Archive
January 2009
Vulnerabilities first published in this month (UTC), newest first.
234 results · Clear filters · Feed
-
Unscored —CVE-2008-6004 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in AJ Auction Pro Platinum 2 allows remote attackers to inject a…
-
Unscored —CVE-2008-6001 Public exploit
index.php in ADN Forum 1.0b and earlier allows remote attackers to bypass authentication and gain sysop access via a fp…
-
Unscored —CVE-2008-5989 Public exploit
Directory traversal vulnerability in defs.php in PHPcounter 1.3.2 and earlier, when magic_quotes_gpc is disabled, allow…
-
Unscored —CVE-2008-5993 Public exploit
Directory traversal vulnerability in image.php in Barcode Generator 1D (barcodegen) 2.0.0 and earlier allows remote att…
-
Unscored —CVE-2008-5988 Public exploit
SQL injection vulnerability in scripts/recruit_details.php in Jadu CMS for Government allows remote attackers to execut…
-
Unscored —CVE-2008-5997 Public exploit
Absolute path traversal vulnerability in admin/fileKontrola/browser.asp in Omnicom Content Platform (OCP) 2.0 allows re…
-
Unscored —CVE-2008-5991 Public exploit
Directory traversal vulnerability in docs.php in MailWatch for MailScanner 1.0.4 and earlier allows remote attackers to…
-
Unscored —CVE-2008-5992 Public exploit
Multiple SQL injection vulnerabilities in Jetik Emlak Sistem A (ESA) 2.0 allow remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2008-5990 Public exploit
Directory traversal vulnerability in connect/init.inc in emergecolab 1.0 allows remote attackers to include and execute…
-
Unscored —CVE-2008-5998 Public exploit
Multiple SQL injection vulnerabilities in the ajax_checklist_save function in the Ajax Checklist module 5.x before 5.x-…
-
Unscored —
Multiple buffer overflows in Ipswitch IMail before 2006.21 allow remote attackers or authenticated users to execute arb…
-
Unscored —CVE-2009-0292 Public exploit
SQL injection vulnerability in show_cat2.php in SHOP-INET 4 allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2009-0299 Public exploit
SQL injection vulnerability in index.php in Groone GLinks 2.1 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2009-0291 Public exploit
Directory traversal vulnerability in fc.php in OpenX 2.6.3 allows remote attackers to include and execute arbitrary fil…
-
Unscored —CVE-2009-0297 Public exploit
SQL injection vulnerability in login_check.asp in ClickAuction allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2009-0295 Public exploit
SQL injection vulnerability in index.php in Information Technology Light Poll Information (ITLPoll) 2.7 Stable 2, when …
-
Unscored —CVE-2009-0298 Public exploit
Heap-based buffer overflow in MW6 Technologies Barcode ActiveX control (Barcode.MW6Barcode.1, Barcode.dll) 3.0.0.1 allo…
-
Unscored —CVE-2009-0301 Public exploit
Multiple insecure method vulnerabilities in the FlexCell.Grid ActiveX control (FlexCell.ocx) in FlexCell Grid Control 5…
-
Unscored —CVE-2009-0296 Public exploit
SQL injection vulnerability in shop_display_products.php in Script Toko Online 5.01 allows remote attackers to execute …
-
Unscored —CVE-2009-0302 Public exploit
SQL injection vulnerability in the Downloads module for PHP-Nuke 8.0 8.1.0.3.5b and earlier allows remote authenticated…
-
Unscored —CVE-2009-0304 Public exploit
The kernel in Sun Solaris 10 and 11 snv_101b, and OpenSolaris before snv_108, allows remote attackers to cause a denial…
-
Unscored —CVE-2009-0294 Public exploit
Multiple PHP remote file inclusion vulnerabilities in WB News 2.0.1, when register_globals is enabled, allow remote att…
-
Unscored —CVE-2009-0293 Public exploit
SQL injection vulnerability in profile_view.php in Wazzum Dating Software, possibly 2.0, allows remote attackers to exe…
-
Unscored —CVE-2009-0290 Public exploit
Directory traversal vulnerability in common.php in SIR GNUBoard 4.31.03 allows remote attackers to include and execute …
-
Unscored —CVE-2009-0279 Public exploit
SQL injection vulnerability in comentar.php in Pardal CMS 0.2.0 and earlier allows remote attackers to execute arbitrar…
-
Unscored —CVE-2009-0285 Public exploit
Cross-site scripting (XSS) vulnerability in error.asp in BBSXP 5.13 and earlier allows remote attackers to inject arbit…
-
Unscored —CVE-2009-0280 Public exploit
Asp Project Management 1.0 allows remote attackers to bypass authentication and gain administrative access by setting t…
-
Unscored —CVE-2009-0284 Public exploit
SQL injection vulnerability in category.php in Flax Article Manager 1.1 allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2009-0283 Public exploit
Cross-site scripting (XSS) vulnerability in err.asp in Oblog allows remote attackers to inject arbitrary web script or …
-
Unscored —CVE-2009-0286 Public exploit
Directory traversal vulnerability in upgrade/index.php in OpenGoo 1.1, when register_globals is enabled and magic_quote…
-
Unscored —CVE-2009-0281 Public exploit
SQL injection vulnerability in login.aspx in WarHound Walking Club allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2008-5969 Public exploit
SQL injection vulnerability in popupproduct.php in Sunbyte e-Flower allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2008-5971 Public exploit
Cross-site scripting (XSS) vulnerability in profile_social.php in i-Net Solution Orkut Clone allows remote authenticate…
-
Unscored —CVE-2008-5976 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in siteadmin/forgot.php in PHP JOBWEBSITE PRO allow remote attacker…
-
Unscored —CVE-2008-5974 Public exploit
Multiple SQL injection vulnerabilities in login.aspx in Active Price Comparison 4.0 allow remote attackers to execute a…
-
Unscored —CVE-2008-5981 Public exploit
PacPoll 4.0 stores sensitive information under the web root with insufficient access control, which allows remote attac…
-
Unscored —CVE-2008-5979 Public exploit
Cross-site scripting (XSS) vulnerability in default.asp in Ocean12 Mailing List Manager Gold allows remote attackers to…
-
Unscored —CVE-2008-5972 Public exploit
SQL injection vulnerability in default.asp in Active Business Directory 2 allows remote attackers to execute arbitrary …
-
Unscored —CVE-2008-5980 Public exploit
Ocean12 Mailing List Manager Gold stores sensitive data under the web root with insufficient access control, which allo…
-
Unscored —CVE-2008-5970 Public exploit
SQL injection vulnerability in profile_social.php in i-Net Solution Orkut Clone allows remote authenticated users to ex…