OSVDB: Open Sourced Vulnerability Database

Creditee: Number 7

Known Contact Information:

(as of 2011-09-29)

Known Affiliations:

None at this time

Disclosed Vulnerabilities (8):

Disc. Date	OSVDB ID	CVEID	Title
2012-03-14	80593	2012-5330	smarty_ajax register.php URI XSS
2012-03-14	80595	2012-5331	smarty_ajax index.php page Parameter Traversal Arbitrary File Access
2012-03-14	80591	2012-5330	smarty_ajax calc.php URI XSS
2012-03-14	80592	2012-5330	smarty_ajax chat.php URI XSS
2012-03-14	80594	2012-5330	smarty_ajax index.php Multiple Parameter XSS
2012-03-12	80608		ACal Multiple Administrator Function CSRF
2012-03-05	80024		Lizard Cart CMS search.php metode Parameter SQL Injection
2011-09-29	83880		TYPO3 fileadmin/download.php Fichier_a_telecharger Parameter Traversal Arbitrary File Access

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.