Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
htbridge.com vulnerabilities and exploits
(subscribe to this query)
6.8
CVSSv2
CVE-2013-6992
Cross-site request forgery (CSRF) vulnerability in askapache-firefox-adsense.php in the AskApache Firefox Adsense plugin 3.0 and previous versions for WordPress allows remote malicious users to hijack the authentication of administrators for requests that conduct cross-site scrip...
Askapache Firefox Adsense
5
CVSSv2
CVE-2013-7138
Directory traversal vulnerability in lib/functions/d-load.php in Horizon Quick Content Management System (QCMS) 4.0 and previous versions allows remote malicious users to read arbitrary files via a .. (dot dot) in the start parameter.
Horizon Quick Content Management System Project Horizon Quick Content Management System
Horizon Quick Content Management System Project Horizon Quick Content Management System 3.5.2
Horizon Quick Content Management System Project Horizon Quick Content Management System 3.5.1
Horizon Quick Content Management System Project Horizon Quick Content Management System 3.4
Horizon Quick Content Management System Project Horizon Quick Content Management System 3.3
Horizon Quick Content Management System Project Horizon Quick Content Management System 3.2
4.3
CVSSv2
CVE-2013-6168
Cross-site scripting (XSS) vulnerability in Zikula Application Framework prior to 1.3.6 allows remote malicious users to inject arbitrary web script or HTML via the returnpage parameter to index.php.
Zikula Zikula Application Framework 1.3.2
Zikula Zikula Application Framework 1.3.1
Zikula Zikula Application Framework 1.3.0
Zikula Zikula Application Framework
Zikula Zikula Application Framework 1.3.4
Zikula Zikula Application Framework 1.3.3
NA
CVE-2014-19062
VideoWhisper Live Streaming Integration version 4.27.3 suffers from cross site scripting, remote shell upload, information exposure, and path traversal vulnerabilities.
NA
CVE-2014-19084
VideoWhisper Live Streaming Integration version 4.27.3 suffers from cross site scripting, remote shell upload, information exposure, and path traversal vulnerabilities.
NA
CVE-2014-26541
MobFox mAdserver version 2.0 suffers from a remote SQL injection vulnerability.
6.5
CVSSv2
CVE-2013-3638
SQL injection vulnerability in Boonex Dolphin prior to 7.1.3 allows remote authenticated users to execute arbitrary SQL commands via the 'pathes' parameter in 'categories.php'.
Boonex Dolphin
6.8
CVSSv2
CVE-2014-3920
Cross-site request forgery (CSRF) vulnerability in Kanboard prior to 1.0.6 allows remote malicious users to hijack the authentication of administrators for requests that add an administrative user via a save action to the default URI.
Kanboard Kanboard
Kanboard Kanboard 1.0.5
Kanboard Kanboard 1.0.4
Kanboard Kanboard 1.0.1
Kanboard Kanboard 1.0.0
Kanboard Kanboard 1.0.3
Kanboard Kanboard 1.0.2
NA
CVE-2012-58491
ClipBucket version 2.6 revision 738 suffers from a remote SQL injection vulnerability.
NA
CVE-2012-58751
FireFly Mediaserver version 1.0.0.1359 suffers from a denial of service vulnerability that can be triggered by a NULL pointer dereference.
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-20065
open redirect
CVE-2024-1086
path traversal
CVE-2024-29825
XXE
CVE-2024-29822
CVE-2024-20696
CVE-2024-3564
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
2
3
4
5
6
7
8
9
10
NEXT »