Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
stefan schurtz vulnerabilities and exploits
(subscribe to this query)
6.1
CVSSv3
CVE-2011-4090
Serendipity prior to 1.6 has an XSS issue in the karma plugin which may allow privilege escalation.
S9y Serendipity
1 EDB exploit
6.1
CVSSv3
CVE-2011-4454
Multiple cross-site scripting vulnerabilities in Tiki 8.0 RC1 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the path info to (1) tiki-remind_password.php, (2) tiki-index.php, (3) tiki-login_scr.php, or (4) tiki-index.
Tiki Tiki
Tiki Tiki 8.0
6.1
CVSSv3
CVE-2011-4455
Multiple cross-site scripting vulnerabilities in Tiki 7.2 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the path info to (1) tiki-admin_system.php, (2) tiki-pagehistory.php, (3) tiki-removepage.php, or (4) tiki-rename_page.php.
Tiki Tiki
NA
CVE-2012-2599
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-3835. Reason: This issue was MERGED into CVE-2012-3835 in accordance with CVE content decisions, because it is the same type of vulnerability and affects the same versions. Notes: All CVE users should referen...
2 EDB exploits
NA
CVE-2012-4226
Multiple cross-site scripting (XSS) vulnerabilities in Quick Post Widget plugin 1.9.1 for WordPress allow remote malicious users to inject arbitrary web script or HTML via the (1) Title, (2) Content, or (3) New category field to wordpress/ or (4) query string to wordpress/.
Qpw.famvanakkeren Quick Post Widget 1.9.1
NA
CVE-2011-4958
Cross-site scripting (XSS) vulnerability in the process function in SSViewer.php in SilverStripe prior to 2.3.13 and 2.4.x prior to 2.4.6 allows remote malicious users to inject arbitrary web script or HTML via the QUERY_STRING to template placeholders, as demonstrated by a reque...
Silverstripe Silverstripe 2.3.0
Silverstripe Silverstripe 2.3.10
Silverstripe Silverstripe 2.3.11
Silverstripe Silverstripe 2.3.7
Silverstripe Silverstripe 2.3.8
Silverstripe Silverstripe
Silverstripe Silverstripe 2.3.2
Silverstripe Silverstripe 2.3.9
Silverstripe Silverstripe 2.4.0
Silverstripe Silverstripe 2.3.1
Silverstripe Silverstripe 2.3.3
Silverstripe Silverstripe 2.3.4
Silverstripe Silverstripe 2.4.1
Silverstripe Silverstripe 2.4.2
Silverstripe Silverstripe 2.4.3
Silverstripe Silverstripe 2.3.5
Silverstripe Silverstripe 2.3.6
Silverstripe Silverstripe 2.4.4
Silverstripe Silverstripe 2.4.5
1 EDB exploit
NA
CVE-2012-6528
Multiple cross-site scripting (XSS) vulnerabilities in ATutor prior to 2.1 allow remote malicious users to inject arbitrary web script or HTML via the PATH_INFO to (1) themes/default/tile_search/index.tmpl.php, (2) login.php, (3) search.php, (4) password_reminder.php, (5) login.p...
Atutor Atutor 1.5.3.1
Atutor Atutor 1.6.1
Atutor Atutor 1.4.2
Atutor Atutor 1.4.1
Atutor Atutor 1.3.1
Atutor Atutor 1.3
Atutor Atutor 2.0.2
Atutor Atutor 2.0.1
Atutor Atutor 1.6.4
Atutor Atutor 1.6
Atutor Atutor 1.5.1
Atutor Atutor 1.4.3
Atutor Atutor 1.2.2
Atutor Atutor
Atutor Atutor 1.5.4
Atutor Atutor 1.5.5
Atutor Atutor 1.5.3
Atutor Atutor 1.3.3
Atutor Atutor 1.3.2
Atutor Atutor 2.0.3
Atutor Atutor 1.5.3.2
Atutor Atutor 1.5.2
1 EDB exploit
NA
CVE-2012-6520
Multiple SQL injection vulnerabilities in the advanced search in Wikidforum 2.10 allow remote malicious users to execute arbitrary SQL commands via the (1) select_sort or (2) opt_search_select parameters. NOTE: this issue could not be reproduced by third parties.
Wikidforum Wikidforum 2.10
1 EDB exploit
NA
CVE-2012-2099
Multiple cross-site scripting (XSS) vulnerabilities in Wikidforum 2.10 allow remote malicious users to inject arbitrary web script or HTML via the (1) search field, or the (2) Author or (3) select_sort parameters in an advanced search.
Wikidforum Wikidforum 2.10
2 EDB exploits
NA
CVE-2012-5913
Cross-site scripting (XSS) vulnerability in wp-integrator.php in the WordPress Integrator module 1.32 for WordPress allows remote malicious users to inject arbitrary web script or HTML via the redirect_to parameter to wp-login.php.
Wordpress Integrator Project Wordpress Integrator 1.32
1 EDB exploit
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
inject
CVE-2024-34001
CVE-2024-37018
LFI
CVE-2024-1275
CVE-2024-1086
CSRF
CVE-2024-31030
CVE-2024-24919
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
NEXT »