Skip to content
OpenAdvisories

Archive

20 February 2009

Vulnerabilities first published on this day (UTC), newest first.

38 results · Clear filters · Feed

  • Unscored —
    CVE-2008-6228 Public exploit

    Pre Multi-Vendor Shopping Malls allows remote attackers to bypass authentication and gain administrative access by sett…

  • Unscored —
    CVE-2008-6226 Public exploit

    SQL injection vulnerability in moreinfo.php in Pre Projects PHP Auto Listings Script, when magic_quotes_gpc is disabled…

  • Unscored —
    CVE-2008-6230 Public exploit

    SQL injection vulnerability in Tour.php in Pre Projects Pre Podcast Portal allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2008-6233 Public exploit

    SQL injection vulnerability in index.php in Five Dollar Scripts Drinks script allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2008-6223 Public exploit

    PHP remote file inclusion vulnerability in visualizza.php in Way Of The Warrior (WOTW) 5.0 and earlier allows remote at…

  • Unscored —
    CVE-2008-6227 Public exploit

    SQL injection vulnerability in buyer_detail.php in Pre Multi-Vendor Shopping Malls allows remote attackers to execute a…

  • Unscored —
    CVE-2008-6225 Public exploit

    SQL injection vulnerability in info.php in Mole Group Airline Ticket Sale Script allows remote attackers to execute arb…

  • Unscored —
    CVE-2008-6232 Public exploit

    Pre Shopping Mall allows remote attackers to bypass authentication and gain administrative access by setting the (1) ad…

  • Unscored —
    CVE-2008-6231 Public exploit

    Pre Classified Listing PHP allows remote attackers to bypass authentication and gain administrative access by setting t…

  • Unscored —
    CVE-2008-6224 Public exploit

    Directory traversal vulnerability in visualizza.php in Way Of The Warrior (WOTW) 5.0 and earlier allows remote attacker…

  • Unscored —
    CVE-2008-6221 Public exploit EPSS 54%

    PHP remote file inclusion vulnerability in config.dadamail.php in the Dada Mail Manager (com_dadamail) component 2.6 fo…

  • Unscored —
    CVE-2008-6222 Public exploit Scanner template EPSS 11%

    Directory traversal vulnerability in the Pro Desk Support Center (com_pro_desk) component 1.0 and 1.2 for Joomla! allow…

  • Unscored —
    CVE-2008-6220 Public exploit

    SQL injection vulnerability in login.php in Simple Document Management System (SDMS) 1.1.5 and 1.1.4, and possibly earl…

  • Unscored —
    CVE-2009-0659 Public exploit

    Stack-based buffer overflow in the GetStatsFromLine function in TPTEST 3.1.7 allows remote attackers to have an unknown…

  • Unscored —
    CVE-2009-0658 Public exploit EPSS 88%

    Buffer overflow in Adobe Reader 9.0 and earlier, and Acrobat 9.0 and earlier, allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2009-0650 Public exploit EPSS 13%

    Stack-based buffer overflow in the GetStatsFromLine function in TPTEST 3.1.7 and earlier, and possibly 5.02, allows rem…

  • Unscored —
    CVE-2009-0649 Public exploit

    The web browser in Symbian OS on the Nokia N95 cell phone allows remote attackers to cause a denial of service (crash) …

  • Unscored —
    CVE-2008-6213 Public exploit

    SQL injection vulnerability in mypage.php in Harlandscripts Pro Traffic One allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2008-6217 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Extrakt Framework 0.7 allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2008-6216 Public exploit

    SQL injection vulnerability in cadena_ofertas_ext.php in Venalsur Booking Centre Booking System for Hotels Group allows…

  • Unscored —
    CVE-2008-6214 Public exploit

    SQL injection vulnerability in poll_results.php in Harlandscripts Pro Traffic One allows remote attackers to execute ar…

  • Unscored —
    CVE-2008-6215 Public exploit

    Cross-site scripting (XSS) vulnerability in cadena_ofertas_ext.php in Venalsur Booking Centre Booking System for Hotels…

  • Unscored —
    CVE-2008-6200 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Swiki 1.5 allow remote attackers to inject arbitrary web script …

  • Unscored —
    CVE-2008-6203 Public exploit

    SQL injection vulnerability in adminler.asp in CoBaLT 2.0 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2008-6204 Public exploit

    Multiple SQL injection vulnerabilities in SuperNET Shop 1.0 and earlier allow remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2008-6211 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in PhpForums.net mcGallery 1.1 allow remote attackers to inject arb…

  • Unscored —
    CVE-2008-6212 Public exploit

    Cross-site scripting (XSS) vulnerability in admin.php in Php-Stats 0.1.9.1 allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2008-6206 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in RobotStats 0.1 allow remote attackers to execute arbitrary PHP co…

  • Unscored —
    CVE-2008-6202 Public exploit

    SQL injection vulnerability in CoBaLT 1.0 allows remote attackers to execute arbitrary SQL commands via the id paramete…

  • Unscored —
    CVE-2008-6209 Public exploit

    SQL injection vulnerability in view_product.php in Vastal I-Tech Software Zone allows remote attackers to execute arbit…

  • Unscored —
    CVE-2008-6205 Public exploit

    Cross-site scripting (XSS) vulnerability in seeurl.php in Xavier Flahaut URLStreet 1.0 allows remote attackers to injec…

  • Unscored —
    CVE-2008-6210 Public exploit

    SQL injection vulnerability in index.php in dream4 Koobi 4.4 and 5.4 allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2008-6201 Public exploit

    Directory traversal vulnerability in help.php in the eskuel module in KwsPHP 1.3.456, as available before 20080416, all…

  • Unscored —
    CVE-2008-6196 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Philippe CROCHAT EasySite 2.0 allow remote attackers to execute a…

  • Unscored —
    CVE-2008-6198 Public exploit

    SQL injection vulnerability in pages.php in Custom Pages 1.0 plugin for MyBulletinBoard (MyBB) allows remote attackers …

  • Unscored —
    CVE-2008-6199 Public exploit

    2532designs 2532|Gigs 1.2.2 and earlier allows remote attackers to trigger a backup and obtain sensitive information vi…

  • Unscored —
    CVE-2008-6195 Public exploit

    Directory traversal vulnerability in the PXE TFTP Service (PXEMTFTP.exe) in LANDesk Management Suite (LDMS) 8.80.1.1 an…

  • Unscored —
    CVE-2008-6197 Public exploit

    SQL injection vulnerability in index.php in the galerie module for KwsPHP 1.3.456 allows remote attackers to execute ar…