.php.
Tiki Tiki
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
authentication bypass
CVE-2024-30043
camera
CVE-2023-40404
CVE-2024-2793
client side
CVE-2024-4469
CVE-2024-3565
CVE-2024-29825
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
NEXT »