Archive
25 February 2009
Vulnerabilities first published on this day (UTC), newest first.
36 results · Feed
-
Unscored —CVE-2008-6277 Public exploit
SQL injection vulnerability in product.php in RakhiSoftware Price Comparison Script (aka Shopping Cart) allows remote a…
-
Unscored —CVE-2008-6279 Public exploit
RakhiSoftware Price Comparison Script (aka Shopping Cart) allows remote attackers to obtain sensitive information via a…
-
Unscored —CVE-2008-6288 Public exploit
Directory traversal vulnerability in download.php in Interface Medien ibase 2.03 and earlier allows remote attackers to…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the User Karma module 5.x before 5.x-1.13 and 6.x before 6.x-1.0-beta1, a m…
-
Unscored —CVE-2008-6287 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Broadcast Machine 0.1 allow remote attackers to execute arbitrary…
-
Unscored —CVE-2008-6274 Public exploit
Multiple SQL injection vulnerabilities in index.php in FamilyProject 2.0 allow remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2008-6280 Public exploit
Cross-site scripting (XSS) vulnerability in apply.cgi on the Linksys WRT160N allows remote attackers to inject arbitrar…
-
Unscored —CVE-2008-6281 Public exploit
SQL injection vulnerability in index.php in Bluo CMS 1.2 allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2008-6282 Public exploit
SQL injection vulnerability in engine/users/users_edit_pub.inc in CMS Ortus 1.13 and earlier allows remote authenticate…
-
Unscored —
Multiple SQL injection vulnerabilities in the User Karma module 5.x before 5.x-1.13 and 6.x before 6.x-1.0-beta1, a mod…
-
Unscored —CVE-2008-6278 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in product.php in RakhiSoftware Price Comparison Script (aka Shoppi…
-
Unscored —CVE-2008-6284 Public exploit
SQL injection vulnerability in edit.php in Z1Exchange 1.0 allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2008-6285 Public exploit
SQL injection vulnerability in index.php in PHP TV Portal 2.0 and earlier allows remote attackers to execute arbitrary …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Subtext 2.0 allows remote attackers to inject arbitrary web script or HTML …
-
Unscored —CVE-2008-6286 Public exploit
Multiple SQL injection vulnerabilities in SubscriberStart.asp in Active Newsletter 4.3 allow remote attackers to execut…
-
Unscored —CVE-2009-0739 Public exploit
SQL injection vulnerability in login.php in MyNews 0.10 allows remote attackers to execute arbitrary SQL commands via t…
-
Unscored —CVE-2009-0741 Public exploit
SQL injection vulnerability in Login.asp in Craft Silicon Banking@Home 2.1 and earlier allows remote attackers to execu…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the web-based installer (config/index.php) in MediaWiki 1.6 befo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Pebble before 2.3.2 allows remote attackers to inject arbitrary web script …
-
Unscored —CVE-2009-0735 Public exploit
Directory traversal vulnerability in lib/classes/message_class.php in Papoo CMS 3.6, when register_globals is enabled a…
-
Unscored —CVE-2009-0734 Public exploit
Heap-based buffer overflow in MultimediaPlayer.exe 6.86.240.7 in Nokia PC Suite 6.86.9.3 allows remote attackers to exe…
-
Unscored —CVE-2009-0740 Public exploit
SQL injection vulnerability in login.php in BlueBird Prelease allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2009-0738 Public exploit
SQL injection vulnerability in login.php in Auth Php 1.0 allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2008-6272 Public exploit
SQL injection vulnerability in admin/index.php in Dragan Mitic Apoll 0.7 beta and 0.7.5 allows remote attackers to exec…
-
Unscored —
Directory traversal vulnerability in configuration_script.php in MyKtools 3.0 allows remote authenticated administrator…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Libero 5.3 SP5, and possibly other versions before 5.5 SP1, allows remote a…
-
Unscored —
The CICS listener in IBM TXSeries for Multiplatforms 6.2 GA waits for a forcepurge acknowledgement from the CICS Applic…
-
High 8.8
Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1; Excel Viewer 2003 Gold and SP3; Excel Viewer; Compat…
KEV Apr 14, 2026 -
Unscored —CVE-2009-0541 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Magento 1.2.0 and 1.2.1.1 allow remote attackers to inject arbit…
-
Unscored —
Unspecified vulnerability in IBM WebSphere Application Server (WAS) 5.1 and 6.0.2 before 6.0.2.33 on z/OS, when CSIv2 I…
-
Unscored —CVE-2008-6269 Public exploit
Joovili 3.1.4 allows remote attackers to bypass authentication and gain privileges as other users, including the admini…
-
Unscored —CVE-2008-6267 Public exploit
Cross-site scripting (XSS) vulnerability in detail.php in Multi Languages WebShop Online 1.02 allows remote attackers t…
-
Unscored —CVE-2008-6270 Public exploit
SQL injection vulnerability in admin/index.php in Dragan Mitic Apoll 0.7 beta and 0.7.5 allows remote attackers to exec…
-
Unscored —CVE-2008-6268 Public exploit
SQL injection vulnerability in detail.php in WEBBDOMAIN Multi Languages WebShop Online 1.02 allows remote attackers to …
-
Unscored —CVE-2008-6271 Public exploit
Directory traversal vulnerability in index.php in TBmnetCMS 1.0, when magic_quotes_gpc is disabled, allows remote attac…
-
Unscored —CVE-2008-6266 Public exploit
SQL injection vulnerability in links.php in Appalachian State University phpWebSite allows remote attackers to execute …