Archive
February 2009
Vulnerabilities first published in this month (UTC), newest first.
393 results · Clear filters · Feed
-
Unscored —CVE-2008-6094 Public exploit
Cross-site scripting (XSS) vulnerability in user.do in Celoxis Technologies Celoxis allows remote attackers to inject a…
-
Unscored —CVE-2008-6097 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in WikyBlog before 1.7.1 allow remote attackers to inject arbitrary…
-
Unscored —CVE-2008-6092 Public exploit
phpscripts Ranking Script allows remote attackers to bypass authentication and gain administrative access by sending an…
-
Unscored —CVE-2009-0479 Public exploit
Multiple SQL injection vulnerabilities in admin/admin_login.php in Online Grades 3.2.4 allow remote attackers to execut…
-
Unscored —
Squid 2.7 to 2.7.STABLE5, 3.0 to 3.0.STABLE12, and 3.1 to 3.1.0.4 allows remote attackers to cause a denial of service …
-
Unscored —
Stack-based buffer overflow in MultiMedia Soft AdjMmsEng.dll 7.11.1.0 and 7.11.2.7, as distributed in multiple MultiMed…
-
Unscored —CVE-2008-6087 Public exploit
Cross-site scripting (XSS) vulnerability in topic.php in Camera Life 2.6.2b4 allows remote attackers to inject arbitrar…
-
Unscored —CVE-2008-6088 Public exploit
SQL injection vulnerability in the Joomtracker (com_joomtracker) 1.01 module for Joomla! allows remote attackers to exe…
-
Unscored —CVE-2008-6090 Public exploit
Directory traversal vulnerability in members.php in ScriptsEz Mini Hosting Panel allows remote attackers to read arbitr…
-
Unscored —CVE-2008-6086 Public exploit
SQL injection vulnerability in album.php in Camera Life 2.6.2b4 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2008-6089 Public exploit
Directory traversal vulnerability in main.php in ScriptsEz Easy Image Downloader allows remote attackers to read arbitr…
-
Unscored —
Open redirect vulnerability in the web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge…
-
Unscored —CVE-2009-0470 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the HTTP server in Cisco IOS 12.4(23) allow remote attackers to …
-
Unscored —CVE-2008-6075 Public exploit
SQL injection vulnerability in aspkat.asp in Bahar Download Script 2.0 allows remote attackers to execute arbitrary SQL…
-
Unscored —
Titan FTP Server 6.26 build 630 allows remote attackers to cause a denial of service (CPU consumption) via the SITE WHO…
-
Unscored —CVE-2008-6074 Public exploit
Directory traversal vulnerability in frame.php in phpcrs 2.06 and earlier, when magic_quotes_gpc is disabled, allows re…
-
Unscored —CVE-2008-6083 Public exploit
Directory traversal vulnerability in header.php in TXTshop beta 1.0 allows remote attackers to include and execute arbi…
-
Unscored —CVE-2008-6078 Public exploit
SQL injection vulnerability in open.php in the Private Messaging (com_privmsg) component for Limbo CMS allows remote at…
-
Unscored —CVE-2008-6084 Public exploit
Unrestricted file upload vulnerability in pages/download.php in Iamma Simple Gallery 1.0 and 2.0 allows remote attacker…
-
Unscored —CVE-2008-6081 Public exploit
SQL injection vulnerability in contact.php in Simple Customer 1.2 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2008-6077 Public exploit
SQL injection vulnerability in loudblog/ajax.php in LoudBlog 0.8.0a and earlier allows remote authenticated users to ex…
-
Unscored —
Directory traversal vulnerability in download.php in the ionFiles (com_ionfiles) 4.4.2 component for Joomla! allows rem…
-
Unscored —CVE-2008-6076 Public exploit
SQL injection vulnerability in the Daily Message (com_dailymessage) 1.0.3 component for Joomla! allows remote attackers…
-
Unscored —CVE-2008-6068 Public exploit
SQL injection vulnerability in the JoomlaDate (com_joomladate) component 1.2 for Joomla! allows remote attackers to exe…
-
Unscored —CVE-2009-0461 Public exploit
Whole Hog Password Protect: Enhanced 1.x allows remote attackers to bypass authentication and obtain administrative acc…
-
Unscored —CVE-2009-0467 Public exploit
Cross-site scripting (XSS) vulnerability in proxy.html in Profense Web Application Firewall 2.6.2 and 2.6.3 allows remo…
-
Unscored —CVE-2009-0464 Public exploit
PHP remote file inclusion vulnerability in includes/header.php in Groone GBook 2.0 allows remote attackers to execute a…
-
Unscored —CVE-2009-0462 Public exploit
Multiple SQL injection vulnerabilities in customer_login_check.asp in ClickTech ClickCart 6.0 allow remote attackers to…
-
Unscored —CVE-2009-0459 Public exploit
Multiple SQL injection vulnerabilities in admin/login_submit.php in Whole Hog Password Protect: Enhanced 1.x allow remo…
-
Unscored —CVE-2009-0465 Public exploit
The SaveDoc method in the All_In_The_Box.AllBox ActiveX control in ALL_IN_THE_BOX.OCX in Synactis ALL In-The-Box Active…
-
Unscored —CVE-2009-0457 Public exploit
Multiple directory traversal vulnerabilities in AJA Portal 1.2 allow remote attackers to include and execute arbitrary …
-
Unscored —CVE-2009-0456 Public exploit
PHP remote file inclusion vulnerability in examples/example_clientside_javascript.php in patForms, as used in Sourdough…
-
Unscored —CVE-2009-0458 Public exploit
Multiple SQL injection vulnerabilities in admin/login_submit.php in Whole Hog Ware Support 1.x allow remote attackers t…
-
Unscored —CVE-2009-0460 Public exploit
Whole Hog Ware Support 1.x allows remote attackers to bypass authentication and obtain administrative access via an int…
-
Unscored —CVE-2009-0463 Public exploit
PHP remote file inclusion vulnerability in includes/header.php in Groone GLinks 2.1 allows remote attackers to execute …
-
Unscored —CVE-2009-0468 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in ajax.html in Profense Web Application Firewall 2.6.2 and …
-
Unscored —CVE-2009-0453 Public exploit
Online Grades 3.2.4 allows remote attackers to obtain configuration information via a direct request to phpinfo.php, wh…
-
Unscored —CVE-2009-0443 Public exploit
Stack-based buffer overflow in Elecard AVC HD PLAYER 5.5.90116 allows remote attackers to execute arbitrary code via an…
-
Unscored —CVE-2009-0451 Public exploit
SQL injection vulnerability in Skalfa SkaLinks 1.5 allows remote attackers to execute arbitrary SQL commands via the Ad…
-
Unscored —CVE-2009-0452 Public exploit
Multiple SQL injection vulnerabilities in parents/login.php in Online Grades 3.2.4, when magic_quotes_gpc is disabled, …