Archive
9 January 2009
Vulnerabilities first published on this day (UTC), newest first.
13 results · Feed
-
Unscored —
SQL injection vulnerability in login.asp in Citrix Application Gateway - Broadcast Server (BCS) before 6.1, as used by …
-
Unscored —CVE-2008-5881 Public exploit
Multiple directory traversal vulnerabilities in playSMS 0.9.3 allow remote attackers to include and execute arbitrary l…
-
Unscored —CVE-2009-0106 Public exploit
SQL injection vulnerability in profile.php in PHPAuctions (aka PHPAuctionSystem) allows remote attackers to execute arb…
-
Unscored —CVE-2009-0105 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in EZpack 4.2b2 allows remote attackers to inject arbitrary web s…
-
Unscored —CVE-2009-0113 Public exploit
Directory traversal vulnerability in attachmentlibrary.php in the XStandard component for Joomla! 1.5.8 and earlier all…
-
Unscored —CVE-2009-0110 Public exploit
SQL injection vulnerability in read.php in RiotPix 0.61 and earlier allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2009-0107 Public exploit
Cross-site scripting (XSS) vulnerability in profile.php in PHPAuctions (aka PHPAuctionSystem) allows remote attackers t…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in admin/agent_edit.asp in PollPro 3.0 allows remote attackers to creat…
-
Unscored —CVE-2009-0108 Public exploit
PHPAuctions (aka PHPAuctionSystem) allows remote attackers to bypass authentication and gain administrative access via …
-
Unscored —CVE-2009-0109 Public exploit
SQL injection vulnerability in index.php in RiotPix 0.61 and earlier allows remote attackers to execute arbitrary SQL c…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in playSMS 0.9.3 allow remote attackers to execute arbitrary PHP cod…
-
Unscored —CVE-2009-0104 Public exploit
SQL injection vulnerability in index.php in EZpack 4.2b2 allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2009-0111 Public exploit
SQL injection vulnerability in frontpage.php in Goople CMS 1.8.2 and earlier allows remote attackers to execute arbitra…