Archive
February 2009
Vulnerabilities first published in this month (UTC), newest first.
685 results · Feed
-
Unscored —CVE-2008-6078 Public exploit
SQL injection vulnerability in open.php in the Private Messaging (com_privmsg) component for Limbo CMS allows remote at…
-
Unscored —CVE-2008-6084 Public exploit
Unrestricted file upload vulnerability in pages/download.php in Iamma Simple Gallery 1.0 and 2.0 allows remote attacker…
-
Unscored —CVE-2008-6081 Public exploit
SQL injection vulnerability in contact.php in Simple Customer 1.2 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —
Integer overflow in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 20…
-
Unscored —CVE-2008-6077 Public exploit
SQL injection vulnerability in loudblog/ajax.php in LoudBlog 0.8.0a and earlier allows remote authenticated users to ex…
-
Unscored —
Directory traversal vulnerability in download.php in the ionFiles (com_ionfiles) 4.4.2 component for Joomla! allows rem…
-
Unscored —CVE-2008-6076 Public exploit
SQL injection vulnerability in the Daily Message (com_dailymessage) 1.0.3 component for Joomla! allows remote attackers…
-
Unscored —
Multiple unspecified vulnerabilities in GraphicsMagick before 1.1.14, and 1.2.x before 1.2.3, allow remote attackers to…
-
Unscored —
StorageCrypt 2.0.1 does not properly encrypt disks, which allows local users to obtain sensitive information via unspec…
-
Unscored —
SQL injection vulnerability in e107chat.php in the eChat plugin 4.2 for e107, when magic_quotes_gpc is disabled, allows…
-
Unscored —
Heap-based buffer overflow in the DecodeImage function in coders/pict.c in GraphicsMagick before 1.1.14, and 1.2.x befo…
-
Unscored —CVE-2008-6068 Public exploit
SQL injection vulnerability in the JoomlaDate (com_joomladate) component 1.2 for Joomla! allows remote attackers to exe…
-
Unscored —
Multiple heap-based buffer underflows in the ReadPALMImage function in coders/palm.c in GraphicsMagick before 1.2.3 all…
-
Unscored —CVE-2009-0461 Public exploit
Whole Hog Password Protect: Enhanced 1.x allows remote attackers to bypass authentication and obtain administrative acc…
-
Unscored —CVE-2009-0467 Public exploit
Cross-site scripting (XSS) vulnerability in proxy.html in Profense Web Application Firewall 2.6.2 and 2.6.3 allows remo…
-
Unscored —CVE-2009-0464 Public exploit
PHP remote file inclusion vulnerability in includes/header.php in Groone GBook 2.0 allows remote attackers to execute a…
-
Unscored —CVE-2009-0462 Public exploit
Multiple SQL injection vulnerabilities in customer_login_check.asp in ClickTech ClickCart 6.0 allow remote attackers to…
-
Unscored —CVE-2009-0459 Public exploit
Multiple SQL injection vulnerabilities in admin/login_submit.php in Whole Hog Password Protect: Enhanced 1.x allow remo…
-
Unscored —CVE-2009-0465 Public exploit
The SaveDoc method in the All_In_The_Box.AllBox ActiveX control in ALL_IN_THE_BOX.OCX in Synactis ALL In-The-Box Active…
-
Unscored —CVE-2009-0457 Public exploit
Multiple directory traversal vulnerabilities in AJA Portal 1.2 allow remote attackers to include and execute arbitrary …
-
Unscored —CVE-2009-0456 Public exploit
PHP remote file inclusion vulnerability in examples/example_clientside_javascript.php in patForms, as used in Sourdough…
-
Unscored —CVE-2009-0458 Public exploit
Multiple SQL injection vulnerabilities in admin/login_submit.php in Whole Hog Ware Support 1.x allow remote attackers t…
-
Unscored —CVE-2009-0460 Public exploit
Whole Hog Ware Support 1.x allows remote attackers to bypass authentication and obtain administrative access via an int…
-
Unscored —CVE-2009-0463 Public exploit
PHP remote file inclusion vulnerability in includes/header.php in Groone GLinks 2.1 allows remote attackers to execute …
-
Unscored —CVE-2009-0468 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in ajax.html in Profense Web Application Firewall 2.6.2 and …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Vivvo CMS before 4.1.1 allows remote attackers to inject arbitrary web scri…
-
Unscored —
Unspecified vulnerability in futomi's CGI Cafe Fulltext search CGI 1.1.2 allows remote attackers to gain administrative…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the AgaviWebRouting::gen(null) method in Agavi 0.11 before 0.11.6 and 1.0 b…
-
Unscored —CVE-2009-0453 Public exploit
Online Grades 3.2.4 allows remote attackers to obtain configuration information via a direct request to phpinfo.php, wh…
-
Unscored —CVE-2009-0443 Public exploit
Stack-based buffer overflow in Elecard AVC HD PLAYER 5.5.90116 allows remote attackers to execute arbitrary code via an…
-
Unscored —CVE-2009-0451 Public exploit
SQL injection vulnerability in Skalfa SkaLinks 1.5 allows remote attackers to execute arbitrary SQL commands via the Ad…
-
Unscored —CVE-2009-0452 Public exploit
Multiple SQL injection vulnerabilities in parents/login.php in Online Grades 3.2.4, when magic_quotes_gpc is disabled, …
-
Unscored —CVE-2009-0446 Public exploit
SQL injection vulnerability in photo.php in WEBalbum 2.4b allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2009-0449 Public exploit
Buffer overflow in klim5.sys in Kaspersky Anti-Virus for Workstations 6.0 and Anti-Virus 2008 allows local users to gai…
-
Unscored —CVE-2009-0448 Public exploit
Directory traversal vulnerability in admin/modules/aa/preview.php in Syntax Desktop 2.7 allows remote attackers to incl…
-
Unscored —CVE-2009-0441 Public exploit
PHP remote file inclusion vulnerability in skin_shop/standard/2_view_body/body_default.php in TECHNOTE 7.2, when regist…
-
Unscored —
Multiple SQL injection vulnerabilities in DMXReady Online Notebook Manager 1.1 allow remote attackers to execute arbitr…
-
Unscored —CVE-2009-0442 Public exploit
Directory traversal vulnerability in bbcode.php in PHPbbBook 1.3 and 1.3h allows remote attackers to include and execut…
-
Unscored —CVE-2009-0445 Public exploit
SQL injection vulnerability in index.php in Dreampics Gallery Builder allows remote attackers to execute arbitrary SQL …
-
Unscored —
Stack-based buffer overflow in BlazeVideo HDTV Player 3.5 and earlier allows remote attackers to execute arbitrary code…