Archive
January 2009
Vulnerabilities first published in this month (UTC), newest first.
234 results · Clear filters · Feed
-
Unscored —CVE-2008-5975 Public exploit
SQL injection vulnerability in links.asp in Active Price Comparison 4.0 allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2008-5973 Public exploit
SQL injection vulnerability in login.aspx in Active Web Mail 4.0 allows remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2008-5977 Public exploit
SQL injection vulnerability in siteadmin/forgot.php in PHP JOBWEBSITE PRO allows remote attackers to execute arbitrary …
-
Unscored —CVE-2008-5978 Public exploit
Multiple SQL injection vulnerabilities in Ocean12 Mailing List Manager Gold allow remote attackers to execute arbitrary…
-
Unscored —CVE-2008-5966 Public exploit
globsy_edit.php in Globsy 1.0 and earlier allows remote attackers to create or overwrite arbitrary files via a filename…
-
Unscored —CVE-2008-5968 Public exploit
Directory traversal vulnerability in print.php in PHP iCalendar 2.24 and earlier allows remote attackers to include and…
-
Unscored —CVE-2008-5967 Public exploit
admin/index.php in PHP iCalendar 2.3.4, 2.24, and earlier does not require administrative authentication for an addupda…
-
Unscored —CVE-2008-5965 Public exploit
Directory traversal vulnerability in index.php in LokiCMS 0.3.4 and earlier, when magic_quotes_gpc is disabled, allows …
-
Unscored —CVE-2009-0275 Public exploit
Static code injection vulnerability in admin.php in Ryneezy phoSheezy 0.2 allows remote authenticated administrators to…
-
Unscored —CVE-2009-0266 Public exploit
Stack-based buffer overflow in Triologic Media Player 8.0.0.0 allows user-assisted remote attackers to execute arbitrar…
-
Unscored —CVE-2008-5959 Public exploit
Multiple SQL injection vulnerabilities in start.asp in Active Test 2.1 allow remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2008-5949 Public exploit
Multiple PHP remote file inclusion vulnerabilities in ccTiddly 1.7.4 and 1.7.6 allow remote attackers to execute arbitr…
-
Unscored —CVE-2008-5962 Public exploit
Directory traversal vulnerability in library/setup/rpc.php in Gravity Getting Things Done (GTD) 0.4.5 and earlier allow…
-
Unscored —CVE-2008-5948 Public exploit
Directory traversal vulnerability in index.php in BNCwi 1.04 and earlier allows remote attackers to include and execute…
-
Unscored —CVE-2008-5958 Public exploit
Multiple SQL injection vulnerabilities in Active Test 2.1 allow remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2008-5957 Public exploit
SQL injection vulnerability in the Mydyngallery (com_mydyngallery) component 1.4.2 for Joomla! allows remote attackers …
-
Unscored —CVE-2008-5950 Public exploit
SQL injection vulnerability in media/media_level.asp in ASP Template Creature allows remote attackers to execute arbitr…
-
Unscored —CVE-2008-5956 Public exploit
Wbstreet (aka PHPSTREET Webboard) 1.0 stores sensitive information under the web root with insufficient access control,…
-
Unscored —CVE-2008-5955 Public exploit
SQL injection vulnerability in show.php in Wbstreet (aka PHPSTREET Webboard) 1.0 allows remote attackers to execute arb…
-
Unscored —CVE-2008-5951 Public exploit
ASP Template Creature stores sensitive information under the web root with insufficient access control, which allows re…
-
Unscored —CVE-2008-5953 Public exploit
Directory traversal vulnerability in KTP Computer Customer Database (KTPCCD) CMS, when magic_quotes_gpc is disabled, al…
-
Unscored —CVE-2008-5963 Public exploit
Eval injection vulnerability in library/setup/rpc.php in Gravity Getting Things Done (GTD) 0.4.5 and earlier allows rem…
-
Unscored —CVE-2008-5954 Public exploit
SQL injection vulnerability in KTP Computer Customer Database (KTPCCD) CMS, when magic_quotes_gpc is disabled, allows r…
-
Unscored —CVE-2008-5952 Public exploit
SQL injection vulnerability in KTP Computer Customer Database (KTPCCD) CMS, when magic_quotes_gpc is disabled, allows r…
-
Unscored —
Multiple buffer overflows in Winamp 5.541 and earlier allow remote attackers to cause a denial of service and possibly …
-
Medium —CVE-2009-0260 Public exploit
MoinMoin Multiple cross-site scripting (XSS) vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin before 1.8.1 allow remote attackers to inject arbitrary web script or HTML via an AttachFile action to the WikiSandBox component with (1) the rename parameter or (2) the d…
-
Unscored —
Stack-based buffer overflow in EffectMatrix Total Video Player 1.31 allows user-assisted attackers to execute arbitrary…
-
Unscored —CVE-2009-0262 Public exploit
Stack-based buffer overflow in Triologic Media Player 7 and 8.0.0.0 allows user-assisted remote attackers to execute ar…
-
Unscored —CVE-2009-0259 Public exploit
The Word processor in OpenOffice.org 1.1.2 through 1.1.5 allows remote attackers to cause a denial of service (crash) a…
-
Unscored —CVE-2009-0255 Public exploit
The System extension Install tool in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 creates th…
-
Unscored —CVE-2009-0253 Public exploit
Mozilla Firefox 3.0.5 allows remote attackers to trick a user into visiting an arbitrary URL via an onclick action that…
-
Unscored —CVE-2009-0248 Public exploit
Cross-site scripting (XSS) vulnerability in rankup.asp in Katy Whitton RankEm allows remote attackers to inject arbitra…
-
Unscored —CVE-2009-0252 Public exploit
Multiple SQL injection vulnerabilities in default.asp in Enthrallweb eReservations allow remote attackers to execute ar…
-
Unscored —CVE-2009-0250 Public exploit
Ryneezy phoSheezy 0.2 stores sensitive information under the web root with insufficient access control, which allows re…
-
Unscored —CVE-2009-0249 Public exploit
Katy Whitton RankEm stores sensitive information under the web root with insufficient access control, which allows remo…
-
Unscored —CVE-2009-0251 Public exploit
Static code injection vulnerability in admin.php in Ryneezy phoSheezy 0.2 allows remote authenticated administrators to…
-
Unscored —CVE-2008-5944 Public exploit
Cross-site scripting (XSS) vulnerability in modules.php in NavBoard 16 (2.6.0) allows remote attackers to inject arbitr…
-
Unscored —CVE-2008-5939 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in MODx CMS 0.9.6.2 and earlier allows remote attackers to inject…
-
Unscored —CVE-2008-5938 Public exploit
PHP remote file inclusion vulnerability in assets/snippets/reflect/snippet.reflect.php in MODx CMS 0.9.6.2 and earlier,…
-
Unscored —CVE-2008-5943 Public exploit
Multiple directory traversal vulnerabilities in NavBoard 16 (2.6.0) allow remote attackers to include and execute arbit…