Archive
20 February 2009
Vulnerabilities first published on this day (UTC), newest first.
51 results · Feed
-
Unscored —CVE-2008-6228 Public exploit
Pre Multi-Vendor Shopping Malls allows remote attackers to bypass authentication and gain administrative access by sett…
-
Unscored —CVE-2008-6226 Public exploit
SQL injection vulnerability in moreinfo.php in Pre Projects PHP Auto Listings Script, when magic_quotes_gpc is disabled…
-
Unscored —CVE-2008-6230 Public exploit
SQL injection vulnerability in Tour.php in Pre Projects Pre Podcast Portal allows remote attackers to execute arbitrary…
-
Unscored —CVE-2008-6233 Public exploit
SQL injection vulnerability in index.php in Five Dollar Scripts Drinks script allows remote attackers to execute arbitr…
-
Unscored —CVE-2008-6223 Public exploit
PHP remote file inclusion vulnerability in visualizza.php in Way Of The Warrior (WOTW) 5.0 and earlier allows remote at…
-
Unscored —CVE-2008-6227 Public exploit
SQL injection vulnerability in buyer_detail.php in Pre Multi-Vendor Shopping Malls allows remote attackers to execute a…
-
Unscored —CVE-2008-6225 Public exploit
SQL injection vulnerability in info.php in Mole Group Airline Ticket Sale Script allows remote attackers to execute arb…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the administrative interface in Drupal Content Construction Kit (CCK) 5.x b…
-
Unscored —CVE-2008-6232 Public exploit
Pre Shopping Mall allows remote attackers to bypass authentication and gain administrative access by setting the (1) ad…
-
Unscored —CVE-2008-6231 Public exploit
Pre Classified Listing PHP allows remote attackers to bypass authentication and gain administrative access by setting t…
-
Unscored —CVE-2008-6224 Public exploit
Directory traversal vulnerability in visualizza.php in Way Of The Warrior (WOTW) 5.0 and earlier allows remote attacker…
-
Unscored —
PHP remote file inclusion vulnerability in config.dadamail.php in the Dada Mail Manager (com_dadamail) component 2.6 fo…
-
Unscored —
Directory traversal vulnerability in the Pro Desk Support Center (com_pro_desk) component 1.0 and 1.2 for Joomla! allow…
-
Unscored —CVE-2008-6220 Public exploit
SQL injection vulnerability in login.php in Simple Document Management System (SDMS) 1.1.5 and 1.1.4, and possibly earl…
-
Unscored —
Lenovo Veriface III allows physically proximate attackers to login to a Windows account by presenting a "plain image" o…
-
Unscored —CVE-2009-0659 Public exploit
Stack-based buffer overflow in the GetStatsFromLine function in TPTEST 3.1.7 allows remote attackers to have an unknown…
-
Unscored —
Asus SmartLogon 1.0.0005 allows physically proximate attackers to bypass "security functions" by presenting an image wi…
-
Unscored —
Buffer overflow in Adobe Reader 9.0 and earlier, and Acrobat 9.0 and earlier, allows remote attackers to execute arbitr…
-
Unscored —
Tor 0.2.0.28, and probably 0.2.0.34 and earlier, allows remote attackers, with control of an entry router and an exit r…
-
Unscored —
Toshiba Face Recognition 2.0.2.32 allows physically proximate attackers to obtain notebook access by presenting a large…
-
Unscored —
OpenSSL, probably 0.9.6, does not verify the Basic Constraints for an intermediate CA-signed certificate, which allows …
-
Unscored —
The Internationalized Domain Names (IDN) blacklist in Mozilla Firefox 3.0.6 and other versions before 3.0.9; Thunderbir…
-
Unscored —
Integer overflow in the WriteProlog function in texttops in CUPS 1.1.17 on Red Hat Enterprise Linux (RHEL) 3 allows rem…
-
Unscored —
Unspecified vulnerability in the Veritas network daemon (aka vnetd) in Symantec Veritas NetBackup Server / Enterprise S…
-
Unscored —
Stack-based buffer overflow in the GetStatsFromLine function in TPTEST 3.1.7 and earlier, and possibly 5.02, allows rem…
-
Unscored —CVE-2009-0649 Public exploit
The web browser in Symbian OS on the Nokia N95 cell phone allows remote attackers to cause a denial of service (crash) …
-
Unscored —
nsrexecd.exe in multiple EMC Networker products including EMC NetWorker Server, Storage Node, and Client 7.3.x and 7.4,…
-
Unscored —CVE-2008-6213 Public exploit
SQL injection vulnerability in mypage.php in Harlandscripts Pro Traffic One allows remote attackers to execute arbitrar…
-
Unscored —CVE-2008-6217 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Extrakt Framework 0.7 allows remote attackers to inject arbitr…
-
Unscored —CVE-2008-6216 Public exploit
SQL injection vulnerability in cadena_ofertas_ext.php in Venalsur Booking Centre Booking System for Hotels Group allows…
-
Unscored —CVE-2008-6214 Public exploit
SQL injection vulnerability in poll_results.php in Harlandscripts Pro Traffic One allows remote attackers to execute ar…
-
Unscored —CVE-2008-6215 Public exploit
Cross-site scripting (XSS) vulnerability in cadena_ofertas_ext.php in Venalsur Booking Centre Booking System for Hotels…
-
Unscored —
Memory leak in the png_handle_tEXt function in pngrutil.c in libpng before 1.2.33 rc02 and 1.4.0 beta36 allows context-…
-
Unscored —CVE-2008-6200 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Swiki 1.5 allow remote attackers to inject arbitrary web script …
-
Unscored —CVE-2008-6203 Public exploit
SQL injection vulnerability in adminler.asp in CoBaLT 2.0 allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2008-6204 Public exploit
Multiple SQL injection vulnerabilities in SuperNET Shop 1.0 and earlier allow remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2008-6211 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in PhpForums.net mcGallery 1.1 allow remote attackers to inject arb…
-
Unscored —CVE-2008-6212 Public exploit
Cross-site scripting (XSS) vulnerability in admin.php in Php-Stats 0.1.9.1 allows remote attackers to inject arbitrary …
-
Unscored —CVE-2008-6206 Public exploit
Multiple PHP remote file inclusion vulnerabilities in RobotStats 0.1 allow remote attackers to execute arbitrary PHP co…
-
Unscored —CVE-2008-6202 Public exploit
SQL injection vulnerability in CoBaLT 1.0 allows remote attackers to execute arbitrary SQL commands via the id paramete…