Archive
February 2009
Vulnerabilities first published in this month (UTC), newest first.
393 results · Clear filters · Feed
-
Unscored —CVE-2009-0529 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in SnippetMaster Webpage Editor 2.2.2 allows remote attackers to …
-
Unscored —CVE-2009-0535 Public exploit
Directory traversal vulnerability in export.php in Thyme 1.3 and earlier, when register_globals is disabled, allows rem…
-
Unscored —CVE-2009-0534 Public exploit
SQL injection vulnerability in FlexCMS allows remote attackers to execute arbitrary SQL commands via the catId paramete…
-
Unscored —CVE-2009-0527 Public exploit
PHP remote file inclusion vulnerability in plugins/rss_importer_functions.php in AdaptCMS Lite 1.4 allows remote attack…
-
Unscored —CVE-2009-0528 Public exploit
SQL injection vulnerability in frame.php in Rhadrix If-CMS 2.07 and earlier allows remote attackers to execute arbitrar…
-
Unscored —CVE-2009-0531 Public exploit
SQL injection vulnerability in gallery/view.asp in A Better Member-Based ASP Photo Gallery before 1.2 allows remote att…
-
Unscored —CVE-2009-0526 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in AdaptCMS Lite 1.4 allow remote attackers to inject …
-
Unscored —CVE-2008-6111 Public exploit
SQL injection vulnerability in blog.php in NetArt Media Vlog System 1.1 allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2008-6119 Public exploit
Static code injection vulnerability in gooplecms/admin/account/action/editpass.php in Goople CMS 1.7 allows remote atta…
-
Unscored —CVE-2008-6114 Public exploit
SQL injection vulnerability in product_details.php in the Mytipper Zogo-shop 1.15.4 plugin for e107 allows remote attac…
-
Unscored —CVE-2008-6117 Public exploit
SQL injection vulnerability in homepage.php in PG Job Site Pro allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2008-6122 Public exploit
The web management interface in Netgear WGR614v9 allows remote attackers to cause a denial of service (crash) via a req…
-
Unscored —CVE-2008-6118 Public exploit
win/content/upload.php in Goople CMS 1.7 allows remote attackers to bypass authentication and gain administrative acces…
-
Unscored —CVE-2008-6116 Public exploit
SQL injection vulnerability in the EXtrovert Software Thyme (com_thyme) 1.0 component for Joomla! allows remote attacke…
-
Unscored —CVE-2008-6115 Public exploit
SQL injection vulnerability in directory.php in Prozilla Hosting Index allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2008-6112 Public exploit
Multiple directory traversal vulnerabilities in Ez Ringtone Manager allow remote attackers to read arbitrary files via …
-
Unscored —
Eval injection vulnerability in index.php in phpSlash 0.8.1.1 and earlier allows remote attackers to execute arbitrary …
-
Unscored —CVE-2009-0514 Public exploit
Multiple directory traversal vulnerabilities in WebFrame 0.76 allow remote attackers to include and execute arbitrary l…
-
Unscored —CVE-2009-0515 Public exploit
Directory traversal vulnerability in check_lang.php in Yet Another NOCC (YANOCC) 0.1.0 and earlier allows remote attack…
-
Unscored —CVE-2009-0516 Public exploit
SQL injection vulnerability in the classified page (classified.php) in BusinessSpace 1.2 and earlier allows remote atta…
-
Unscored —CVE-2009-0513 Public exploit
Multiple PHP remote file inclusion vulnerabilities in WebFrame 0.76 allow remote attackers to execute arbitrary PHP cod…
-
Unscored —CVE-2009-0455 Public exploit
Cross-site scripting (XSS) vulnerability in the anonymous comments feature in lib-comment.php in glFusion 1.1.0, 1.1.1,…
-
Unscored —
Microsoft Internet Explorer 7, when XHTML strict mode is used, allows remote attackers to execute arbitrary code via th…
-
Unscored —
Microsoft Internet Explorer 7 does not properly handle errors during attempted access to deleted objects, which allows …
-
Unscored —CVE-2008-6099 Public exploit
PHP remote file inclusion vulnerability in index.php in RPortal 1.1 and earlier allows remote attackers to execute arbi…
-
Unscored —CVE-2008-6103 Public exploit
PHP remote file inclusion vulnerability in index.php in A4Desk Event Calendar, when magic_quotes_gpc is disabled, allow…
-
Unscored —CVE-2008-6102 Public exploit
SQL injection vulnerability in ratelink.php in Link Trader Script allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2008-6101 Public exploit
SQL injection vulnerability in click.php in Adult Banner Exchange Website allows remote attackers to execute arbitrary …
-
Unscored —CVE-2008-6100 Public exploit
Multiple SQL injection vulnerabilities in Discussion Forums 2k 3.3, when magic_quotes_gpc is disabled, allow remote att…
-
Unscored —CVE-2008-6104 Public exploit
SQL injection vulnerability in A4Desk PHP Event Calendar allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2009-0491 Public exploit
Stack-based buffer overflow in Elecard MPEG Player 5.5 build 15884.081218 allows remote attackers to execute arbitrary …
-
Unscored —CVE-2009-0497 Public exploit
Directory traversal vulnerability in log.jsp in Ignite Realtime Openfire 3.6.2 allows remote attackers to read arbitrar…
-
Unscored —
Stack-based buffer overflow in the String_parse::get_nonspace_quoted function in lib-src/allegro/strparse.cpp in Audaci…
-
Unscored —CVE-2009-0496 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Ignite Realtime Openfire 3.6.2 allow remote attackers to inject …
-
Unscored —CVE-2009-0498 Public exploit
Virtual GuestBook (vgbook) 2.1 stores sensitive information under the web root with insufficient access control, which …
-
Unscored —CVE-2009-0494 Public exploit
SQL injection vulnerability in the Portfol (com_portfol) 1.2 component for Joomla! allows remote attackers to execute a…
-
Unscored —CVE-2009-0493 Public exploit
SQL injection vulnerability in login.php in IT!CMS 2.1a and earlier allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2009-0495 Public exploit
PHP remote file inclusion vulnerability in include/define.php in REALTOR 747 4.11 allows remote attackers to execute ar…
-
Unscored —CVE-2008-6093 Public exploit
SQL injection vulnerability in index.php in Noname CMS 1.0, when magic_quotes_gpc is disabled, allows remote attackers …
-
Unscored —CVE-2008-6091 Public exploit
SQL injection vulnerability in plugins.php in BMForum 5.6, when magic_quotes_gpc is disabled, allows remote attackers t…