Skip to content
OpenAdvisories

Archive

3 February 2009

Vulnerabilities first published on this day (UTC), newest first.

31 results · Clear filters · Feed

  • Unscored —
    CVE-2009-0407 Public exploit

    SQL injection vulnerability in admin/login.php in PHP-CMS Project 1 allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2009-0400 Public exploit

    SQL injection vulnerability in blog.php in SocialEngine 3.06 trial allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2009-0405 Public exploit

    SQL injection vulnerability in articles.php in smartSite CMS 1.0 allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2009-0399 Public exploit

    Chipmunk Blogger Script allows remote attackers to gain administrator privileges via a direct request to admin/reguser.…

  • Unscored —
    CVE-2009-0183 Public exploit EPSS 67%

    Stack-based buffer overflow in Remote Control Server in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844 all…

  • Unscored —
    CVE-2009-0409 Public exploit

    SQL injection vulnerability in offline_auth.php in Max.Blog 1.0.6 and earlier, when magic_quotes_gpc is disabled, allow…

  • Unscored —
    CVE-2009-0410 Public exploit

    Off-by-one error in the SMTP daemon in GroupWise Internet Agent (GWIA) in Novell GroupWise 6.5x, 7.0, 7.01, 7.02, 7.03,…

  • Unscored —
    CVE-2009-0406 Public exploit

    SQL injection vulnerability in index.php in Community CMS 0.4 and earlier allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2009-0184 Public exploit EPSS 28%

    Multiple buffer overflows in the torrent parsing implementation in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Bu…

  • Unscored —
    CVE-2009-0403 Public exploit

    SQL injection vulnerability in admin/authenticate.php in Chipmunk Blogger Script allows remote attackers to execute arb…

  • Unscored —
    CVE-2008-6032 Public exploit

    SQL injection vulnerability in comments.php in WSN Links Free 4.0.34P allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2008-6043 Public exploit

    Multiple SQL injection vulnerabilities in PHP Pro Bid (PPB) 6.04 allow remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2008-6038 Public exploit

    SQL injection vulnerability in index.php in MapCal 0.1 allows remote attackers to execute arbitrary SQL commands via th…

  • Unscored —
    CVE-2008-6036 Public exploit

    PHP remote file inclusion vulnerability in main.inc.php in BaseBuilder 2.0.1 and earlier allows remote attackers to exe…

  • Unscored —
    CVE-2008-6031 Public exploit

    SQL injection vulnerability in vote.php in WSN Links 2.22 and 2.23 allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2008-6034 Public exploit

    Cross-site scripting (XSS) vulnerability in dispatch.php in Achievo 1.3.2 allows remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2008-6042 Public exploit

    SQL injection vulnerability in the re_search module in NetArtMedia Real Estate Portal 2.0 allows remote attackers to ex…

  • Unscored —
    CVE-2008-6045 Public exploit

    Session fixation vulnerability in shopping_cart.php in xt:Commerce 3.0.4 and earlier allows remote attackers to hijack …

  • Unscored —
    CVE-2008-6028 Public exploit

    SQL injection vulnerability in list.php in University of Queensland Library Fez 1.3 and 2.0 RC1 allows remote attackers…

  • Unscored —
    CVE-2008-6039 Public exploit

    Session fixation vulnerability in BLUEPAGE CMS 2.5 and earlier allows remote attackers to hijack web sessions by settin…

  • Unscored —
    CVE-2008-6033 Public exploit

    SQL injection vulnerability in comments.php in WSN Links 2.20 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2008-6037 Public exploit

    SQL injection vulnerability in view.php in AvailScript Article Script allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2008-6025 Public exploit

    Directory traversal vulnerability in scr/form.php in openElec 3.01 and earlier allows remote attackers to include and e…

  • Unscored —
    CVE-2008-6029 Public exploit

    SQL injection vulnerability in search.php in BuzzyWall 1.3.1 and earlier, when magic_quotes_gpc is disabled, allows rem…

  • Unscored —
    CVE-2008-6030 Public exploit

    Multiple SQL injection vulnerabilities in NetArtMedia Jobs Portal 1.3 allow remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2008-6026 Public exploit

    SQL injection vulnerability in tienda.php in BlueCUBE CMS allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2008-6044 Public exploit

    Cross-site scripting (XSS) vulnerability in advanced_search_result.php in xt:Commerce 3.0.4 and earlier allows remote a…

  • Unscored —
    CVE-2009-0392 Public exploit

    Directory traversal vulnerability in sysconf.cgi in Motorola Wimax modem CPEi300 allows remote authenticated users to r…

  • Unscored —
    CVE-2009-0395 Public exploit

    SQL injection vulnerability in the login feature in NetArt Media Car Portal 1.0 allows remote attackers to execute arbi…

  • Unscored —
    CVE-2009-0393 Public exploit

    Cross-site scripting (XSS) vulnerability in sysconf.cgi in Motorola Wimax modem CPEi300 allows remote authenticated use…

  • Unscored —
    CVE-2009-0394 Public exploit

    SQL injection vulnerability in login.php in Pre Lecture Exercises (PLEs) CMS 1.0 beta 4.2 allows remote attackers to ex…