Skip to content
OpenAdvisories

Archive

13 February 2009

Vulnerabilities first published on this day (UTC), newest first.

9 results · Clear filters · Feed

  • Unscored —
    CVE-2008-6126 Public exploit

    Multiple directory traversal vulnerabilities in moziloCMS 1.10.2 and earlier allow remote attackers to read arbitrary f…

  • Unscored —
    CVE-2008-6132 Public exploit EPSS 26%

    Eval injection vulnerability in reserve.php in phpScheduleIt 1.2.10 and earlier, when magic_quotes_gpc is disabled, all…

  • Unscored —
    CVE-2008-6133 Public exploit

    SQL injection vulnerability in arsaprint.php in Full PHP Emlak Script allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2009-0572 Public exploit

    PHP remote file inclusion vulnerability in include/flatnux.php in FlatnuX CMS (aka Flatnuke3) 2009-01-27 and 2009-02-04…

  • Unscored —
    CVE-2009-0574 Public exploit

    SQL injection vulnerability in index.php in Easy CafeEngine allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2009-0573 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in FotoWeb 6.0 (Build 273) allow remote attackers to inject arbitra…

  • Unscored —
    CVE-2009-0570 Public exploit

    Directory traversal vulnerability in send.php in Ninja Designs Mailist 3.0, when register_globals is enabled and magic_…

  • Unscored —
    CVE-2009-0571 Public exploit

    admin.php in Ninja Designs Mailist 3.0 stores backup copies of maillist.php under the web root with insufficient access…

  • Unscored —
    CVE-2009-0360 Public exploit

    Russ Allbery pam-krb5 before 3.13, when linked against MIT Kerberos, does not properly initialize the Kerberos librarie…