Archive
February 2009
Vulnerabilities first published in this month (UTC), newest first.
393 results · Clear filters · Feed
-
Unscored —CVE-2009-0446 Public exploit
SQL injection vulnerability in photo.php in WEBalbum 2.4b allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2009-0449 Public exploit
Buffer overflow in klim5.sys in Kaspersky Anti-Virus for Workstations 6.0 and Anti-Virus 2008 allows local users to gai…
-
Unscored —CVE-2009-0448 Public exploit
Directory traversal vulnerability in admin/modules/aa/preview.php in Syntax Desktop 2.7 allows remote attackers to incl…
-
Unscored —CVE-2009-0441 Public exploit
PHP remote file inclusion vulnerability in skin_shop/standard/2_view_body/body_default.php in TECHNOTE 7.2, when regist…
-
Unscored —CVE-2009-0442 Public exploit
Directory traversal vulnerability in bbcode.php in PHPbbBook 1.3 and 1.3h allows remote attackers to include and execut…
-
Unscored —CVE-2009-0445 Public exploit
SQL injection vulnerability in index.php in Dreampics Gallery Builder allows remote attackers to execute arbitrary SQL …
-
Unscored —
Stack-based buffer overflow in BlazeVideo HDTV Player 3.5 and earlier allows remote attackers to execute arbitrary code…
-
Unscored —CVE-2009-0444 Public exploit
Multiple PHP remote file inclusion vulnerabilities in GRBoard 1.8, when register_globals is enabled and magic_quotes_gp…
-
Unscored —CVE-2009-0447 Public exploit
Multiple SQL injection vulnerabilities in default.asp in MyDesign Sayac 2.0 allow remote attackers to execute arbitrary…
-
Unscored —CVE-2008-6066 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Meet#Web 0.8 allow remote attackers to execute arbitrary PHP code…
-
Unscored —CVE-2008-6065 Public exploit
Oracle Database Server 10.1, 10.2, and 11g grants directory WRITE permissions for arbitrary pathnames that are aliased …
-
Unscored —CVE-2008-6064 Public exploit
Multiple SQL injection vulnerabilities in DomPHP 0.81 allow remote attackers to execute arbitrary SQL commands via the …
-
Unscored —CVE-2008-6061 Public exploit
Cross-site scripting (XSS) vulnerability in ActionScript in arbitrary Shockwave Flash (SWF) controller files created by…
-
Unscored —CVE-2008-6060 Public exploit
Cross-site scripting (XSS) vulnerability in ActionScript in arbitrary Shockwave Flash (SWF) files created by InfoSoft F…
-
Unscored —CVE-2009-0429 Public exploit
Multiple SQL injection vulnerabilities in Active Bids allow remote attackers to execute arbitrary SQL commands via the …
-
Unscored —CVE-2009-0431 Public exploit
SQL injection vulnerability in Default.asp in LinksPro Standard Edition allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2009-0422 Public exploit
Dynamic variable evaluation vulnerability in lists/admin.php in phpList 2.10.8 and earlier, when register_globals is di…
-
Unscored —CVE-2009-0425 Public exploit
SQL injection vulnerability in index.php in Blue Eye CMS 1.0.0 and earlier allows remote attackers to execute arbitrary…
-
Unscored —CVE-2009-0426 Public exploit
SQL injection vulnerability in CategoryManager/upload_image_category.asp in DMXReady Classified Listings Manager 1.1 an…
-
Unscored —CVE-2009-0423 Public exploit
Directory traversal vulnerability in index.php in Php Photo Album (PHPPA) 0.8 BETA allows remote attackers to include a…
-
Unscored —CVE-2009-0427 Public exploit
SQL injection vulnerability in CategoryManager/upload_image_category.asp in DMXReady Member Directory Manager 1.1 and e…
-
Unscored —CVE-2009-0430 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Active Bids allow remote attackers to inject arbitrary web scrip…
-
Unscored —CVE-2009-0420 Public exploit
SQL injection vulnerability in the RD-Autos (com_rdautos) 1.5.5 Stable component for Joomla! allows remote attackers to…
-
Unscored —CVE-2009-0428 Public exploit
SQL injection vulnerability in CategoryManager/upload_image_category.asp in DMXReady Secure Document Library 1.1 and ea…
-
Unscored —CVE-2009-0421 Public exploit
SQL injection vulnerability in the Eventing (com_eventing) 1.6.x component for Joomla! allows remote attackers to execu…
-
Unscored —
Multiple integer signedness errors in (1) UltraVNC 1.0.2 and 1.0.5 and (2) TightVnc 1.3.9 allow remote VNC servers to c…
-
Unscored —CVE-2008-6057 Public exploit
Doug Luxem Liberum Help Desk 0.97.3 stores db/helpdesk2000.mdb under the web root with insufficient access control, whi…
-
Unscored —CVE-2008-6050 Public exploit
SQL injection vulnerability in the Tech Articles (com_tech_article) 1.0 component for Joomla! allows remote attackers t…
-
Unscored —CVE-2009-0407 Public exploit
SQL injection vulnerability in admin/login.php in PHP-CMS Project 1 allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2009-0400 Public exploit
SQL injection vulnerability in blog.php in SocialEngine 3.06 trial allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2009-0405 Public exploit
SQL injection vulnerability in articles.php in smartSite CMS 1.0 allows remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2009-0399 Public exploit
Chipmunk Blogger Script allows remote attackers to gain administrator privileges via a direct request to admin/reguser.…
-
Unscored —
Stack-based buffer overflow in Remote Control Server in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844 all…
-
Unscored —CVE-2009-0409 Public exploit
SQL injection vulnerability in offline_auth.php in Max.Blog 1.0.6 and earlier, when magic_quotes_gpc is disabled, allow…
-
Unscored —CVE-2009-0410 Public exploit
Off-by-one error in the SMTP daemon in GroupWise Internet Agent (GWIA) in Novell GroupWise 6.5x, 7.0, 7.01, 7.02, 7.03,…
-
Unscored —CVE-2009-0406 Public exploit
SQL injection vulnerability in index.php in Community CMS 0.4 and earlier allows remote attackers to execute arbitrary …
-
Unscored —
Multiple buffer overflows in the torrent parsing implementation in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Bu…
-
Unscored —CVE-2009-0403 Public exploit
SQL injection vulnerability in admin/authenticate.php in Chipmunk Blogger Script allows remote attackers to execute arb…
-
Unscored —CVE-2008-6032 Public exploit
SQL injection vulnerability in comments.php in WSN Links Free 4.0.34P allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2008-6043 Public exploit
Multiple SQL injection vulnerabilities in PHP Pro Bid (PPB) 6.04 allow remote attackers to execute arbitrary SQL comman…