Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Missing Update

This page lists 22224 vulnerabilities in this category.

Critical: 1394 High: 12186 Medium: 7891 Low: 749 Information: 4
Vulnerability Name
CVE
CWE
Severity
TYPO3 URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2010-3669)
CVE-2010-3669
CWE-601
Medium
TYPO3 Inadequate Encryption Strength Vulnerability (CVE-2010-3670)
CVE-2010-3670
CWE-326
Medium
TYPO3 Session Fixation Vulnerability (CVE-2010-3671)
CVE-2010-3671
CWE-384
Medium
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-3672)
CVE-2010-3672
CWE-707
Medium
TYPO3 Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-3673)
CVE-2010-3673
CWE-200
Medium
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-3674)
CVE-2010-3674
CWE-707
Medium
MySQL Other Vulnerability (CVE-2010-3676)
CVE-2010-3676
-
Medium
MySQL Resource Management Errors Vulnerability (CVE-2010-3677)
CVE-2010-3677
-
Medium
MySQL Resource Management Errors Vulnerability (CVE-2010-3679)
CVE-2010-3679
-
Medium
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-3715)
CVE-2010-3715
CWE-707
Medium
MySQL Other Vulnerability (CVE-2010-3680)
CVE-2010-3680
-
Medium
MySQL Other Vulnerability (CVE-2010-3681)
CVE-2010-3681
-
Medium
CakePHP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2006-4067)
CVE-2006-4067
CWE-707
Medium
PHP Other Vulnerability (CVE-2006-4023)
CVE-2006-4023
-
Medium
MySQL Other Vulnerability (CVE-2010-3682)
CVE-2010-3682
-
Medium
PHP Other Vulnerability (CVE-2006-4020)
CVE-2006-4020
-
Medium
MySQL Other Vulnerability (CVE-2010-3683)
CVE-2010-3683
-
Medium
Drupal Improper Authentication Vulnerability (CVE-2010-3685)
CVE-2010-3685
CWE-287
Medium
Drupal Improper Authentication Vulnerability (CVE-2010-3686)
CVE-2010-3686
CWE-287
Medium
Drupal Other Vulnerability (CVE-2006-4002)
CVE-2006-4002
-
Medium
PHP Improper Input Validation Vulnerability (CVE-2010-3709)
CVE-2010-3709
CWE-20
Medium
PHP Resource Management Errors Vulnerability (CVE-2010-3710)
CVE-2010-3710
-
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-3712)
CVE-2010-3712
CWE-707
Medium
Dotclear Other Vulnerability (CVE-2006-3938)
CVE-2006-3938
-
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-1939)
CVE-2009-1939
CWE-707
Medium
Claroline Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-1907)
CVE-2009-1907
CWE-707
Medium
Oracle Database Server CVE-2011-0832 Vulnerability (CVE-2011-0832)
CVE-2011-0832
-
Medium
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-0462)
CVE-2008-0462
CWE-707
Medium
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2008-0191)
CVE-2008-0191
CWE-200
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-0192)
CVE-2008-0192
CWE-707
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-0193)
CVE-2008-0193
CWE-707
Medium
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2008-0195)
CVE-2008-0195
CWE-200
Medium
WordPress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2008-0196)
CVE-2008-0196
CWE-22
Medium
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2008-0198)
CVE-2008-0198
CWE-352
Medium
Lighttpd Other Vulnerability (CVE-2007-1869)
CVE-2007-1869
-
Medium
Drupal Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2008-0272)
CVE-2008-0272
CWE-352
Medium
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-0273)
CVE-2008-0273
CWE-707
Medium
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-0276)
CVE-2008-0276
CWE-707
Medium
Jboss EAP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-0455)
CVE-2008-0455
CWE-707
Medium
Apache HTTP Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-0455)
CVE-2008-0455
CWE-707
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-0460)
CVE-2008-0460
CWE-707
Medium
phpBB Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2008-0471)
CVE-2008-0471
CWE-352
Medium
Serendipity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-0124)
CVE-2008-0124
CWE-707
Medium
Apache HTTP Server Other Vulnerability (CVE-2007-1863)
CVE-2007-1863
-
Medium
Coppermine Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-0504)
CVE-2008-0504
CWE-138
Medium
Apache HTTP Server Other Vulnerability (CVE-2007-1862)
CVE-2007-1862
-
Medium
PHP Other Vulnerability (CVE-2007-1835)
CVE-2007-1835
-
Medium
XOOPS Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2008-0613)
CVE-2008-0613
CWE-59
Medium
WordPress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2008-0615)
CVE-2008-0615
CWE-22
Medium
WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-0616)
CVE-2008-0616
CWE-138
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-0617)
CVE-2008-0617
CWE-707
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-0618)
CVE-2008-0618
CWE-707
Medium
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-0664)
CVE-2008-0664
CWE-264
Medium
PHP Other Vulnerability (CVE-2007-1824)
CVE-2007-1824
-
Medium
MyBB Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2008-0788)
CVE-2008-0788
CWE-352
Medium
Apache HTTP Server Other Vulnerability (CVE-2007-1743)
CVE-2007-1743
-
Medium
Apache Tomcat Configuration Vulnerability (CVE-2008-0128)
CVE-2008-0128
-
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-0123)
CVE-2008-0123
CWE-707
Medium
OpenSSL Numeric Errors Vulnerability (CVE-2008-0891)
CVE-2008-0891
-
Medium
WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2007-6318)
CVE-2007-6318
CWE-138
Medium
PHP CVE-2007-5898 Vulnerability (CVE-2007-5898)
CVE-2007-5898
-
Medium
PHP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2007-5899)
CVE-2007-5899
CWE-200
Medium
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2007-1893)
CVE-2007-1893
CWE-264
Medium
PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2007-5900)
CVE-2007-5900
CWE-264
Medium
MySQL Other Vulnerability (CVE-2007-5970)
CVE-2007-5970
-
Medium
phpMyAdmin Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2007-5976)
CVE-2007-5976
CWE-138
Medium
PostgreSQL Numeric Errors Vulnerability (CVE-2007-6067)
CVE-2007-6067
-
Medium
Ruby on Rails Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2007-6077)
CVE-2007-6077
CWE-362
Medium
Apache HTTP Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-6203)
CVE-2007-6203
CWE-707
Medium
Serendipity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-6205)
CVE-2007-6205
CWE-707
Medium
Oracle Database Server Credentials Management Errors Vulnerability (CVE-2007-6260)
CVE-2007-6260
-
Medium
Apache Tomcat Other Vulnerability (CVE-2007-6286)
CVE-2007-6286
-
Medium
MySQL Other Vulnerability (CVE-2007-6304)
CVE-2007-6304
-
Medium
TYPO3 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2007-6381)
CVE-2007-6381
CWE-138
Medium
PHP Other Vulnerability (CVE-2007-1884)
CVE-2007-1884
-
Medium