Skip to content
OpenAdvisories

Archive

26 February 2009

Vulnerabilities first published on this day (UTC), newest first.

17 results · Clear filters · Feed

  • Unscored —
    CVE-2008-6306 Public exploit

    Cross-site scripting (XSS) vulnerability in signinform.php in Softbiz Classifieds Script allows remote attackers to inj…

  • Unscored —
    CVE-2008-6302 Public exploit

    TurnkeyForms Local Classifieds allows remote attackers to bypass authentication and gain administrative access via a di…

  • Unscored —
    CVE-2008-6305 Public exploit

    PHP remote file inclusion vulnerability in init.php in Free Directory Script 1.1.1, when register_globals is enabled, a…

  • Unscored —
    CVE-2008-6303 Public exploit

    SQL injection vulnerability in tourview.php in ToursManager allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2008-6307 Public exploit

    E-topbiz Link Back Checker 1 allows remote attackers to bypass authentication and gain administrative access by setting…

  • Unscored —
    CVE-2008-6294 Public exploit

    admin/Index.php in Acc Statistics 1.1 allows remote attackers to bypass authentication and gain administrative access b…

  • Unscored —
    CVE-2008-6297 Public exploit

    Cross-site scripting (XSS) vulnerability in order.php in DHCart allows remote attackers to inject arbitrary web script …

  • Unscored —
    CVE-2008-6293 Public exploit

    admin/Index.php in Acc Real Estate 4.0 allows remote attackers to bypass authentication and gain administrative access …

  • Unscored —
    CVE-2008-6289 Public exploit

    SQL injection vulnerability in cityview.php in Tours Manager 1.0 allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2008-6300 Public exploit

    Galatolo WebManager 1.3a allows remote attackers to bypass authentication and gain administrative access by setting the…

  • Unscored —
    CVE-2008-6292 Public exploit

    Acc Autos 4.0 allows remote attackers to bypass authentication and gain administrative access by setting the (1) userna…

  • Unscored —
    CVE-2008-6296 Public exploit

    admin.php in Maran PHP Shop allows remote attackers to bypass authentication and gain administrative access by setting …

  • Unscored —
    CVE-2008-6301 Public exploit

    SQL injection vulnerability in shoutbox_view.php in the Small ShoutBox module 1.4 for phpBB allows remote attackers to …

  • Unscored —
    CVE-2008-6290 Public exploit

    Directory traversal vulnerability in includefile.php in nicLOR Sito, when register_globals is enabled or magic_quotes_g…

  • Unscored —
    CVE-2008-6291 Public exploit

    Acc PHP eMail 1.1 allows remote attackers to bypass authentication and gain administrative access by setting the NEWSLE…

  • Unscored —
    CVE-2009-0520 Public exploit EPSS 28%

    Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 does not properly remove references to destroyed obj…

  • Unscored —
    CVE-2009-0187 Public exploit EPSS 40%

    Stack-based buffer overflow in Orbit Downloader 2.8.2 and 2.8.3, and possibly other versions before 2.8.5, allows remot…