Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
htbridge.com vulnerabilities and exploits
(subscribe to this query)
8.8
CVSSv3
CVE-2013-3638
SQL injection vulnerability in Boonex Dolphin prior to 7.1.3 allows remote authenticated users to execute arbitrary SQL commands via the 'pathes' parameter in 'categories.php'.
Boonex Dolphin
NA
CVE-2013-4600
Multiple cross-site scripting (XSS) vulnerabilities in Alkacon OpenCms prior to 8.5.2 allow remote malicious users to inject arbitrary web script or HTML via the (1) title parameter to system/workplace/views/admin/admin-main.jsp or the (2) requestedResource parameter to system/lo...
Alkacon Opencms 6.2.3
Alkacon Opencms 7.0.3
Alkacon Opencms 7.0.4
Alkacon Opencms
Alkacon Opencms 6.2
Alkacon Opencms 6.0.3
Alkacon Opencms 6.0.0
Alkacon Opencms 6.0.2
Alkacon Opencms 6.0.4
Alkacon Opencms 6.2.1
Alkacon Opencms 6.2.2
Alkacon Opencms 8.5
NA
CVE-2013-46001
OpenCMS version 8.5.1 suffers from a cross site scripting vulnerability.
NA
CVE-2013-46241
Jahia xCM version 6.6.1.0 r43343 suffers from multiple cross site scripting vulnerabilities.
NA
CVE-2015-22941
pfSense version 2.2 suffers from cross site request forgery and cross site scripting vulnerabilities.
NA
CVE-2015-22952
pfSense version 2.2 suffers from cross site request forgery and cross site scripting vulnerabilities.
NA
CVE-2012-38691
Redaxo version 4.4 suffers from a cross site scripting vulnerability.
NA
CVE-2014-2988
EGroupware Enterprise Line (EPL) prior to 1.1.20140505, EGroupware Community Edition prior to 1.8.007.20140506, and EGroupware prior to 14.1 beta allows remote authenticated administrators to execute arbitrary PHP code via crafted callback values to the call_user_func PHP functio...
Egroupware Egroupware
8.8
CVSSv3
CVE-2014-1946
OpenDocMan 1.2.7 and previous versions does not properly validate allowed actions, which allows remote authenticated users to bypass an intended access restrictions and assign administrative privileges to themselves via a crafted request to signup.php.
Opendocman Opendocman
NA
CVE-2014-4734
Cross-site scripting (XSS) vulnerability in e107_admin/db.php in e107 2.0 alpha2 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the type parameter.
E107 E107
E107 E107 2.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-2108
CVE-2024-31061
CVE-2024-25959
CVE-2023-45866
injection
IDOR
memory leak
CVE-2024-1086
CVE-2023-42931
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
NEXT »