Skip to content
OpenAdvisories

Archive

24 February 2009

Vulnerabilities first published on this day (UTC), newest first.

19 results · Clear filters · Feed

  • Unscored —
    CVE-2009-0727 Public exploit

    SQL injection vulnerability in jobdetails.php in taifajobs 1.0 and earlier allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2009-0728 Public exploit

    SQL injection vulnerability in the My_eGallery module for MAXdev MDPro (MD-Pro) and Postnuke allows remote attackers to…

  • Unscored —
    CVE-2009-0726 Public exploit

    SQL injection vulnerability in the GigCalendar (com_gigcal) component 1.0 for Mambo and Joomla! allows remote attackers…

  • Unscored —
    CVE-2009-0731 Public exploit

    Directory traversal vulnerability in pages/play.php in Free Arcade Script 1.0 allows remote attackers to include and ex…

  • Unscored —
    CVE-2009-0730 Public exploit

    Multiple SQL injection vulnerabilities in the GigCalendar (com_gigcal) component 1.0 for Mambo and Joomla!, when magic_…

  • Unscored —
    CVE-2008-6254 Public exploit

    SQL injection vulnerability in scripts/documents.php in Jadu Galaxies allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2008-6263 Public exploit

    SQL injection vulnerability in lib/user/t_user.php in SaturnCMS allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2008-6264 Public exploit

    SQL injection vulnerability in admin/admin.php in E-topbiz Slide Popups 1.0 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2008-6261 Public exploit

    SQL injection vulnerability in view.php in E-topbiz AdManager 4 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2008-6265 Public exploit

    Directory traversal vulnerability in portfolio/css.php in Cyberfolio 7.12.2 and earlier allows remote attackers to incl…

  • Unscored —
    CVE-2008-6262 Public exploit

    SQL injection vulnerability in lib/url/meta_url.php in SaturnCMS allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2008-6251 Public exploit

    PHP remote file inclusion vulnerability in includes/init.php in phpFan 3.3.4 allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2008-6257 Public exploit

    SQL injection vulnerability in default.asp in Openasp 3.0 and earlier allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2008-6258 Public exploit

    SQL injection vulnerability in users.asp in QuadComm Q-Shop 3.0, and possibly earlier, allows remote attackers to execu…

  • Unscored —
    CVE-2008-6252 Public exploit

    Stack-based buffer overflow in the smc program in smcFanControl 2.1.2 allows local users to execute arbitrary code and …

  • Unscored —
    CVE-2008-6253 Public exploit

    Directory traversal vulnerability in data/inc/lib/pcltar.lib.php in Pluck 4.5.3, when register_globals is enabled, allo…

  • Unscored —
    CVE-2008-6259 Public exploit

    Cross-site scripting (XSS) vulnerability in search.asp in QuadComm Q-Shop 3.0, and possibly earlier, allows remote atta…

  • Unscored —
    CVE-2008-6260 Public exploit

    SQL injection vulnerability in index.php in Ultrastats 0.2.144 and 0.3.11 allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2009-0722 Public exploit

    Directory traversal vulnerability in admin.php in Potato News 1.0.0 allows remote attackers to include and execute arbi…