Archive
February 2009
Vulnerabilities first published in this month (UTC), newest first.
393 results · Clear filters · Feed
-
Unscored —CVE-2008-6293 Public exploit
admin/Index.php in Acc Real Estate 4.0 allows remote attackers to bypass authentication and gain administrative access …
-
Unscored —CVE-2008-6289 Public exploit
SQL injection vulnerability in cityview.php in Tours Manager 1.0 allows remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2008-6300 Public exploit
Galatolo WebManager 1.3a allows remote attackers to bypass authentication and gain administrative access by setting the…
-
Unscored —CVE-2008-6292 Public exploit
Acc Autos 4.0 allows remote attackers to bypass authentication and gain administrative access by setting the (1) userna…
-
Unscored —CVE-2008-6296 Public exploit
admin.php in Maran PHP Shop allows remote attackers to bypass authentication and gain administrative access by setting …
-
Unscored —CVE-2008-6301 Public exploit
SQL injection vulnerability in shoutbox_view.php in the Small ShoutBox module 1.4 for phpBB allows remote attackers to …
-
Unscored —CVE-2008-6290 Public exploit
Directory traversal vulnerability in includefile.php in nicLOR Sito, when register_globals is enabled or magic_quotes_g…
-
Unscored —CVE-2008-6291 Public exploit
Acc PHP eMail 1.1 allows remote attackers to bypass authentication and gain administrative access by setting the NEWSLE…
-
Unscored —
Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 does not properly remove references to destroyed obj…
-
Unscored —
Stack-based buffer overflow in Orbit Downloader 2.8.2 and 2.8.3, and possibly other versions before 2.8.5, allows remot…
-
Unscored —CVE-2008-6277 Public exploit
SQL injection vulnerability in product.php in RakhiSoftware Price Comparison Script (aka Shopping Cart) allows remote a…
-
Unscored —CVE-2008-6279 Public exploit
RakhiSoftware Price Comparison Script (aka Shopping Cart) allows remote attackers to obtain sensitive information via a…
-
Unscored —CVE-2008-6288 Public exploit
Directory traversal vulnerability in download.php in Interface Medien ibase 2.03 and earlier allows remote attackers to…
-
Unscored —CVE-2008-6287 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Broadcast Machine 0.1 allow remote attackers to execute arbitrary…
-
Unscored —CVE-2008-6274 Public exploit
Multiple SQL injection vulnerabilities in index.php in FamilyProject 2.0 allow remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2008-6280 Public exploit
Cross-site scripting (XSS) vulnerability in apply.cgi on the Linksys WRT160N allows remote attackers to inject arbitrar…
-
Unscored —CVE-2008-6281 Public exploit
SQL injection vulnerability in index.php in Bluo CMS 1.2 allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2008-6282 Public exploit
SQL injection vulnerability in engine/users/users_edit_pub.inc in CMS Ortus 1.13 and earlier allows remote authenticate…
-
Unscored —CVE-2008-6278 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in product.php in RakhiSoftware Price Comparison Script (aka Shoppi…
-
Unscored —CVE-2008-6284 Public exploit
SQL injection vulnerability in edit.php in Z1Exchange 1.0 allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2008-6285 Public exploit
SQL injection vulnerability in index.php in PHP TV Portal 2.0 and earlier allows remote attackers to execute arbitrary …
-
Unscored —CVE-2008-6286 Public exploit
Multiple SQL injection vulnerabilities in SubscriberStart.asp in Active Newsletter 4.3 allow remote attackers to execut…
-
Unscored —CVE-2009-0739 Public exploit
SQL injection vulnerability in login.php in MyNews 0.10 allows remote attackers to execute arbitrary SQL commands via t…
-
Unscored —CVE-2009-0741 Public exploit
SQL injection vulnerability in Login.asp in Craft Silicon Banking@Home 2.1 and earlier allows remote attackers to execu…
-
Unscored —CVE-2009-0735 Public exploit
Directory traversal vulnerability in lib/classes/message_class.php in Papoo CMS 3.6, when register_globals is enabled a…
-
Unscored —CVE-2009-0734 Public exploit
Heap-based buffer overflow in MultimediaPlayer.exe 6.86.240.7 in Nokia PC Suite 6.86.9.3 allows remote attackers to exe…
-
Unscored —CVE-2009-0740 Public exploit
SQL injection vulnerability in login.php in BlueBird Prelease allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2009-0738 Public exploit
SQL injection vulnerability in login.php in Auth Php 1.0 allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2008-6272 Public exploit
SQL injection vulnerability in admin/index.php in Dragan Mitic Apoll 0.7 beta and 0.7.5 allows remote attackers to exec…
-
Unscored —CVE-2009-0541 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Magento 1.2.0 and 1.2.1.1 allow remote attackers to inject arbit…
-
Unscored —CVE-2008-6269 Public exploit
Joovili 3.1.4 allows remote attackers to bypass authentication and gain privileges as other users, including the admini…
-
Unscored —CVE-2008-6267 Public exploit
Cross-site scripting (XSS) vulnerability in detail.php in Multi Languages WebShop Online 1.02 allows remote attackers t…
-
Unscored —CVE-2008-6270 Public exploit
SQL injection vulnerability in admin/index.php in Dragan Mitic Apoll 0.7 beta and 0.7.5 allows remote attackers to exec…
-
Unscored —CVE-2008-6268 Public exploit
SQL injection vulnerability in detail.php in WEBBDOMAIN Multi Languages WebShop Online 1.02 allows remote attackers to …
-
Unscored —CVE-2008-6271 Public exploit
Directory traversal vulnerability in index.php in TBmnetCMS 1.0, when magic_quotes_gpc is disabled, allows remote attac…
-
Unscored —CVE-2008-6266 Public exploit
SQL injection vulnerability in links.php in Appalachian State University phpWebSite allows remote attackers to execute …
-
Unscored —CVE-2009-0727 Public exploit
SQL injection vulnerability in jobdetails.php in taifajobs 1.0 and earlier allows remote attackers to execute arbitrary…
-
Unscored —CVE-2009-0728 Public exploit
SQL injection vulnerability in the My_eGallery module for MAXdev MDPro (MD-Pro) and Postnuke allows remote attackers to…
-
Unscored —CVE-2009-0726 Public exploit
SQL injection vulnerability in the GigCalendar (com_gigcal) component 1.0 for Mambo and Joomla! allows remote attackers…
-
Unscored —CVE-2009-0731 Public exploit
Directory traversal vulnerability in pages/play.php in Free Arcade Script 1.0 allows remote attackers to include and ex…