Archive
January 2009
Vulnerabilities first published in this month (UTC), newest first.
234 results · Clear filters · Feed
-
Unscored —CVE-2009-0374 Public exploit
Google Chrome 1.0.154.43 allows remote attackers to trick a user into visiting an arbitrary URL via an onclick action t…
-
Unscored —CVE-2009-0372 Public exploit
Unrestricted file upload vulnerability in index.php in Miltenovik Manojlo MemHT Portal 4.0.1 and earlier allows remote …
-
Unscored —
Microsoft Internet Explorer 7 allows remote attackers to trick a user into visiting an arbitrary URL via an onclick act…
-
Unscored —CVE-2009-0371 Public exploit
Directory traversal vulnerability in post.php in SiteXS CMS 0.1.1 and earlier allows remote attackers to include and ex…
-
Unscored —CVE-2009-0373 Public exploit
SQL injection vulnerability in the ElearningForce Flash Magazine Deluxe (com_flashmagazinedeluxe) component for Joomla!…
-
Unscored —CVE-2008-6012 Public exploit
Directory traversal vulnerability in index.php in Pritlog 0.4 and earlier, when magic_quotes_gpc is disabled, allows re…
-
Unscored —CVE-2008-6011 Public exploit
SQL injection vulnerability in index.php in SG Real Estate Portal 2.0 allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2008-6016 Public exploit
SQL injection vulnerability in questions.php in EsFaq 2.0 allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2008-6010 Public exploit
Multiple directory traversal vulnerabilities in SG Real Estate Portal 2.0 allow remote attackers to read arbitrary file…
-
Unscored —CVE-2008-6007 Public exploit
SQL injection vulnerability in view_group.php in QuidaScript BookMarks Favourites Script (APB) allows remote attackers …
-
Unscored —CVE-2008-6009 Public exploit
SG Real Estate Portal 2.0 allows remote attackers to bypass authentication and gain administrative access by setting th…
-
Unscored —CVE-2008-6006 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Micronation Banking System (minba) 1.5.0 allow remote attackers t…
-
Unscored —CVE-2008-6014 Public exploit
SQL injection vulnerability in scripts/links.php in Rianxosencabos CMS 0.9 allows remote attackers to execute arbitrary…
-
Unscored —CVE-2009-0343 Public exploit
Niels Provos Systrace 1.6f and earlier on the x86_64 Linux platform allows local users to bypass intended access restri…
-
Unscored —
Stack-based buffer overflow in Merak Media Player 3.2 allows remote attackers to execute arbitrary code via a long stri…
-
Unscored —
The shell32 module in Microsoft Internet Explorer 7.0 on Windows XP SP3 might allow remote attackers to execute arbitra…
-
Unscored —
Open redirect vulnerability in cs.html in the Autonomy (formerly Verity) Ultraseek search engine allows remote attacker…
-
Unscored —CVE-2009-0351 Public exploit
Stack-based buffer overflow in WFTPSRV.exe in WinFTP 2.3.0 allows remote authenticated users to execute arbitrary code …
-
Unscored —CVE-2009-0349 Public exploit
Stack-based buffer overflow in FTPShell Server 4.3 allows user-assisted remote attackers to cause a denial of service (…
-
Unscored —CVE-2009-0348 Public exploit
The login module in Sun Java System Access Manager 6 2005Q1 (aka 6.3), 7 2005Q4 (aka 7.0), and 7.1 responds differently…
-
Unscored —CVE-2009-0333 Public exploit
SQL injection vulnerability in the WebAmoeba (WA) Ticket System (com_waticketsystem) component for Joomla! allows remot…
-
Unscored —CVE-2009-0328 Public exploit
ROBS-PROJECTS Digital Sales IPN (aka DS-IPN.NET or DS-IPN Paypal Shop) stores sensitive information under the web root …
-
Unscored —CVE-2009-0340 Public exploit
Multiple directory traversal vulnerabilities in Simple PHP Newsletter 1.5 allow remote attackers to read arbitrary file…
-
Unscored —CVE-2009-0329 Public exploit
SQL injection vulnerability in the PcCookBook (com_pccookbook) component for Joomla! allows remote attackers to execute…
-
Unscored —CVE-2009-0334 Public exploit
SQL injection vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2009-0335 Public exploit
Cross-site scripting (XSS) vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to inject arbitra…
-
Unscored —CVE-2009-0336 Public exploit
Katy Whitton BlogIt! stores sensitive information under the web root with insufficient access control, which allows rem…
-
Unscored —CVE-2009-0330 Public exploit
Directory traversal vulnerability in index.php in Simple Content Management System (SCMS) 1 allows remote attackers to …
-
Unscored —CVE-2009-0337 Public exploit
SQL injection vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2009-0327 Public exploit
SQL injection vulnerability in readbible.php in Free Bible Search PHP Script 1.0 allows remote attackers to execute arb…
-
Unscored —CVE-2009-0331 Public exploit
Directory traversal vulnerability in gallery/comment.php in Enhanced Simple PHP Gallery (ESPG) 1.72 allows remote attac…
-
Unscored —CVE-2009-0325 Public exploit
Directory traversal vulnerability in entries/index.php in Ninja Blog 4.8, when magic_quotes_gpc is disabled, allows rem…
-
Unscored —CVE-2009-0338 Public exploit
Cross-site scripting (XSS) vulnerability in inc_webblogmanager.asp in DMXReady Blog Manager allows remote attackers to …
-
Unscored —CVE-2009-0326 Public exploit
SQL injection vulnerability in login.php in Dark Age CMS 0.2c beta allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2009-0324 Public exploit
Multiple SQL injection vulnerabilities in BibCiter 1.4 allow remote attackers to execute arbitrary SQL commands via the…
-
Unscored —CVE-2009-0339 Public exploit
SQL injection vulnerability in inc_webblogmanager.asp in DMXReady Blog Manager allows remote attackers to execute arbit…
-
Unscored —
Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0 and 11.0 allow remote attackers to execute arbitrar…
-
Unscored —CVE-2009-0321 Public exploit
Apple Safari 3.2.1 (aka AppVer 3.525.27.1) on Windows allows remote attackers to cause a denial of service (infinite lo…
-
Unscored —CVE-2008-6002 Public exploit
Absolute path traversal vulnerability in sendfile.php in web-cp 0.5.7, when register_globals is enabled, allows remote …
-
Unscored —CVE-2008-6003 Public exploit
SQL injection vulnerability in sellers_othersitem.php in AJ Auction Pro Platinum 2 allows remote attackers to execute a…