Skip to content
OpenAdvisories

Archive

11 February 2009

Vulnerabilities first published on this day (UTC), newest first.

34 results · Feed

  • Unscored —
    CVE-2009-0530 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in SnippetMaster 2.2.2, when register_globals is enabled, allow remo…

  • Unscored —
    CVE-2009-0036 Public exploit

    Buffer overflow in the proxyReadClientSocket function in proxy/libvirt_proxy.c in libvirt_proxy 0.5.1 might allow local…

  • Unscored —

    at in bos.rte.cron on IBM AIX 5.2.0, 5.3.0 through 5.3.9, and 6.1.0 through 6.1.2 allows local users to read arbitrary …

  • Unscored —
    CVE-2009-0529 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in SnippetMaster Webpage Editor 2.2.2 allows remote attackers to …

  • Unscored —
    CVE-2009-0535 Public exploit

    Directory traversal vulnerability in export.php in Thyme 1.3 and earlier, when register_globals is disabled, allows rem…

  • Unscored —
    CVE-2009-0534 Public exploit

    SQL injection vulnerability in FlexCMS allows remote attackers to execute arbitrary SQL commands via the catId paramete…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in password.php in Scripts for Sites EZ Reminder allows remote attackers to in…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in password.php in Scripts For Sites (SFS) EZ Baby allows remote attackers to …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the sajax_get_common_js function in php/Sajax.php in Sajax 0.12 allows remo…

  • Unscored —
    CVE-2009-0527 Public exploit

    PHP remote file inclusion vulnerability in plugins/rss_importer_functions.php in AdaptCMS Lite 1.4 allows remote attack…

  • Unscored —
    CVE-2009-0528 Public exploit

    SQL injection vulnerability in frame.php in Rhadrix If-CMS 2.07 and earlier allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2009-0531 Public exploit

    SQL injection vulnerability in gallery/view.asp in A Better Member-Based ASP Photo Gallery before 1.2 allows remote att…

  • Unscored —
    CVE-2009-0526 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in AdaptCMS Lite 1.4 allow remote attackers to inject …

  • Unscored —
    CVE-2008-6111 Public exploit

    SQL injection vulnerability in blog.php in NetArt Media Vlog System 1.1 allows remote attackers to execute arbitrary SQ…

  • Unscored —

    CRLF injection vulnerability in SocialEngine (SE) 2.7 and earlier allows remote attackers to inject arbitrary HTTP head…

  • Unscored —

    SQL injection vulnerability in profile_comments.php in SocialEngine (SE) 2.7 and earlier allows remote attackers to exe…

  • Unscored —
    CVE-2008-6119 Public exploit

    Static code injection vulnerability in gooplecms/admin/account/action/editpass.php in Goople CMS 1.7 allows remote atta…

  • Unscored —
    CVE-2008-6114 Public exploit

    SQL injection vulnerability in product_details.php in the Mytipper Zogo-shop 1.15.4 plugin for e107 allows remote attac…

  • Unscored —
    CVE-2008-6117 Public exploit

    SQL injection vulnerability in homepage.php in PG Job Site Pro allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2008-6122 Public exploit

    The web management interface in Netgear WGR614v9 allows remote attackers to cause a denial of service (crash) via a req…

  • Unscored —
    CVE-2008-6118 Public exploit

    win/content/upload.php in Goople CMS 1.7 allows remote attackers to bypass authentication and gain administrative acces…

  • Unscored —
    CVE-2008-6116 Public exploit

    SQL injection vulnerability in the EXtrovert Software Thyme (com_thyme) 1.0 component for Joomla! allows remote attacke…

  • Unscored —
    CVE-2008-6115 Public exploit

    SQL injection vulnerability in directory.php in Prozilla Hosting Index allows remote attackers to execute arbitrary SQL…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in SemanticScuttle before 0.90 allows remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2008-6112 Public exploit

    Multiple directory traversal vulnerabilities in Ez Ringtone Manager allow remote attackers to read arbitrary files via …

  • Unscored —

    Unspecified vulnerability in SemanticScuttle before 0.90 has unknown impact and attack vectors related to improper vali…

  • Unscored —

    Robin Rawson-Tetley Animal Shelter Manager (ASM) before 2.2.2 does not properly enforce the privileges of user accounts…

  • Unscored —
    CVE-2009-0517 Public exploit EPSS 49%

    Eval injection vulnerability in index.php in phpSlash 0.8.1.1 and earlier allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2009-0514 Public exploit

    Multiple directory traversal vulnerabilities in WebFrame 0.76 allow remote attackers to include and execute arbitrary l…

  • Unscored —
    CVE-2009-0515 Public exploit

    Directory traversal vulnerability in check_lang.php in Yet Another NOCC (YANOCC) 0.1.0 and earlier allows remote attack…

  • Unscored —
    CVE-2009-0516 Public exploit

    SQL injection vulnerability in the classified page (classified.php) in BusinessSpace 1.2 and earlier allows remote atta…

  • Unscored —
    CVE-2009-0513 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in WebFrame 0.76 allow remote attackers to execute arbitrary PHP cod…

  • Unscored —

    Integer underflow in the Huffman decoding functionality (pvmp3_huffman_parsing.cpp) in OpenCORE 2.0 and earlier allows …

  • Unscored —
    CVE-2009-0455 Public exploit

    Cross-site scripting (XSS) vulnerability in the anonymous comments feature in lib-comment.php in glFusion 1.1.0, 1.1.1,…