Skip to content

CVE-2013-5xxx records

Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.

889 records · Page 7 of 9

CVE-2013-5311: Multiple SQL injection vulnerabilities in Vastal I-Tech phpVID 1.2.3 allow remote attackers to execute arbitrary SQL commands via the "n" parameter to (1) browse_videos.php or (2) Unscored
Multiple SQL injection vulnerabilities in Vastal I-Tech phpVID 1.2.3 allow remote attackers to execute arbitrary SQL commands via the "n" parameter to (1) browse_videos.php or (2) members.php. NOTE: the cat parameter is already covered by CVE-2008-4157.
Updated 2024-09-16
CVE-2013-5310: SQL injection vulnerability in the DB Integration (wfqbe) extension before 2.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Unscored
SQL injection vulnerability in the DB Integration (wfqbe) extension before 2.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Updated 2024-08-06
CVE-2013-5309: Cross-site scripting (XSS) vulnerability in install/forum_data/src/custom_fields.inc.t in FUDforum 3.0.4.1 and earlier, when registering a new user, allows remote attackers to inje Unscored
Cross-site scripting (XSS) vulnerability in install/forum_data/src/custom_fields.inc.t in FUDforum 3.0.4.1 and earlier, when registering a new user, allows remote attackers to inject arbitrary web script or HTML via a custom profile field to index.php. NOTE: some of these details are obtained from third party information.
Updated 2024-08-06
CVE-2013-5308: Cross-site scripting (XSS) vulnerability in the RealURL Management (realurlmanagement) extension 0.3.4 and earlier for TYPO3 allows remote attackers to inject arbitrary web script Unscored
Cross-site scripting (XSS) vulnerability in the RealURL Management (realurlmanagement) extension 0.3.4 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Updated 2024-08-06
CVE-2013-5307: Cross-site scripting (XSS) vulnerability in the Faceted Search (ke_search) extension before 1.4.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspe Unscored
Cross-site scripting (XSS) vulnerability in the Faceted Search (ke_search) extension before 1.4.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Updated 2024-08-06
CVE-2013-5306: SQL injection vulnerability in the Browser - TYPO3 without PHP (browser) extension before 4.5.5 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified Unscored
SQL injection vulnerability in the Browser - TYPO3 without PHP (browser) extension before 4.5.5 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Updated 2024-08-06
CVE-2013-5305: Cross-site scripting (XSS) vulnerability in the Store Locator (locator) extension before 3.1.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecif Unscored
Cross-site scripting (XSS) vulnerability in the Store Locator (locator) extension before 3.1.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Updated 2024-08-06
CVE-2013-5304: SQL injection vulnerability in the Store Locator (locator) extension before 3.1.5 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Unscored
SQL injection vulnerability in the Store Locator (locator) extension before 3.1.5 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Updated 2024-08-06
CVE-2013-5303: Unspecified vulnerability in the Store Locator (locator) extension before 3.1.5 for TYPO3 has unknown impact and remote attack vectors, related to "Insecure Unserialize." Unscored
Unspecified vulnerability in the Store Locator (locator) extension before 3.1.5 for TYPO3 has unknown impact and remote attack vectors, related to "Insecure Unserialize."
Updated 2024-08-06
CVE-2013-5302: SQL injection vulnerability in the Faceted Search (ke_search) extension before 1.4.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Unscored
SQL injection vulnerability in the Faceted Search (ke_search) extension before 1.4.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Updated 2024-08-06
CVE-2013-5301: Directory traversal vulnerability in help.php in Trustport Webfilter 5.5.0.2232 allows remote attackers to read arbitrary files via a .. (dot dot) in the hf parameter. Unscored
Directory traversal vulnerability in help.php in Trustport Webfilter 5.5.0.2232 allows remote attackers to read arbitrary files via a .. (dot dot) in the hf parameter.
Updated 2024-08-06
CVE-2013-5300: Multiple cross-site scripting (XSS) vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) before 4.3.0 allow remote attackers to inject arbitrary web sc Unscored
Multiple cross-site scripting (XSS) vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) before 4.3.0 allow remote attackers to inject arbitrary web script or HTML via the withoutmenu parameter to (1) vulnmeter/index.php or (2) vulnmeter/sched.php; the (3) section parameter to av_inventory/task_edit.php; the (4) profile parameter to nfsen/rrdgraph.php; or the (5) scan_
Updated 2024-08-06
CVE-2013-5299: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5298: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5297: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5296: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5295: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5294: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5293: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5292: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5291: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5290: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5289: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5288: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5287: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5286: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5285: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5284: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5283: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5282: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5281: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5280: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5279: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5278: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5277: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5276: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5275: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5274: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5273: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5272: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5271: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5270: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5269: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5268: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5267: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5266: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5265: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5264: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5263: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5262: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5261: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5260: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5259: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5258: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5257: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5256: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5255: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5254: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5253: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5252: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5251: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5250: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5249: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5248: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5247: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5246: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5245: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5244: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5243: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5242: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5241: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5240: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5239: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5238: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5237: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5236: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5235: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5234: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5233: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5232: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5231: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5230: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5229: The Remote Desktop full-screen feature in Apple OS X before 10.9 and Apple Remote Desktop before 3.7 sends dialog-box text to a connected remote host upon being woken from sleep, w Unscored
The Remote Desktop full-screen feature in Apple OS X before 10.9 and Apple Remote Desktop before 3.7 sends dialog-box text to a connected remote host upon being woken from sleep, which allows physically proximate attackers to bypass intended access restrictions by entering a command in this box.
Updated 2024-08-06
CVE-2013-5228: WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application Unscored
WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-12-16-1.
Updated 2024-08-06
CVE-2013-5227: Apple Safari before 6.1.1 and 7.x before 7.0.1 allows remote attackers to bypass the Same Origin Policy and discover credentials by triggering autofill of subframe form fields. Unscored
Apple Safari before 6.1.1 and 7.x before 7.0.1 allows remote attackers to bypass the Same Origin Policy and discover credentials by triggering autofill of subframe form fields.
Updated 2024-08-06
CVE-2013-5226: This candidate is unused by its CNA. Rejected
This candidate is unused by its CNA.
Updated 2023-09-14 · Rejected record
CVE-2013-5225: WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application Unscored
WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-12-16-1.
Updated 2024-08-06
CVE-2013-5223: Multiple cross-site scripting (XSS) vulnerabilities in D-Link DSL-2760U Gateway (Rev. E1) allow remote authenticated users to inject arbitrary web script or HTML via the (1) ntpSer 5.4 Medium
Multiple cross-site scripting (XSS) vulnerabilities in D-Link DSL-2760U Gateway (Rev. E1) allow remote authenticated users to inject arbitrary web script or HTML via the (1) ntpServer1 parameter to sntpcfg.cgi, username parameter to (2) ddnsmngr.cmd or (3) todmngr.tod, (4) TodUrlAdd parameter to urlfilter.cmd, (5) appName parameter to scprttrg.cmd, (6) fltName in an add action or (7) rmLst paramet
Updated 2025-10-22
CVE-2013-5222: Multiple cross-site scripting (XSS) vulnerabilities in ESRI ArcGIS for Server 10.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Unscored
Multiple cross-site scripting (XSS) vulnerabilities in ESRI ArcGIS for Server 10.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Updated 2024-08-06
CVE-2013-5221: The mobile-upload feature in Esri ArcGIS for Server 10.1 through 10.2 allows remote authenticated users to upload .exe files by leveraging (1) publisher or (2) administrator privil Unscored
The mobile-upload feature in Esri ArcGIS for Server 10.1 through 10.2 allows remote authenticated users to upload .exe files by leveraging (1) publisher or (2) administrator privileges.
Updated 2024-08-06
CVE-2013-5220: goform/login on the HOT HOTBOX router with software 2.1.11 allows remote attackers to cause a denial of service (device crash) via crafted HTTP POST data. Unscored
goform/login on the HOT HOTBOX router with software 2.1.11 allows remote attackers to cause a denial of service (device crash) via crafted HTTP POST data.
Updated 2024-08-06
CVE-2013-5219: Directory traversal vulnerability on the HOT HOTBOX router with software 2.1.11 allows remote attackers to read arbitrary files via a .. (dot dot) in a URI, as demonstrated by a re Unscored
Directory traversal vulnerability on the HOT HOTBOX router with software 2.1.11 allows remote attackers to read arbitrary files via a .. (dot dot) in a URI, as demonstrated by a request for /etc/passwd.
Updated 2024-08-06
CVE-2013-5218: Cross-site scripting (XSS) vulnerability on the HOT HOTBOX router with software 2.1.11 allows remote attackers to inject arbitrary web script or HTML via a crafted DHCP Host Name o Unscored
Cross-site scripting (XSS) vulnerability on the HOT HOTBOX router with software 2.1.11 allows remote attackers to inject arbitrary web script or HTML via a crafted DHCP Host Name option, which is not properly handled during rendering of the DHCP table in wlanAccess.asp.
Updated 2024-08-06
CVE-2013-5217: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-5217. Reason: This candidate is a duplicate of CVE-2012-5217. A typo caused the wrong ID to be used. Notes: All CVE users Rejected
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-5217. Reason: This candidate is a duplicate of CVE-2012-5217. A typo caused the wrong ID to be used. Notes: All CVE users should reference CVE-2012-5217 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
Updated 2024-09-16 · Rejected record
CVE-2013-5216: Directory traversal vulnerability in logreader/uploadreader.jsp in CapaSystems Performance Guard before 6.2.102 allows remote attackers to read arbitrary files via unspecified vect Unscored
Directory traversal vulnerability in logreader/uploadreader.jsp in CapaSystems Performance Guard before 6.2.102 allows remote attackers to read arbitrary files via unspecified vectors.
Updated 2024-09-16
CVE-2013-5215: Cross-site scripting (XSS) vulnerability in the web interface "WiFi scan" option in FOSCAM Wireless IP Cameras allows remote attackers to inject arbitrary web script or HTML via th Unscored
Cross-site scripting (XSS) vulnerability in the web interface "WiFi scan" option in FOSCAM Wireless IP Cameras allows remote attackers to inject arbitrary web script or HTML via the SSID.
Updated 2024-08-06
CVE-2013-5212: Cross-site Scripting (XSS) in EasyXDM before 2.4.18 allows remote attackers to inject arbitrary web script or html via the easyxdm.swf file. Unscored
Cross-site Scripting (XSS) in EasyXDM before 2.4.18 allows remote attackers to inject arbitrary web script or html via the easyxdm.swf file.
Updated 2024-08-06
CVE-2013-5211: The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service (traffic amplification) via forged (1) REQ_MON_GETLIST or ( Unscored
The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service (traffic amplification) via forged (1) REQ_MON_GETLIST or (2) REQ_MON_GETLIST_1 requests, as exploited in the wild in December 2013.
Updated 2024-08-06
CVE-2013-5210: Cross-site scripting (XSS) vulnerability in the GUI login page in ADTRAN AOS before R10.8.1 on the NetVanta 7100 allows remote attackers to inject arbitrary web script or HTML via Unscored
Cross-site scripting (XSS) vulnerability in the GUI login page in ADTRAN AOS before R10.8.1 on the NetVanta 7100 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Updated 2024-08-06
CVE-2013-5209: The sctp_send_initiate_ack function in sys/netinet/sctp_output.c in the SCTP implementation in the kernel in FreeBSD 8.3 through 9.2-PRERELEASE does not properly initialize the sta Unscored
The sctp_send_initiate_ack function in sys/netinet/sctp_output.c in the SCTP implementation in the kernel in FreeBSD 8.3 through 9.2-PRERELEASE does not properly initialize the state-cookie data structure, which allows remote attackers to obtain sensitive information from kernel stack memory by reading packet data in INIT-ACK chunks.
Updated 2024-08-06

Search a CVE ID or check dependency files →