Archive
February 2009
Vulnerabilities first published in this month (UTC), newest first.
393 results · Clear filters · Feed
-
Unscored —CVE-2008-6196 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Philippe CROCHAT EasySite 2.0 allow remote attackers to execute a…
-
Unscored —CVE-2008-6198 Public exploit
SQL injection vulnerability in pages.php in Custom Pages 1.0 plugin for MyBulletinBoard (MyBB) allows remote attackers …
-
Unscored —CVE-2008-6199 Public exploit
2532designs 2532|Gigs 1.2.2 and earlier allows remote attackers to trigger a backup and obtain sensitive information vi…
-
Unscored —CVE-2008-6195 Public exploit
Directory traversal vulnerability in the PXE TFTP Service (PXEMTFTP.exe) in LANDesk Management Suite (LDMS) 8.80.1.1 an…
-
Unscored —CVE-2008-6197 Public exploit
SQL injection vulnerability in index.php in the galerie module for KwsPHP 1.3.456 allows remote attackers to execute ar…
-
Unscored —CVE-2008-6193 Public exploit
Sam Crew MyBlog stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain s…
-
Unscored —CVE-2008-6180 Public exploit
SQL injection vulnerability in system/nlb_user.class.php in NewLife Blogger 3.0 and earlier, and possibly 3.3.1, allows…
-
Unscored —CVE-2008-6186 Public exploit
Stack-based buffer overflow in RaidenFTPD 2.4 build 3620 allows remote authenticated users to cause a denial of service…
-
Unscored —CVE-2008-6181 Public exploit
SQL injection vulnerability in the Mad4Joomla Mailforms (com_mad4joomla) component before 1.1.8.2 for Joomla! allows re…
-
Unscored —CVE-2008-6182 Public exploit
SQL injection vulnerability in the Ignite Gallery (com_ignitegallery) component 0.8.0 through 0.8.3 for Joomla! allows …
-
Unscored —CVE-2008-6179 Public exploit
SQL injection vulnerability in sug_cat.php in IndexScript 3.0 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2008-6188 Public exploit
SQL injection vulnerability in people/editprofile.php in Gforge 4.6 rc1 and earlier allows remote attackers to execute …
-
Unscored —CVE-2008-6187 Public exploit
SQL injection vulnerability in frs/shownotes.php in Gforge 4.5.19 and earlier allows remote attackers to execute arbitr…
-
Unscored —CVE-2008-6185 Public exploit
NoticeWare Email Server NG 5.1.2.2 allows remote attackers to cause a denial of service (crash) via multiple POP3 reque…
-
Unscored —CVE-2008-6189 Public exploit
SQL injection vulnerability in GForge 4.5.19 allows remote attackers to execute arbitrary SQL commands via the offset p…
-
Unscored —CVE-2008-6183 Public exploit
Multiple directory traversal vulnerabilities in index.php in My PHP Indexer 1.0 allow remote attackers to read arbitrar…
-
Unscored —CVE-2008-6184 Public exploit
SQL injection vulnerability in the OwnBiblio (com_ownbiblio) component 1.5.3 for Joomla! allows remote attackers to exe…
-
Unscored —CVE-2008-6173 Public exploit
Cross-site scripting (XSS) vulnerability in fullscreen.php in ClipShare Pro 4.0 allows remote attackers to inject arbit…
-
Unscored —
Directory traversal vulnerability in captcha/captcha_image.php in the RWCards (com_rwcards) 3.0.11 component for Joomla…
-
Unscored —CVE-2008-6174 Public exploit
Cross-site scripting (XSS) vulnerability in admin/postlister/index.php in Jetbox CMS 2.1 allows remote attackers to inj…
-
Unscored —CVE-2008-6178 Public exploit
Unrestricted file upload vulnerability in editor/filemanager/browser/default/connectors/php/connector.php in FCKeditor …
-
Unscored —CVE-2008-6175 Public exploit
SilverSHielD 1.0.2.34 allows remote attackers to cause a denial of service (application crash) via a crafted argument t…
-
Unscored —CVE-2008-6177 Public exploit
Multiple directory traversal vulnerabilities in LightBlog 9.8, when magic_quotes_gpc is disabled, allow remote attacker…
-
Unscored —CVE-2008-6167 Public exploit
Directory traversal vulnerability in search.php in miniPortail 2.2 and earlier allows remote attackers to include and e…
-
Unscored —CVE-2008-6168 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in miniPortail 2.2 and earlier allows remote attackers to inject…
-
Unscored —CVE-2008-6165 Public exploit
SQL injection vulnerability in gestion.php in CSPartner 0.1, when magic_quotes_gpc is disabled, allows remote attackers…
-
Unscored —CVE-2008-6166 Public exploit
SQL injection vulnerability in the KBase (com_kbase) 1.2 component for Joomla! allows remote attackers to execute arbit…
-
Unscored —CVE-2009-0645 Public exploit
Directory traversal vulnerability in index.php in Jaws 0.8.8 allows remote authenticated users to read arbitrary files …
-
Unscored —CVE-2009-0646 Public exploit
Multiple SQL injection vulnerabilities in 4Site CMS 2.6 and earlier allow remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2008-6164 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in DreamCost HostAdmin 3.1.1 allows remote attackers to inject ar…
-
Unscored —CVE-2008-6163 Public exploit
SQL injection vulnerability in www/delivery/ac.php in OpenX 2.6.1 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2008-6162 Public exploit
Bux.to Clone script allows remote attackers to bypass authentication and gain administrative access by setting the logg…
-
Unscored —CVE-2009-0641 Public exploit
sys_term.c in telnetd in FreeBSD 7.0-RELEASE and other 7.x versions deletes dangerous environment variables with a meth…
-
Unscored —CVE-2009-0640 Public exploit
Directory traversal vulnerability in the administrative web server in Swann DVR4-SecuraNet allows remote attackers to r…
-
Unscored —CVE-2009-0643 Public exploit
Static code injection vulnerability in post.php in Simple PHP News 1.0 final allows remote attackers to inject arbitrar…
-
Unscored —CVE-2009-0639 Public exploit
PHP remote file inclusion vulnerability in moduli/libri/index.php in phpyabs 0.1.2 allows remote attackers to execute a…
-
Unscored —CVE-2008-6157 Public exploit
SepCity Classified Ads stores the admin password in cleartext in data/classifieds.mdb, which allows context-dependent a…
-
Unscored —CVE-2008-6158 Public exploit
Multiple unspecified vulnerabilities in the admin backend in w3b>cms (aka w3blabor CMS) before 3.2.0 have unknown impac…
-
Unscored —CVE-2009-0611 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in qfsearch/AdminServlet in QuickFinder Server in Novell Open Enter…
-
Unscored —CVE-2009-0610 Public exploit
Multiple static code injection vulnerabilities in post.php in Simple PHP News 1.0 final allow remote attackers to injec…