Archive
January 2009
Vulnerabilities first published in this month (UTC), newest first.
466 results · Feed
-
Unscored —CVE-2008-5981 Public exploit
PacPoll 4.0 stores sensitive information under the web root with insufficient access control, which allows remote attac…
-
Unscored —CVE-2008-5979 Public exploit
Cross-site scripting (XSS) vulnerability in default.asp in Ocean12 Mailing List Manager Gold allows remote attackers to…
-
Unscored —CVE-2008-5972 Public exploit
SQL injection vulnerability in default.asp in Active Business Directory 2 allows remote attackers to execute arbitrary …
-
Unscored —CVE-2008-5980 Public exploit
Ocean12 Mailing List Manager Gold stores sensitive data under the web root with insufficient access control, which allo…
-
Unscored —CVE-2008-5970 Public exploit
SQL injection vulnerability in profile_social.php in i-Net Solution Orkut Clone allows remote authenticated users to ex…
-
Unscored —CVE-2008-5975 Public exploit
SQL injection vulnerability in links.asp in Active Price Comparison 4.0 allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2008-5973 Public exploit
SQL injection vulnerability in login.aspx in Active Web Mail 4.0 allows remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2008-5977 Public exploit
SQL injection vulnerability in siteadmin/forgot.php in PHP JOBWEBSITE PRO allows remote attackers to execute arbitrary …
-
Unscored —CVE-2008-5978 Public exploit
Multiple SQL injection vulnerabilities in Ocean12 Mailing List Manager Gold allow remote attackers to execute arbitrary…
-
Unscored —CVE-2008-5966 Public exploit
globsy_edit.php in Globsy 1.0 and earlier allows remote attackers to create or overwrite arbitrary files via a filename…
-
Unscored —CVE-2008-5968 Public exploit
Directory traversal vulnerability in print.php in PHP iCalendar 2.24 and earlier allows remote attackers to include and…
-
Unscored —CVE-2008-5967 Public exploit
admin/index.php in PHP iCalendar 2.3.4, 2.24, and earlier does not require administrative authentication for an addupda…
-
Unscored —CVE-2008-5965 Public exploit
Directory traversal vulnerability in index.php in LokiCMS 0.3.4 and earlier, when magic_quotes_gpc is disabled, allows …
-
Unscored —CVE-2009-0275 Public exploit
Static code injection vulnerability in admin.php in Ryneezy phoSheezy 0.2 allows remote authenticated administrators to…
-
Unscored —
Stack-based buffer overflow in PXEService.exe in Fujitsu SystemcastWizard Lite 2.0A, 2.0, 1.9, and earlier allows remot…
-
Unscored —
Directory traversal vulnerability in the TFTP service in Fujitsu SystemcastWizard Lite 2.0A, 2.0, 1.9, and earlier allo…
-
Unscored —
Heap-based buffer overflow in the CamImage.CamImage.1 ActiveX control in AxisCamControl.ocx in AXIS Camera Control 2.40…
-
Unscored —
libike in Sun Solaris 9 and 10, and OpenSolaris before snv_100, does not properly check packets, which allows remote at…
-
Unscored —
Buffer overflow in the Registry Setting Tool in Fujitsu SystemcastWizard Lite 2.0A, 2.0, 1.9, and earlier has unknown i…
-
Unscored —
Race condition in the pseudo-terminal (aka pty) driver module in Sun Solaris 8 through 10, and OpenSolaris before snv_1…
-
Unscored —
Internet Systems Consortium (ISC) BIND 9.6.0 and earlier does not properly check the return value from the OpenSSL EVP_…
-
Unscored —
fs/ecryptfs/inode.c in the eCryptfs subsystem in the Linux kernel before 2.6.28.1 allows local users to cause a denial …
-
Unscored —CVE-2009-0266 Public exploit
Stack-based buffer overflow in Triologic Media Player 8.0.0.0 allows user-assisted remote attackers to execute arbitrar…
-
Unscored —CVE-2008-5959 Public exploit
Multiple SQL injection vulnerabilities in start.asp in Active Test 2.1 allow remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2008-5949 Public exploit
Multiple PHP remote file inclusion vulnerabilities in ccTiddly 1.7.4 and 1.7.6 allow remote attackers to execute arbitr…
-
Unscored —CVE-2008-5962 Public exploit
Directory traversal vulnerability in library/setup/rpc.php in Gravity Getting Things Done (GTD) 0.4.5 and earlier allow…
-
Unscored —CVE-2008-5948 Public exploit
Directory traversal vulnerability in index.php in BNCwi 1.04 and earlier allows remote attackers to include and execute…
-
Unscored —
SQL injection vulnerability in index.php in Tribiq CMS Community 5.0.10B and 5.0.11E allows remote attackers to execute…
-
Unscored —CVE-2008-5958 Public exploit
Multiple SQL injection vulnerabilities in Active Test 2.1 allow remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2008-5957 Public exploit
SQL injection vulnerability in the Mydyngallery (com_mydyngallery) component 1.4.2 for Joomla! allows remote attackers …
-
Unscored —CVE-2008-5950 Public exploit
SQL injection vulnerability in media/media_level.asp in ASP Template Creature allows remote attackers to execute arbitr…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in Tribiq CMS Community 5.0.10B and 5.0.11E allows remote attacke…
-
Unscored —CVE-2008-5956 Public exploit
Wbstreet (aka PHPSTREET Webboard) 1.0 stores sensitive information under the web root with insufficient access control,…
-
Unscored —CVE-2008-5955 Public exploit
SQL injection vulnerability in show.php in Wbstreet (aka PHPSTREET Webboard) 1.0 allows remote attackers to execute arb…
-
Unscored —CVE-2008-5951 Public exploit
ASP Template Creature stores sensitive information under the web root with insufficient access control, which allows re…
-
Unscored —CVE-2008-5953 Public exploit
Directory traversal vulnerability in KTP Computer Customer Database (KTPCCD) CMS, when magic_quotes_gpc is disabled, al…
-
Unscored —
Session fixation vulnerability in Social ImpressCMS before 1.1.1 RC1 allows remote attackers to hijack web sessions by …
-
Unscored —CVE-2008-5963 Public exploit
Eval injection vulnerability in library/setup/rpc.php in Gravity Getting Things Done (GTD) 0.4.5 and earlier allows rem…
-
Unscored —CVE-2008-5954 Public exploit
SQL injection vulnerability in KTP Computer Customer Database (KTPCCD) CMS, when magic_quotes_gpc is disabled, allows r…
-
Unscored —CVE-2008-5952 Public exploit
SQL injection vulnerability in KTP Computer Customer Database (KTPCCD) CMS, when magic_quotes_gpc is disabled, allows r…