Latest CVEs with Public Exploits | Exploit Intelligence

CVE-2011-4191 3 PoCs Analysis EPSS 0.10

Novell NetWare 6.5 SP8 - Buffer Overflow

Stack-based buffer overflow in the xdrDecodeString function in XNFS.NLM in Novell NetWare 6.5 SP8 allows remote attackers to execute arbitrary code or cause a denial of service (abend or NFS outage) via long packets.

CWE-119 Nov 30, 2011 STIX 2.1

CVE-2011-5025 2 PoCs Analysis EPSS 0.03

Yaws 1.88 - Cross-Site Scripting via Wiki Application Parameters

Multiple cross-site scripting (XSS) vulnerabilities in the wiki application in Yaws 1.88 allow remote attackers to inject arbitrary web script or HTML via (1) the tag parameter to editTag.yaws, (2) the index parameter to showOldPage.yaws, (3) the node parameter to allRefsToMe.yaws, or (4) the text parameter to editPage.yaws.

CWE-79 Dec 29, 2011 STIX 2.1

CVE-2011-5252 1 PoC Analysis NUCLEI EPSS 0.12

Orchard 1.0.x-1.0.20, 1.1.x-1.1.30, 1.2.x-1.2.41, 1.3.x-1.3.9 - Open Redirect via ReturnUrl Parameter

Open redirect vulnerability in Users/Account/LogOff in Orchard 1.0.x before 1.0.21, 1.1.x before 1.1.31, 1.2.x before 1.2.42, and 1.3.x before 1.3.10 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the ReturnUrl parameter.

CWE-20 Jan 12, 2013 STIX 2.1

CVE-2011-5209 1 PoC Analysis EPSS 0.02

GraphicsClone Script - Cross-Site Scripting via Search Term Parameter

Cross-site scripting (XSS) vulnerability in search/ in GraphicsClone Script, possibly 1.11, allows remote attackers to inject arbitrary web script or HTML via the term parameter.

CWE-79 Oct 09, 2012 STIX 2.1

CVE-2011-4614 1 PoC Analysis EPSS 0.06

TYPO3 4.5.x-4.5.9 4.6.x-4.6.2 4.7 - Remote Code Execution via BACK_PATH Parameter

PHP remote file inclusion vulnerability in Classes/Controller/AbstractController.php in the workspaces system extension in TYPO3 4.5.x before 4.5.9, 4.6.x before 4.6.2, and development versions of 4.7 allows remote attackers to execute arbitrary PHP code via a URL in the BACK_PATH parameter.

CWE-94 Feb 18, 2012 STIX 2.1

CVE-2011-5019 1 PoC Analysis EPSS 0.02

Textpattern CMS 4.4.1 - Cross-Site Scripting via ddb Parameter

Cross-site scripting (XSS) vulnerability in setup/index.php in Textpattern CMS 4.4.1, when the product is incompletely installed, allows remote attackers to inject arbitrary web script or HTML via the ddb parameter.

CWE-79 Jan 05, 2012 STIX 2.1

CVE-2011-5193 1 PoC Analysis EPSS 0.04

phpace samswhois < 1.4.2.3 - Cross-Site Scripting via Domain Parameter

Cross-site scripting (XSS) vulnerability in vendors/samswhois/samswhois.inc.php in the Whois Search plugin 1.4.2.3 for WordPress, when the WHOIS widget is enabled, allows remote attackers to inject arbitrary web script or HTML via the domain parameter to index.php, a different vulnerability than CVE-2011-5194.

CWE-79 Sep 23, 2012 STIX 2.1

CVE-2011-5207 1 PoC Analysis EPSS 0.05

TheCartPress < 1.1.6 - Cross-Site Scripting via tcp_name_post_XXXXX Parameter

Cross-site scripting (XSS) vulnerability in admin/OptionsPostsList.php in the TheCartPress plugin for WordPress before 1.1.6 before 2011-12-31 allows remote attackers to inject arbitrary web script or HTML via the tcp_name_post_XXXXX parameter.

CWE-79 Oct 04, 2012 STIX 2.1

CVE-2011-4362 1 PoC Analysis EPSS 0.23

lighttpd 1.4-1.4.29 - Denial of Service via Base64 Decode Integer Signedness Error

Integer signedness error in the base64_decode function in the HTTP authentication functionality (http_auth.c) in lighttpd 1.4 before 1.4.30 and 1.5 before SVN revision 2806 allows remote attackers to cause a denial of service (segmentation fault) via crafted base64 input that triggers an out-of-bounds read with a negative index.

Dec 24, 2011 STIX 2.1

CVE-2011-5204 1 PoC Analysis EPSS 0.01

Akiva WebBoard 8.x - Plaintext Password Storage

Akiva WebBoard 8.x stores passwords in plaintext, which allows local users to obtain sensitive information by reading from the database.

CWE-255 Oct 04, 2012 STIX 2.1

CVE-2011-5203 1 PoC Analysis EPSS 0.01

Akiva WebBoard < 8.0 - SQL Injection via WB/Default.asp Name Parameter

SQL injection vulnerability in WB/Default.asp in Akiva WebBoard before 8 SR 1 allows remote attackers to execute arbitrary SQL commands via the name parameter. NOTE: some of these details are obtained from third party information.

CWE-89 Oct 04, 2012 STIX 2.1

CVE-2011-5200 1 PoC Analysis EPSS 0.02

DeDeCMS - SQL Injection via id Parameter

Multiple SQL injection vulnerabilities in DeDeCMS, possibly 5.6, allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) list.php, (2) members.php, or (3) book.php.

CWE-89 Sep 23, 2012 STIX 2.1

CVE-2011-5053 1 PoC Analysis EPSS 0.03

Wi-Fi Protected Setup Protocol - Improper Authentication via EAP-NACK Message Handling

The Wi-Fi Protected Setup (WPS) protocol, when the "external registrar" authentication method is used, does not properly inform clients about failed PIN authentication, which makes it easier for remote attackers to discover the PIN value, and consequently discover the Wi-Fi network password or reconfigure an access point, by reading EAP-NACK messages.

CWE-287 Jan 06, 2012 STIX 2.1

CVE-2011-5140 1 PoC Analysis EPSS 0.02

DiY-CMS blog module 1.0 - SQL Injection via Multiple Parameters

Multiple SQL injection vulnerabilities in the blog module 1.0 for DiY-CMS allow remote attackers to execute arbitrary SQL commands via the (1) start parameter to (a) tags.php, (b) list.php, (c) index.php, (d) main_index.php, (e) viewpost.php, (f) archive.php, (g) control/approve_comments.php, (h) control/approve_posts.php, and (i) control/viewcat.php; and the (2) month and (3) year parameters to archive.php.

CWE-89 Aug 31, 2012 STIX 2.1

CVE-2011-5023 1 PoC Analysis EPSS 0.02

Pligg CMS 1.1.4 - Cross-Site Scripting via PATH_INFO to Search Program

Cross-site scripting (XSS) vulnerability in Pligg CMS 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the search program, a different vulnerability than CVE-2011-3986.

CWE-79 Dec 29, 2011 STIX 2.1

CVE-2011-5022 1 PoC Analysis EPSS 0.01

Pligg CMS 1.1.2 - SQL Injection via Status Parameter

SQL injection vulnerability in search.php in Pligg CMS 1.1.2 allows remote attackers to execute arbitrary SQL commands via the status parameter.

CWE-89 Dec 29, 2011 STIX 2.1

CVE-2011-5026 1 PoC Analysis EPSS 0.02

Winn GuestBook < 2.4.8d - Cross-Site Scripting via Name Parameter

Cross-site scripting (XSS) vulnerability in the addPost function in data/functions.php in Winn GuestBook before 2.4.8d allows remote attackers to inject arbitrary web script or HTML via the name parameter to index.php. NOTE: some of these details are obtained from third party information.

CWE-79 Dec 29, 2011 STIX 2.1

CVE-2011-5148 EXPLOITED 1 PoC Analysis EPSS 0.05

mod_simplefileupload < 1.3.5 - Remote Code Execution via Incomplete Blacklist Bypass

Multiple incomplete blacklist vulnerabilities in the Simple File Upload (mod_simplefileuploadv1.3) module before 1.3.5 for Joomla! allow remote attackers to execute arbitrary code by uploading a file with a (1) php5, (2) php6, or (3) double (e.g. .php.jpg) extension, then accessing it via a direct request to the file in images/, as exploited in the wild in January 2012.

Aug 31, 2012 STIX 2.1

CVE-2011-5161 1 PoC Analysis EPSS 0.02

OpenEMR 4 - Unauthenticated Arbitrary PHP File Upload via Patient Photograph Feature

Unrestricted file upload vulnerability in the patient photograph functionality in OpenEMR 4 allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension followed by a safe extension, then accessing it via a direct request to the patient directory under documents/.

Sep 09, 2012 STIX 2.1

CVE-2011-5160 2 PoCs Analysis EPSS 0.01

OpenEMR 4 - Cross-Site Scripting via Site Parameter

Cross-site scripting (XSS) vulnerability in setup.php in OpenEMR 4 allows remote attackers to inject arbitrary web script or HTML via the site parameter.

CWE-79 Sep 09, 2012 STIX 2.1

Latest Vulnerabilities with Public Exploits

Investigate

Ecosystems

Reference Indexes

Recent Blog Posts

CVEForge Labs

KEV Gaps