Skip to content
OpenAdvisories

Archive

February 2009

Vulnerabilities first published in this month (UTC), newest first.

393 results · Clear filters · Feed

  • Unscored —
    CVE-2008-6337 Public exploit

    SQL injection vulnerability in the Volunteer Management System (com_volunteer) module 2.0 for Joomla! allows remote att…

  • Unscored —
    CVE-2008-6336 Public exploit

    Directory traversal vulnerability in download.php in Text Lines Rearrange Script 1.0, when register_globals is enabled,…

  • Unscored —
    CVE-2008-6333 Public exploit

    SQL injection vulnerability in news.php in RSS Simple News (RSSSN), when magic_quotes_gpc is disabled, allows remote at…

  • Unscored —
    CVE-2008-6335 Public exploit

    Directory traversal vulnerability in download.php in eMetrix Online Keyword Research Tool allows remote attackers to re…

  • Unscored —
    CVE-2008-6345 Public exploit

    SQL injection vulnerability in Forum.php in SolarCMS 0.53.8 and 1.0 allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2008-6334 Public exploit

    Directory traversal vulnerability in download.php in eMetrix Extract Website allows remote attackers to read arbitrary …

  • Unscored —
    CVE-2009-0744 Public exploit

    Apple Safari 4 Beta build 528.16 allows remote attackers to cause a denial of service (NULL pointer dereference and app…

  • Unscored —
    CVE-2009-0028 Public exploit

    The clone system call in the Linux kernel 2.6.28 and earlier allows local users to send arbitrary signals to a parent p…

  • Unscored —
    CVE-2009-0746 Public exploit

    The make_indexed_dir function in fs/ext4/namei.c in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7…

  • Unscored —
    CVE-2008-6332 Public exploit

    SQL injection vulnerability in login.php in Simple Customer 1.2 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2008-6330 Public exploit

    SQL injection vulnerability in index.php in MyTopix 1.3.0 and earlier allows remote authenticated users to execute arbi…

  • Unscored —
    CVE-2008-6329 Public exploit

    SQL injection vulnerability in Employee/login.asp in Pre ASP Job Board allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2008-6313 Public exploit

    Directory traversal vulnerability in addedit-render.php in phpAddEdit 1.3, when magic_quotes_gpc is disabled, allows re…

  • Unscored —
    CVE-2008-6311 Public exploit

    SQL injection vulnerability in view.php in Butterfly Organizer 2.0.1 allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2008-6327 Public exploit

    SQL injection vulnerability in index.php in ProQuiz 1.0 allows remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2008-6326 Public exploit

    SQL injection vulnerability in login.php in Simple Customer as downloaded on 20081118 allows remote attackers to execut…

  • Unscored —
    CVE-2008-6322 Public exploit

    SQL injection vulnerability in index.cfm in CFMSource CFMBlog allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2008-6320 Public exploit

    SQL injection vulnerability in index.cfm in CF Shopkart 5.2.2 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2008-6312 Public exploit

    SQL injection vulnerability in index.php in ProQuiz 1.0 allows remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2008-6315 Public exploit

    PHP remote file inclusion vulnerability in _conf/core/common-tpl-vars.php in PHPmyGallery 1.0 beta2 allows remote attac…

  • Unscored —
    CVE-2008-6321 Public exploit

    CF Shopkart 5.2.2 stores cfshopkart52.mdb under the web root with insufficient access control, which allows remote atta…

  • Unscored —
    CVE-2008-6316 Public exploit

    Directory traversal vulnerability in _conf/core/common-tpl-vars.php in PHPmyGallery 1.0 beta2 allows remote attackers t…

  • Unscored —
    CVE-2008-6314 Public exploit

    SQL injection vulnerability in tag_board.php in the Tag Board module 4.0 and earlier for phpBB allows remote attackers …

  • Unscored —
    CVE-2008-6319 Public exploit

    SQL injection vulnerability in calendarevent.cfm in CF_Calendar allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2008-6325 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Classifieds Script allow remote attackers to inject arbi…

  • Unscored —
    CVE-2008-6328 Public exploit

    SQL injection vulnerability in view.php in Butterfly Organizer 2.0.0 and 2.0.1 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2008-6323 Public exploit

    SQL injection vulnerability in forummessages.cfm in CFMSource CF_Auction allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2008-6324 Public exploit

    SQL injection vulnerability in forummessages.cfm in CF_Forum allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2008-6317 Public exploit

    Directory traversal vulnerability in _conf/_php-core/common-tpl-vars.php in PHPmyGallery 1.5 beta allows remote attacke…

  • Unscored —
    CVE-2008-6318 Public exploit

    PHP remote file inclusion vulnerability in _conf/_php-core/common-tpl-vars.php in PHPmyGallery 1.5 beta allows remote a…

  • Unscored —
    CVE-2008-6308 Public exploit

    Multiple directory traversal vulnerabilities in Private Messaging System (PMS) 1.2.3 and earlier for PunBB allow remote…

  • Unscored —
    CVE-2008-6310 Public exploit

    SQL injection vulnerability in index.php in W3matter RevSense 1.0 allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2008-6309 Public exploit

    SQL injection vulnerability in index.php in W3matter AskPert allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2008-6306 Public exploit

    Cross-site scripting (XSS) vulnerability in signinform.php in Softbiz Classifieds Script allows remote attackers to inj…

  • Unscored —
    CVE-2008-6302 Public exploit

    TurnkeyForms Local Classifieds allows remote attackers to bypass authentication and gain administrative access via a di…

  • Unscored —
    CVE-2008-6305 Public exploit

    PHP remote file inclusion vulnerability in init.php in Free Directory Script 1.1.1, when register_globals is enabled, a…

  • Unscored —
    CVE-2008-6303 Public exploit

    SQL injection vulnerability in tourview.php in ToursManager allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2008-6307 Public exploit

    E-topbiz Link Back Checker 1 allows remote attackers to bypass authentication and gain administrative access by setting…

  • Unscored —
    CVE-2008-6294 Public exploit

    admin/Index.php in Acc Statistics 1.1 allows remote attackers to bypass authentication and gain administrative access b…

  • Unscored —
    CVE-2008-6297 Public exploit

    Cross-site scripting (XSS) vulnerability in order.php in DHCart allows remote attackers to inject arbitrary web script …