Skip to content
OpenAdvisories

Archive

12 January 2009

Vulnerabilities first published on this day (UTC), newest first.

← December 2008 2009 / January /12 February 2009 →
  1. 1 
  2. 224
  3. 3 
  4. 4 
  5. 512
  6. 617
  7. 715
  8. 820
  9. 913
  10. 10 
  11. 11 
  12. 1219
  13. 134
  14. 1445
  15. 1524
  16. 1621
  17. 17 
  18. 18 
  19. 19 
  20. 2019
  21. 2138
  22. 2231
  23. 2321
  24. 24 
  25. 25 
  26. 2614
  27. 2744
  28. 2837
  29. 2928
  30. 3020
  31. 31 
All Critical High Medium Low Exploited only Public exploit

19 results · Feed

  • Unscored —
    CVE-2008-5888 Public exploit

    Multiple SQL injection vulnerabilities in Click&Rank allow remote attackers to execute arbitrary SQL commands via the i…

  • Unscored —
    CVE-2008-5892 Public exploit

    Multiple SQL injection vulnerabilities in ClickAndEmail allow remote attackers to execute arbitrary SQL commands via (1…

  • Unscored —
    CVE-2008-5890 Public exploit

    SQL injection vulnerability in feeds.php in Injader before 2.1.2 allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2008-5885 Public exploit

    The Net Guys ASPired2Quote stores sensitive information under the web root with insufficient access control, which allo…

  • Unscored —
    CVE-2008-5900 Public exploit

    CodeAvalanche Articles stores sensitive information under the web root with insufficient access control, which allows r…

  • Unscored —
    CVE-2008-5891 Public exploit

    Cross-site scripting (XSS) vulnerability in the profile editing functionality in Injader before 2.1.2 allows remote att…

  • Unscored —
    CVE-2008-5898 Public exploit

    CodeAvalanche Directory stores sensitive information under the web root with insufficient access control, which allows …

  • Unscored —
    CVE-2008-5883 Public exploit

    Absolute path traversal vulnerability in front-end/dir.php in mini-pub 0.3 and earlier allows remote attackers to list …

  • Unscored —
    CVE-2008-5896 Public exploit

    CodeAvalanche RateMySite stores sensitive information under the web root with insufficient access control, which allows…

  • Unscored —
    CVE-2008-5889 Public exploit

    Cross-site scripting (XSS) vulnerability in user.asp in Click&Rank allows remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2008-5897 Public exploit

    CodeAvalanche FreeWallpaper stores sensitive information under the web root with insufficient access control, which all…

  • Unscored —
    CVE-2008-5901 Public exploit

    iyzi Forum 1.0 beta 3 stores sensitive information under the web root with insufficient access control, which allows re…

  • Unscored —
    CVE-2008-5894 Public exploit

    Directory traversal vulnerability in index.php in Mediatheka 4.2 allows remote attackers to include and execute arbitra…

  • Unscored —
    CVE-2008-5886 Public exploit

    TAKempis Discussion Web 4.0 stores sensitive information under the web root with insufficient access control, which all…

  • Unscored —
    CVE-2008-5895 Public exploit

    SQL injection vulnerability in connection.php in Mediatheka 4.2 and earlier allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2008-5884 Public exploit

    AyeView 2.20 allows user-assisted attackers to cause a denial of service (application crash) via a GIF file with a malf…

  • Unscored —
    CVE-2008-5899 Public exploit

    CodeAvalanche FreeForAll stores sensitive information under the web root with insufficient access control, which allows…

  • Unscored —
    CVE-2008-5893 Public exploit

    Cross-site scripting (XSS) vulnerability in admin_dblayers.asp in ClickAndEmail allows remote attackers to inject arbit…

  • Unscored —
    CVE-2008-5887 EPSS 11%

    phplist before 2.10.8 allows remote attackers to include files via unknown vectors, related to a "local file include vu…