Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15405 vulnerabilities in this category.

Critical: 1674 High: 4167 Medium: 8767 Low: 793 Information: 4
Vulnerability Name
CVE
CWE
Severity
Zenphoto Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-4562)
CVE-2009-4562
CWE-707
Medium
Zenphoto Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-4563)
CVE-2009-4563
CWE-707
Medium
Zenphoto Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2009-4564)
CVE-2009-4564
CWE-138
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-4589)
CVE-2009-4589
CWE-707
Medium
phpMyAdmin Other Vulnerability (CVE-2009-4605)
CVE-2009-4605
-
Medium
phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-4780)
CVE-2009-4780
CWE-707
Medium
XOOPS Permissions, Privileges, and Access Controls Vulnerability (CVE-2009-4851)
CVE-2009-4851
CWE-264
Medium
PHP Numeric Errors Vulnerability (CVE-2009-5016)
CVE-2009-5016
-
Medium
Oracle Database Server CVE-2010-0851 Vulnerability (CVE-2010-0851)
CVE-2010-0851
-
Medium
Oracle Database Server CVE-2010-0866 Vulnerability (CVE-2010-0866)
CVE-2010-0866
-
Medium
Jboss EAP Improper Input Validation Vulnerability (CVE-2010-1871)
CVE-2010-1871
CWE-20
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-1649)
CVE-2010-1649
CWE-707
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-1618)
CVE-2010-1618
CWE-707
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-1619)
CVE-2010-1619
CWE-707
Medium
Apache HTTP Server Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2010-1623)
CVE-2010-1623
CWE-119
Medium
phpBB Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-1627)
CVE-2010-1627
CWE-264
Medium
OpenSSL Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-1633)
CVE-2010-1633
CWE-264
Medium
Python Numeric Errors Vulnerability (CVE-2010-1634)
CVE-2010-1634
-
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-1647)
CVE-2010-1647
CWE-707
Medium
MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2010-1648)
CVE-2010-1648
CWE-352
Medium
Piwigo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-1707)
CVE-2010-1707
CWE-707
Medium
Moodle Other Vulnerability (CVE-2010-1616)
CVE-2010-1616
-
Medium
Zikula Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-1724)
CVE-2010-1724
CWE-707
Medium
MySQL Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2010-1848)
CVE-2010-1848
CWE-22
Medium
MySQL Other Vulnerability (CVE-2010-1849)
CVE-2010-1849
-
Medium
MySQL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2010-1850)
CVE-2010-1850
CWE-119
Medium
PHP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-1860)
CVE-2010-1860
CWE-200
Medium
PHP Resource Management Errors Vulnerability (CVE-2010-1861)
CVE-2010-1861
-
Medium
PHP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-1862)
CVE-2010-1862
CWE-200
Medium
PHP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-1864)
CVE-2010-1864
CWE-200
Medium
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-1617)
CVE-2010-1617
CWE-264
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-1614)
CVE-2010-1614
CWE-707
Medium
Oracle Database Server CVE-2010-0867 Vulnerability (CVE-2010-0867)
CVE-2010-0867
-
Medium
TYPO3 Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2010-1153)
CVE-2010-1153
CWE-94
Medium
Oracle Database Server CVE-2010-0892 Vulnerability (CVE-2010-0892)
CVE-2010-0892
-
Medium
Oracle Database Server CVE-2010-0902 Vulnerability (CVE-2010-0902)
CVE-2010-0902
-
Medium
OpenSSL Cryptographic Issues Vulnerability (CVE-2010-0928)
CVE-2010-0928
-
Medium
e107 Other Vulnerability (CVE-2010-0996)
CVE-2010-0996
-
Medium
Zope Web Application Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-1104)
CVE-2010-1104
CWE-707
Medium
PHP Cryptographic Issues Vulnerability (CVE-2010-1128)
CVE-2010-1128
-
Medium
PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-1130)
CVE-2010-1130
CWE-264
Medium
MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2010-1150)
CVE-2010-1150
CWE-352
Medium
Perl Numeric Errors Vulnerability (CVE-2010-1158)
CVE-2010-1158
-
Medium
Moodle Improper Authentication Vulnerability (CVE-2010-1613)
CVE-2010-1613
CWE-287
Medium
Atlassian Jira Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-1164)
CVE-2010-1164
CWE-707
Medium
PostgreSQL Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-1170)
CVE-2010-1170
CWE-264
Medium
MediaWiki Improper Input Validation Vulnerability (CVE-2010-1189)
CVE-2010-1189
CWE-20
Medium
MediaWiki Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-1190)
CVE-2010-1190
CWE-264
Medium
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-1428)
CVE-2010-1428
CWE-264
Medium
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-1429)
CVE-2010-1429
CWE-264
Medium
Apache HTTP Server Other Vulnerability (CVE-2010-1452)
CVE-2010-1452
-
Medium
silverstripeCMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-1593)
CVE-2010-1593
CWE-707
Medium
Opencart Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2010-1610)
CVE-2010-1610
CWE-352
Medium
Coppermine Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2008-7187)
CVE-2008-7187
CWE-200
Medium
phpBB Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2008-7143)
CVE-2008-7143
CWE-200
Medium
WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2007-1897)
CVE-2007-1897
CWE-138
Medium
Oracle Database Server CVE-2007-5515 Vulnerability (CVE-2007-5515)
CVE-2007-5515
-
Medium
Oracle Database Server CVE-2007-5504 Vulnerability (CVE-2007-5504)
CVE-2007-5504
-
Medium
Oracle Database Server Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2007-5507)
CVE-2007-5507
CWE-119
Medium
Oracle Database Server Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2007-5508)
CVE-2007-5508
CWE-138
Medium
Oracle Database Server CVE-2007-5509 Vulnerability (CVE-2007-5509)
CVE-2007-5509
-
Medium
Oracle Database Server CVE-2007-5510 Vulnerability (CVE-2007-5510)
CVE-2007-5510
-
Medium
Oracle Database Server Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2007-5511)
CVE-2007-5511
CWE-138
Medium
Oracle Database Server Other Vulnerability (CVE-2007-5513)
CVE-2007-5513
-
Medium
Oracle Database Server CVE-2007-5514 Vulnerability (CVE-2007-5514)
CVE-2007-5514
-
Medium
LimeSurvey Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2007-5573)
CVE-2007-5573
CWE-94
Medium
Drupal Numeric Errors Vulnerability (CVE-2007-5416)
CVE-2007-5416
-
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-5577)
CVE-2007-5577
CWE-707
Medium
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-5589)
CVE-2007-5589
CWE-707
Medium
Drupal Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2007-5593)
CVE-2007-5593
CWE-94
Medium
Drupal Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2007-5594)
CVE-2007-5594
CWE-352
Medium
Drupal Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') Vulnerability (CVE-2007-5595)
CVE-2007-5595
CWE-113
Medium
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-5596)
CVE-2007-5596
CWE-707
Medium
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2007-5597)
CVE-2007-5597
CWE-264
Medium
Ruby Improper Authentication Vulnerability (CVE-2007-5770)
CVE-2007-5770
CWE-287
Medium