Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
high-tech bridge sa vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv2
CVE-2012-1835
Multiple cross-site scripting (XSS) vulnerabilities in the All-in-One Event Calendar plugin 1.4 and 1.5 for WordPress allow remote malicious users to inject arbitrary web script or HTML via the (1) title parameter to app/view/agenda-widget-form.php; (2) args, (3) title, (4) befor...
Timely All-in-one Event Calendar 1.5
Timely All-in-one Event Calendar 1.4
4 EDB exploits
4.3
CVSSv2
CVE-2011-1670
Cross-site scripting (XSS) vulnerability in actions/add.php in InTerra Blog Machine 1.84, and possibly earlier versions, allows remote malicious users to inject arbitrary web script or HTML via the subject parameter to post_url/edit.
A.kulikov Interra Blog Machine 1.84
2 EDB exploits
7.5
CVSSv2
CVE-2011-5213
Multiple SQL injection vulnerabilities in BrowserCRM 5.100.01 and previous versions allow remote malicious users to execute arbitrary SQL commands via the (1) login[username] parameter to index.php, (2) parent_id parameter to modules/Documents/version_list.php, or (3) contact_id ...
Browsercrm Browsercrm 5.001.00
Browsercrm Browsercrm 5.000.01
Browsercrm Browsercrm 4.624.60
Browsercrm Browsercrm 4.624.50
Browsercrm Browsercrm 4.616.00
Browsercrm Browsercrm 4.615.11
Browsercrm Browsercrm 4.615.10
Browsercrm Browsercrm 4.604.01
Browsercrm Browsercrm 5.000.00
Browsercrm Browsercrm 4.999.20
Browsercrm Browsercrm 4.624.01
Browsercrm Browsercrm 4.624.00
Browsercrm Browsercrm 4.614.00
Browsercrm Browsercrm 4.612.00
Browsercrm Browsercrm
Browsercrm Browsercrm 4.691.01
Browsercrm Browsercrm 4.624.90
Browsercrm Browsercrm 4.622.00
Browsercrm Browsercrm 4.620.01
Browsercrm Browsercrm 4.611.01
Browsercrm Browsercrm 4.610.00
Browsercrm Browsercrm 5.100.00
2 EDB exploits
4.3
CVSSv2
CVE-2011-5258
Multiple cross-site scripting (XSS) vulnerabilities in OrangeHRM prior to 2.6.11.2 allow remote malicious users to inject arbitrary web script or HTML via the (1) uniqcode or (2) isAdmin parameter to index.php; or the (3) PATH_INFO to lib/controllers/centralcontroller.php.
Orangehrm Orangehrm 2.6.7
Orangehrm Orangehrm 2.6.6
Orangehrm Orangehrm 2.6.0.1
Orangehrm Orangehrm
Orangehrm Orangehrm 2.6.5
Orangehrm Orangehrm 2.6.4
Orangehrm Orangehrm 2.6.8.1
Orangehrm Orangehrm 2.6.8
Orangehrm Orangehrm 2.6.1
Orangehrm Orangehrm 2.6.0
Orangehrm Orangehrm 2.6.10
Orangehrm Orangehrm 2.6.9
Orangehrm Orangehrm 2.6.3
Orangehrm Orangehrm 2.6.2
2 EDB exploits
4.3
CVSSv2
CVE-2011-0772
Multiple cross-site scripting (XSS) vulnerabilities in PivotX 2.2.0, and possibly other versions prior to 2.2.2, allow remote malicious users to inject arbitrary web script or HTML via the (1) color parameter to includes/blogroll.php or (2) src parameter to includes/timwrapper.ph...
Pivotx Pivotx 2.1.1
Pivotx Pivotx 2.1.0
Pivotx Pivotx 2.2.1
Pivotx Pivotx 2.2.0
Pivotx Pivotx 2.1.2
2 EDB exploits
4.3
CVSSv2
CVE-2010-1724
Multiple cross-site scripting (XSS) vulnerabilities in Zikula Application Framework 1.2.2, and possibly earlier, allow remote malicious users to inject arbitrary web script or HTML via the (1) func parameter to index.php, or the (2) lang parameter to index.php, which is not prope...
Zikula Zikula Application Framework 1.2.2
2 EDB exploits
4.3
CVSSv2
CVE-2010-3023
Multiple cross-site scripting (XSS) vulnerabilities in DiamondList 0.1.6, and possibly earlier, allow remote malicious users to inject arbitrary web script or HTML via the (1) category[description] parameter to user/main/update_category, which is not properly handled by _app/view...
Hulihanapplications Diamondlist 0.1.6
2 EDB exploits
4.3
CVSSv2
CVE-2012-0984
Multiple cross-site scripting (XSS) vulnerabilities in XOOPS prior to 2.5.5 allow remote malicious users to inject arbitrary web script or HTML via the (1) to_userid parameter to modules/pm/pmlite.php or the (2) current_file, (3) imgcat_id, or (4) target parameter to class/xoopse...
Xoops Xoops 2.5.2
Xoops Xoops 2.5.3
Xoops Xoops
Xoops Xoops 2.5.0
Xoops Xoops 2.5.1
3 EDB exploits
4.3
CVSSv2
CVE-2012-1001
Multiple cross-site scripting (XSS) vulnerabilities in Chyrp prior to 2.1.2 and prior to 2.5 Beta 2 allow remote malicious users to inject arbitrary web script or HTML via the (1) content parameter to includes/ajax.php or (2) body parameter to includes/error.php.
Chyrp Chyrp
Chyrp Chyrp 2.5.2
2 EDB exploits
4.3
CVSSv2
CVE-2012-2452
Multiple cross-site scripting (XSS) vulnerabilities in pragmaMx 1.x prior to 1.12.2 allow remote malicious users to inject arbitrary web script or HTML via the (1) name parameter to modules.php or (2) img_url to includes/wysiwyg/spaw/editor/plugins/imgpopup/img_popup.php.
Pragmamx Pragmamx
2 EDB exploits
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4040
privilege escalation
CVE-2024-4112
CVE-2024-32872
man-in-the-middle
CVE-2024-32788
bypass
CVE-2024-3400
CVE-2024-28976
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
NEXT »