Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
stefan schurtz vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2012-5913
Cross-site scripting (XSS) vulnerability in wp-integrator.php in the WordPress Integrator module 1.32 for WordPress allows remote malicious users to inject arbitrary web script or HTML via the redirect_to parameter to wp-login.php.
Wordpress Integrator Project Wordpress Integrator 1.32
1 EDB exploit
NA
CVE-2012-2332
SQL injection vulnerability in serendipity/serendipity_admin.php in Serendipity prior to 1.6.1 allows remote malicious users to execute arbitrary SQL commands via the serendipity[plugin_to_conf] parameter. NOTE: this issue might be resultant from cross-site request forgery (CSRF)...
S9y Serendipity 0.8.4
S9y Serendipity 0.9.1
S9y Serendipity 1.1.1
S9y Serendipity 0.7.1
S9y Serendipity 1.5.4
S9y Serendipity 1.5.3
S9y Serendipity 0.4
S9y Serendipity 1.1
S9y Serendipity 1.2.1
S9y Serendipity 1.2
S9y Serendipity 0.7
S9y Serendipity 1.0.4
S9y Serendipity 1.3
S9y Serendipity 1.1.2
S9y Serendipity 1.0
S9y Serendipity 1.5.1
S9y Serendipity 1.4.1
S9y Serendipity
S9y Serendipity 0.9
S9y Serendipity 0.8
S9y Serendipity 0.8.1
S9y Serendipity 1.6.1
1 EDB exploit
6.1
CVSSv3
CVE-2011-4454
Multiple cross-site scripting vulnerabilities in Tiki 8.0 RC1 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the path info to (1) tiki-remind_password.php, (2) tiki-index.php, (3) tiki-login_scr.php, or (4) tiki-index.
Tiki Tiki
Tiki Tiki 8.0
6.1
CVSSv3
CVE-2011-4455
Multiple cross-site scripting vulnerabilities in Tiki 7.2 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the path info to (1) tiki-admin_system.php, (2) tiki-pagehistory.php, (3) tiki-removepage.php, or (4) tiki-rename_page.php.
Tiki Tiki
NA
CVE-2011-4561
Cross-site scripting (XSS) vulnerability in admin.php in Phorum 5.2.18 allows remote malicious users to inject arbitrary web script or HTML via the PATH_INFO to admin/index.php. NOTE: some of these details are obtained from third party information.
Phorum Phorum 5.2.18
1 EDB exploit
NA
CVE-2011-4564
Cross-site scripting (XSS) vulnerability in the admin script in Active CMS 1.2 allows remote malicious users to inject arbitrary web script or HTML via the mod parameter in a module action.
Activedev Active Cms 1.2
1 EDB exploit
NA
CVE-2012-0900
Multiple cross-site scripting (XSS) vulnerabilities in Beehive Forum 1.0.1 allow remote malicious users to inject arbitrary web script or HTML via the PATH_INFO to (1) forum/register.php or (2) forum/logon.php.
Beehive Forum Beehive Forum 1.0.1
1 EDB exploit
NA
CVE-2012-2903
Multiple cross-site scripting (XSS) vulnerabilities in PHP Address Book 7.0 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the (1) PATH_INFO to group.php, or the (2) target_language or (3) target_flag parameter to translate.php.
Chatelao Php Address Book 5.8.1
Chatelao Php Address Book 5.7.5
Chatelao Php Address Book 5.5
Chatelao Php Address Book 5.4.9
Chatelao Php Address Book 5.4.2
Chatelao Php Address Book 5.4.1
Chatelao Php Address Book 4.1.3
Chatelao Php Address Book 4.1.1
Chatelao Php Address Book 3.4.4
Chatelao Php Address Book 3.4.3
Chatelao Php Address Book 3.3.15
Chatelao Php Address Book 3.3.14
Chatelao Php Address Book 3.3.5
Chatelao Php Address Book 5.7.4
Chatelao Php Address Book 5.7.3
Chatelao Php Address Book 3.4.9
Chatelao Php Address Book 5.4.7
Chatelao Php Address Book 5.4
Chatelao Php Address Book 5.3
Chatelao Php Address Book 4.0.2
Chatelao Php Address Book 4.0
Chatelao Php Address Book 3.4.2
1 EDB exploit
NA
CVE-2011-4335
Multiple cross-site scripting (XSS) vulnerabilities in Contao prior to 2.10.2 allow remote malicious users to inject arbitrary web script or HTML via the PATH_INFO to index.php in a (1) teachers.html or (2) teachers/ action.
Contao Contao Cms 2.10.0
Contao Contao Cms 2.9.0
Contao Contao Cms 2.8.4
Contao Contao Cms 2.7.7
Contao Contao Cms 2.7.6
Contao Contao Cms 2.7.0
Contao Contao Cms 2.6.1
Contao Contao Cms 2.6.0
Contao Contao Cms 2.5.5
Contao Contao Cms 2.5.4
Contao Contao Cms 2.4.7
Contao Contao Cms 2.4.6
Contao Contao Cms 2.4.5
Contao Contao Cms 2.3.4
Contao Contao Cms 2.3.3
Contao Contao Cms 2.2.9
Contao Contao Cms 2.2.8
Contao Contao Cms 2.2.1
Contao Contao Cms 2.2.0
Contao Contao Cms 2.1.22
Contao Contao Cms 2.1.15
Contao Contao Cms 2.1.14
1 EDB exploit
NA
CVE-2012-6528
Multiple cross-site scripting (XSS) vulnerabilities in ATutor prior to 2.1 allow remote malicious users to inject arbitrary web script or HTML via the PATH_INFO to (1) themes/default/tile_search/index.tmpl.php, (2) login.php, (3) search.php, (4) password_reminder.php, (5) login.p...
Atutor Atutor 1.5.3.1
Atutor Atutor 1.6.1
Atutor Atutor 1.4.2
Atutor Atutor 1.4.1
Atutor Atutor 1.3.1
Atutor Atutor 1.3
Atutor Atutor 2.0.2
Atutor Atutor 2.0.1
Atutor Atutor 1.6.4
Atutor Atutor 1.6
Atutor Atutor 1.5.1
Atutor Atutor 1.4.3
Atutor Atutor 1.2.2
Atutor Atutor
Atutor Atutor 1.5.4
Atutor Atutor 1.5.5
Atutor Atutor 1.5.3
Atutor Atutor 1.3.3
Atutor Atutor 1.3.2
Atutor Atutor 2.0.3
Atutor Atutor 1.5.3.2
Atutor Atutor 1.5.2
1 EDB exploit
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-33572
CVE-2024-24919
CVE-2024-0230
CVE-2024-32714
HTML injection
local file inclusion
CVE-2024-31098
CVE-2024-31244
privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
NEXT »