Archive
January 2009
Vulnerabilities first published in this month (UTC), newest first.
234 results · Clear filters · Feed
-
Unscored —
The web interface in git (gitweb) 1.5.x before 1.5.6 allows remote attackers to execute arbitrary commands via shell me…
-
Unscored —CVE-2008-5888 Public exploit
Multiple SQL injection vulnerabilities in Click&Rank allow remote attackers to execute arbitrary SQL commands via the i…
-
Unscored —CVE-2008-5892 Public exploit
Multiple SQL injection vulnerabilities in ClickAndEmail allow remote attackers to execute arbitrary SQL commands via (1…
-
Unscored —CVE-2008-5890 Public exploit
SQL injection vulnerability in feeds.php in Injader before 2.1.2 allows remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2008-5885 Public exploit
The Net Guys ASPired2Quote stores sensitive information under the web root with insufficient access control, which allo…
-
Unscored —CVE-2008-5900 Public exploit
CodeAvalanche Articles stores sensitive information under the web root with insufficient access control, which allows r…
-
Unscored —CVE-2008-5891 Public exploit
Cross-site scripting (XSS) vulnerability in the profile editing functionality in Injader before 2.1.2 allows remote att…
-
Unscored —CVE-2008-5898 Public exploit
CodeAvalanche Directory stores sensitive information under the web root with insufficient access control, which allows …
-
Unscored —CVE-2008-5883 Public exploit
Absolute path traversal vulnerability in front-end/dir.php in mini-pub 0.3 and earlier allows remote attackers to list …
-
Unscored —CVE-2008-5896 Public exploit
CodeAvalanche RateMySite stores sensitive information under the web root with insufficient access control, which allows…
-
Unscored —CVE-2008-5889 Public exploit
Cross-site scripting (XSS) vulnerability in user.asp in Click&Rank allows remote attackers to inject arbitrary web scri…
-
Unscored —CVE-2008-5897 Public exploit
CodeAvalanche FreeWallpaper stores sensitive information under the web root with insufficient access control, which all…
-
Unscored —CVE-2008-5901 Public exploit
iyzi Forum 1.0 beta 3 stores sensitive information under the web root with insufficient access control, which allows re…
-
Unscored —CVE-2008-5894 Public exploit
Directory traversal vulnerability in index.php in Mediatheka 4.2 allows remote attackers to include and execute arbitra…
-
Unscored —CVE-2008-5886 Public exploit
TAKempis Discussion Web 4.0 stores sensitive information under the web root with insufficient access control, which all…
-
Unscored —CVE-2008-5895 Public exploit
SQL injection vulnerability in connection.php in Mediatheka 4.2 and earlier allows remote attackers to execute arbitrar…
-
Unscored —CVE-2008-5884 Public exploit
AyeView 2.20 allows user-assisted attackers to cause a denial of service (application crash) via a GIF file with a malf…
-
Unscored —CVE-2008-5899 Public exploit
CodeAvalanche FreeForAll stores sensitive information under the web root with insufficient access control, which allows…
-
Unscored —CVE-2008-5893 Public exploit
Cross-site scripting (XSS) vulnerability in admin_dblayers.asp in ClickAndEmail allows remote attackers to inject arbit…
-
Unscored —CVE-2008-5881 Public exploit
Multiple directory traversal vulnerabilities in playSMS 0.9.3 allow remote attackers to include and execute arbitrary l…
-
Unscored —CVE-2009-0106 Public exploit
SQL injection vulnerability in profile.php in PHPAuctions (aka PHPAuctionSystem) allows remote attackers to execute arb…
-
Unscored —CVE-2009-0105 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in EZpack 4.2b2 allows remote attackers to inject arbitrary web s…
-
Unscored —CVE-2009-0113 Public exploit
Directory traversal vulnerability in attachmentlibrary.php in the XStandard component for Joomla! 1.5.8 and earlier all…
-
Unscored —CVE-2009-0110 Public exploit
SQL injection vulnerability in read.php in RiotPix 0.61 and earlier allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2009-0107 Public exploit
Cross-site scripting (XSS) vulnerability in profile.php in PHPAuctions (aka PHPAuctionSystem) allows remote attackers t…
-
Unscored —CVE-2009-0108 Public exploit
PHPAuctions (aka PHPAuctionSystem) allows remote attackers to bypass authentication and gain administrative access via …
-
Unscored —CVE-2009-0109 Public exploit
SQL injection vulnerability in index.php in RiotPix 0.61 and earlier allows remote attackers to execute arbitrary SQL c…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in playSMS 0.9.3 allow remote attackers to execute arbitrary PHP cod…
-
Unscored —CVE-2009-0104 Public exploit
SQL injection vulnerability in index.php in EZpack 4.2b2 allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2009-0111 Public exploit
SQL injection vulnerability in frontpage.php in Goople CMS 1.8.2 and earlier allows remote attackers to execute arbitra…
-
Unscored —
Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote at…
-
Unscored —CVE-2008-5880 Public exploit
admin/auth.php in Gobbl CMS 1.0 allows remote attackers to bypass authentication and gain administrative access by sett…
-
Unscored —CVE-2008-5875 Public exploit
SQL injection vulnerability in the com_lowcosthotels component in the Hotel Booking Reservation System (aka HBS) for Jo…
-
Unscored —CVE-2008-5874 Public exploit
Multiple SQL injection vulnerabilities in the Hotel Booking Reservation System (aka HBS) for Joomla! allow remote attac…
-
Unscored —CVE-2008-5877 Public exploit
Multiple SQL injection vulnerabilities in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, when magic_quotes_gpc…
-
Unscored —CVE-2008-5878 Public exploit
Multiple directory traversal vulnerabilities in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, when magic_quot…
-
Unscored —CVE-2008-5879 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, allows…
-
Unscored —CVE-2009-0071 Public exploit
Mozilla Firefox 3.0.5 and earlier 3.0.x versions, when designMode is enabled, allows remote attackers to cause a denial…
-
Unscored —CVE-2009-0070 Public exploit
Integer signedness error in Apple Safari allows remote attackers to read the contents of arbitrary memory locations, ca…
-
Unscored —
The smmsnmpd service in CA Service Metric Analysis r11.0 through r11.1 SP1 and Service Level Management 3.5 does not pr…