OSVDB: Open Sourced Vulnerability Database

Creditee: Emanuel Bronshtein

Known Contact Information:

None at this time

Known Affiliations:

BugSec (as of 2013-03-12)

Disclosed Vulnerabilities (9):

Disc. Date	OSVDB ID	CVEID	Title
2013-03-12	91149	2013-0080	Microsoft SharePoint Callback Function Unspecified URL Handling Privilege Escalation
2012-08-16	84869	2012-4579	phpMyAdmin Triggers Add Trigger Popup Table Name XSS
2012-08-16	84872	2012-4345	phpMyAdmin Database Structure Table Name Empty / Drop Link XSS
2012-08-16	84868	2012-4579	phpMyAdmin Table Operations TRUNCATE / DROP Link XSS
2012-07-31	84429	2012-2237	Mahara htdocs/auth/lib.php URI XSS
2012-06-12	82964	2012-4342	Gallery Multiple Unspecified XSS
2012-06-12	82965	2012-4343	Gallery Multiple Unspecified PHP Code Execution
2012-06-03	82599		Piwik Multiple Unspecified XSS
2012-04-11	81512	2012-2405	Gallery Unspecified Encryption Weakness

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.