Skip to content
OpenAdvisories

Archive

6 February 2009

Vulnerabilities first published on this day (UTC), newest first.

30 results · Clear filters · Feed

  • Unscored —
    CVE-2008-6087 Public exploit

    Cross-site scripting (XSS) vulnerability in topic.php in Camera Life 2.6.2b4 allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2008-6088 Public exploit

    SQL injection vulnerability in the Joomtracker (com_joomtracker) 1.01 module for Joomla! allows remote attackers to exe…

  • Unscored —
    CVE-2008-6090 Public exploit

    Directory traversal vulnerability in members.php in ScriptsEz Mini Hosting Panel allows remote attackers to read arbitr…

  • Unscored —
    CVE-2008-6086 Public exploit

    SQL injection vulnerability in album.php in Camera Life 2.6.2b4 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2008-6089 Public exploit

    Directory traversal vulnerability in main.php in ScriptsEz Easy Image Downloader allows remote attackers to read arbitr…

  • Unscored —
    CVE-2009-0473 Public exploit EPSS 13%

    Open redirect vulnerability in the web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge…

  • Unscored —
    CVE-2009-0470 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the HTTP server in Cisco IOS 12.4(23) allow remote attackers to …

  • Unscored —
    CVE-2008-6075 Public exploit

    SQL injection vulnerability in aspkat.asp in Bahar Download Script 2.0 allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2008-6082 Public exploit EPSS 45%

    Titan FTP Server 6.26 build 630 allows remote attackers to cause a denial of service (CPU consumption) via the SITE WHO…

  • Unscored —
    CVE-2008-6074 Public exploit

    Directory traversal vulnerability in frame.php in phpcrs 2.06 and earlier, when magic_quotes_gpc is disabled, allows re…

  • Unscored —
    CVE-2008-6083 Public exploit

    Directory traversal vulnerability in header.php in TXTshop beta 1.0 allows remote attackers to include and execute arbi…

  • Unscored —
    CVE-2008-6078 Public exploit

    SQL injection vulnerability in open.php in the Private Messaging (com_privmsg) component for Limbo CMS allows remote at…

  • Unscored —
    CVE-2008-6084 Public exploit

    Unrestricted file upload vulnerability in pages/download.php in Iamma Simple Gallery 1.0 and 2.0 allows remote attacker…

  • Unscored —
    CVE-2008-6081 Public exploit

    SQL injection vulnerability in contact.php in Simple Customer 1.2 allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2008-6077 Public exploit

    SQL injection vulnerability in loudblog/ajax.php in LoudBlog 0.8.0a and earlier allows remote authenticated users to ex…

  • Unscored —
    CVE-2008-6080 Public exploit Scanner template EPSS 11%

    Directory traversal vulnerability in download.php in the ionFiles (com_ionfiles) 4.4.2 component for Joomla! allows rem…

  • Unscored —
    CVE-2008-6076 Public exploit

    SQL injection vulnerability in the Daily Message (com_dailymessage) 1.0.3 component for Joomla! allows remote attackers…

  • Unscored —
    CVE-2008-6068 Public exploit

    SQL injection vulnerability in the JoomlaDate (com_joomladate) component 1.2 for Joomla! allows remote attackers to exe…

  • Unscored —
    CVE-2009-0461 Public exploit

    Whole Hog Password Protect: Enhanced 1.x allows remote attackers to bypass authentication and obtain administrative acc…

  • Unscored —
    CVE-2009-0467 Public exploit

    Cross-site scripting (XSS) vulnerability in proxy.html in Profense Web Application Firewall 2.6.2 and 2.6.3 allows remo…

  • Unscored —
    CVE-2009-0464 Public exploit

    PHP remote file inclusion vulnerability in includes/header.php in Groone GBook 2.0 allows remote attackers to execute a…

  • Unscored —
    CVE-2009-0462 Public exploit

    Multiple SQL injection vulnerabilities in customer_login_check.asp in ClickTech ClickCart 6.0 allow remote attackers to…

  • Unscored —
    CVE-2009-0459 Public exploit

    Multiple SQL injection vulnerabilities in admin/login_submit.php in Whole Hog Password Protect: Enhanced 1.x allow remo…

  • Unscored —
    CVE-2009-0465 Public exploit

    The SaveDoc method in the All_In_The_Box.AllBox ActiveX control in ALL_IN_THE_BOX.OCX in Synactis ALL In-The-Box Active…

  • Unscored —
    CVE-2009-0457 Public exploit

    Multiple directory traversal vulnerabilities in AJA Portal 1.2 allow remote attackers to include and execute arbitrary …

  • Unscored —
    CVE-2009-0456 Public exploit

    PHP remote file inclusion vulnerability in examples/example_clientside_javascript.php in patForms, as used in Sourdough…

  • Unscored —
    CVE-2009-0458 Public exploit

    Multiple SQL injection vulnerabilities in admin/login_submit.php in Whole Hog Ware Support 1.x allow remote attackers t…

  • Unscored —
    CVE-2009-0460 Public exploit

    Whole Hog Ware Support 1.x allows remote attackers to bypass authentication and obtain administrative access via an int…

  • Unscored —
    CVE-2009-0463 Public exploit

    PHP remote file inclusion vulnerability in includes/header.php in Groone GLinks 2.1 allows remote attackers to execute …

  • Unscored —
    CVE-2009-0468 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in ajax.html in Profense Web Application Firewall 2.6.2 and …