Browse CVEs

MEDIUM 5.0 CVE-2010-5087 SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4 allows remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism … Silverstripe Patch available Fix from $1,6002012-08-26 MEDIUM 5.0 CVE-2010-5093 Member_ProfileForm in security/Member.php in SilverStripe 2.3.x before 2.3.7 allows remote attackers to hijack user accounts by saving data using the… Silverstripe Patch available Fix from $1,6002012-08-26 MEDIUM 5.0 CVE-2010-5094 The deleteinstallfiles function in control/ContentController.php in SilverStripe 2.3.x before 2.3.7 does not require ADMIN permissions, which allows … Silverstripe Mitigation only Fix from $1,6002012-08-26 MEDIUM 5.0 CVE-2010-5188 SilverStripe 2.3.x before 2.3.6 allows remote attackers to obtain sensitive information via the (1) debug_memory parameter to core/control/Director.p… Silverstripe Patch available Fix from $1,6002012-08-26 HIGH 7.5 CVE-2008-6753 SQL injection vulnerability in SilverStripe before 2.2.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to… Silverstripe after 2.2.1 Fix from $1,9502009-04-27 HIGH 7.5 CVE-2009-1433 SQL injection vulnerability in File::find (filesystem/File.php) in SilverStripe before 2.3.1 allows remote attackers to execute arbitrary SQL command… Silverstripe after 2.3.1 Fix from $1,9502009-04-24 HIGH 10.0 CVE-2007-2321 Unspecified vulnerability in the search functionality in SilverStripe 2.0.0 has unknown impact and attack vectors. Silverstripe Patch available Fix from $1,9502007-04-27