Skip to content
OpenAdvisories

Archive

11 February 2009

Vulnerabilities first published on this day (UTC), newest first.

24 results · Clear filters · Feed

  • Unscored —
    CVE-2009-0530 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in SnippetMaster 2.2.2, when register_globals is enabled, allow remo…

  • Unscored —
    CVE-2009-0036 Public exploit

    Buffer overflow in the proxyReadClientSocket function in proxy/libvirt_proxy.c in libvirt_proxy 0.5.1 might allow local…

  • Unscored —
    CVE-2009-0529 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in SnippetMaster Webpage Editor 2.2.2 allows remote attackers to …

  • Unscored —
    CVE-2009-0535 Public exploit

    Directory traversal vulnerability in export.php in Thyme 1.3 and earlier, when register_globals is disabled, allows rem…

  • Unscored —
    CVE-2009-0534 Public exploit

    SQL injection vulnerability in FlexCMS allows remote attackers to execute arbitrary SQL commands via the catId paramete…

  • Unscored —
    CVE-2009-0527 Public exploit

    PHP remote file inclusion vulnerability in plugins/rss_importer_functions.php in AdaptCMS Lite 1.4 allows remote attack…

  • Unscored —
    CVE-2009-0528 Public exploit

    SQL injection vulnerability in frame.php in Rhadrix If-CMS 2.07 and earlier allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2009-0531 Public exploit

    SQL injection vulnerability in gallery/view.asp in A Better Member-Based ASP Photo Gallery before 1.2 allows remote att…

  • Unscored —
    CVE-2009-0526 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in AdaptCMS Lite 1.4 allow remote attackers to inject …

  • Unscored —
    CVE-2008-6111 Public exploit

    SQL injection vulnerability in blog.php in NetArt Media Vlog System 1.1 allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2008-6119 Public exploit

    Static code injection vulnerability in gooplecms/admin/account/action/editpass.php in Goople CMS 1.7 allows remote atta…

  • Unscored —
    CVE-2008-6114 Public exploit

    SQL injection vulnerability in product_details.php in the Mytipper Zogo-shop 1.15.4 plugin for e107 allows remote attac…

  • Unscored —
    CVE-2008-6117 Public exploit

    SQL injection vulnerability in homepage.php in PG Job Site Pro allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2008-6122 Public exploit

    The web management interface in Netgear WGR614v9 allows remote attackers to cause a denial of service (crash) via a req…

  • Unscored —
    CVE-2008-6118 Public exploit

    win/content/upload.php in Goople CMS 1.7 allows remote attackers to bypass authentication and gain administrative acces…

  • Unscored —
    CVE-2008-6116 Public exploit

    SQL injection vulnerability in the EXtrovert Software Thyme (com_thyme) 1.0 component for Joomla! allows remote attacke…

  • Unscored —
    CVE-2008-6115 Public exploit

    SQL injection vulnerability in directory.php in Prozilla Hosting Index allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2008-6112 Public exploit

    Multiple directory traversal vulnerabilities in Ez Ringtone Manager allow remote attackers to read arbitrary files via …

  • Unscored —
    CVE-2009-0517 Public exploit EPSS 49%

    Eval injection vulnerability in index.php in phpSlash 0.8.1.1 and earlier allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2009-0514 Public exploit

    Multiple directory traversal vulnerabilities in WebFrame 0.76 allow remote attackers to include and execute arbitrary l…

  • Unscored —
    CVE-2009-0515 Public exploit

    Directory traversal vulnerability in check_lang.php in Yet Another NOCC (YANOCC) 0.1.0 and earlier allows remote attack…

  • Unscored —
    CVE-2009-0516 Public exploit

    SQL injection vulnerability in the classified page (classified.php) in BusinessSpace 1.2 and earlier allows remote atta…

  • Unscored —
    CVE-2009-0513 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in WebFrame 0.76 allow remote attackers to execute arbitrary PHP cod…

  • Unscored —
    CVE-2009-0455 Public exploit

    Cross-site scripting (XSS) vulnerability in the anonymous comments feature in lib-comment.php in glFusion 1.1.0, 1.1.1,…