Skip to content
OpenAdvisories

Archive

6 January 2009

Vulnerabilities first published on this day (UTC), newest first.

← December 2008 2009 / January /6 February 2009 →
  1. 1 
  2. 224
  3. 3 
  4. 4 
  5. 512
  6. 617
  7. 715
  8. 820
  9. 913
  10. 10 
  11. 11 
  12. 1219
  13. 134
  14. 1445
  15. 1524
  16. 1621
  17. 17 
  18. 18 
  19. 19 
  20. 2019
  21. 2138
  22. 2231
  23. 2321
  24. 24 
  25. 25 
  26. 2614
  27. 2744
  28. 2837
  29. 2928
  30. 3020
  31. 31 
All Critical High Medium Low Exploited only Public exploit

17 results · Feed

  • Unscored —
    CVE-2008-5856 Public exploit

    Directory traversal vulnerability in scripts/export.php in ClaSS before 0.8.61 allows remote attackers to read arbitrar…

  • Unscored —
    CVE-2008-5860 Public exploit

    Directory traversal vulnerability in backend/template.php in Constructr CMS 3.02.5 and earlier, when register_globals i…

  • Unscored —
    CVE-2008-5854 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in login.php in myPHPscripts Login Session 2.0 allow remote attacke…

  • Unscored —
    CVE-2008-5855 Public exploit

    myPHPscripts Login Session 2.0 stores sensitive information under the web root with insufficient access control, which …

  • Unscored —
    CVE-2008-5852 Public exploit

    Emefa Guestbook 3.0 stores sensitive information under the web root with insufficient access control, which allows remo…

  • Unscored —
    CVE-2008-5862 Public exploit

    Directory traversal vulnerability in webcamXP 5.3.2.375 and 5.3.2.410 build 2132 allows remote attackers to read arbitr…

  • Unscored —
    CVE-2008-5864 Public exploit

    SQL injection vulnerability in the Top Hotel (com_tophotelmodule) component 1.0 in the Hotel Booking Reservation System…

  • Unscored —
    CVE-2008-5858

    Multiple cross-site scripting (XSS) vulnerabilities in KnowledgeTree before 3.5.4a allow remote attackers to inject arb…

  • Unscored —
    CVE-2008-5851 Public exploit

    SQL injection vulnerability in index.php in My PHP Baseball Stats (MyPBS) allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2008-5853 Public exploit

    Chilek Content Management System (aka ChiCoMaS) 2.0.4 and earlier stores sensitive information under the web root with …

  • Unscored —
    CVE-2008-5859 Public exploit

    SQL injection vulnerability in index.php in Constructr CMS 3.02.5 and earlier, when register_globals is enabled and mag…

  • Unscored —
    CVE-2008-5863 Public exploit

    SQL injection vulnerability in locator.php in the Userlocator module 3.0 for Woltlab Burning Board (wBB) allows remote …

  • Unscored —
    CVE-2008-5857

    The DropDocuments plugin in KnowledgeTree before 3.5.4a allows remote authenticated users to gain administrative privil…

  • Unscored —
    CVE-2008-5848

    The Advantech ADAM-6000 module has 00000000 as its default password, which makes it easier for remote attackers to obta…

  • Unscored —
    CVE-2008-5865 Public exploit

    SQL injection vulnerability in the com_hbssearch component 1.0 in the Hotel Booking Reservation System (aka HBS) 1.0.0 …

  • Unscored —
    CVE-2008-5861 Public exploit

    Directory traversal vulnerability in source.php in FreeLyrics 1.0 allows remote attackers to read arbitrary files via d…

  • Unscored —
    CVE-2008-5849

    Check Point VPN-1 R55, R65, and other versions, when Port Address Translation (PAT) is used, allows remote attackers to…