Archive
February 2009
Vulnerabilities first published in this month (UTC), newest first.
685 results · Feed
-
Unscored —
PreProjects Pre Courier and Cargo Business stores dbcourior.mdb under the web root with insufficient access control, wh…
-
Unscored —
PreProjects Pre E-Learning Portal stores db_elearning.mdb under the web root with insufficient access control, which al…
-
Unscored —
SQL injection vulnerability in ADbNewsSender before 1.5.2 allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —
PreProjects Pre Classified Listings stores pclasp.mdb under the web root with insufficient access control, which allows…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in World Recipe 2.11 allow remote attackers to inject arbitrary web…
-
Unscored —
Cross-site scripting (XSS) vulnerability in ADbNewsSender before 1.5.2 allows remote attackers to inject arbitrary web …
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in TangoCMS before 2.2.0 allow remote attackers to hijack th…
-
Unscored —
MetaCart Free stores metacart.mdb under the web root with insufficient access control, which allows remote attackers to…
-
Unscored —CVE-2008-6050 Public exploit
SQL injection vulnerability in the Tech Articles (com_tech_article) 1.0 component for Joomla! allows remote attackers t…
-
Unscored —
The SSL certificate setup program (genSslCert.sh) in Standards Based Linux Instrumentation for Manageability (SBLIM) sb…
-
Unscored —
Unspecified vulnerability in Tor before 0.2.0.33 has unspecified impact and remote attack vectors that trigger heap cor…
-
Unscored —
Untrusted search path vulnerability in trickle 1.07 allows local users to execute arbitrary code via a Trojan horse tri…
-
Unscored —
Cross-site scripting (XSS) vulnerability in RoundCube Webmail (roundcubemail) 0.2 stable allows remote attackers to inj…
-
Unscored —
The ProcessLogin function in class.auth.php in Interspire Shopping Cart (ISC) 4.0.1 Ultimate edition allows remote atta…
-
Unscored —
Unspecified vulnerability in VMware ESXi 3.5 before ESXe350-200901401-I-SG and ESX 3.5 before ESX350-200901401-SG allow…
-
Unscored —CVE-2009-0407 Public exploit
SQL injection vulnerability in admin/login.php in PHP-CMS Project 1 allows remote attackers to execute arbitrary SQL co…
-
Unscored —
SQL injection vulnerability in browsecats.php in E-Php CMS allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2009-0400 Public exploit
SQL injection vulnerability in blog.php in SocialEngine 3.06 trial allows remote attackers to execute arbitrary SQL com…
-
Unscored —
Unspecified vulnerability in WebAccess in Novell GroupWise 6.5, 7.0, 7.01, 7.02x, 7.03, 7.03HP1a, and 8.0 might allow r…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Bioinformatics htmLawed 1.1.3 and 1.1.4 allow remote attackers t…
-
Unscored —CVE-2009-0405 Public exploit
SQL injection vulnerability in articles.php in smartSite CMS 1.0 allows remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2009-0399 Public exploit
Chipmunk Blogger Script allows remote attackers to gain administrator privileges via a direct request to admin/reguser.…
-
Unscored —
Stack-based buffer overflow in Remote Control Server in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844 all…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in osCommerce 2.2 RC 2a allows remote attackers to hijack the authentic…
-
Unscored —CVE-2009-0409 Public exploit
SQL injection vulnerability in offline_auth.php in Max.Blog 1.0.6 and earlier, when magic_quotes_gpc is disabled, allow…
-
Unscored —CVE-2009-0410 Public exploit
Off-by-one error in the SMTP daemon in GroupWise Internet Agent (GWIA) in Novell GroupWise 6.5x, 7.0, 7.01, 7.02, 7.03,…
-
Unscored —CVE-2009-0406 Public exploit
SQL injection vulnerability in index.php in Community CMS 0.4 and earlier allows remote attackers to execute arbitrary …
-
Unscored —
Multiple buffer overflows in the torrent parsing implementation in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Bu…
-
Unscored —
SQL injection vulnerability in client/new_account.php in Domain Technologie Control (DTC) before 0.29.16 allows remote …
-
Unscored —
Google Chrome before 1.0.154.46 does not properly restrict access from web pages to the (1) Set-Cookie and (2) Set-Cook…
-
Unscored —
Cross-domain vulnerability in the V8 JavaScript engine in Google Chrome before 1.0.154.46 allows remote attackers to by…
-
Unscored —CVE-2009-0403 Public exploit
SQL injection vulnerability in admin/authenticate.php in Chipmunk Blogger Script allows remote attackers to execute arb…
-
Unscored —
SQL injection vulnerability in index.php in Arcadem Pro 2.700 through 2.802 allows remote attackers to execute arbitrar…
-
Unscored —CVE-2008-6032 Public exploit
SQL injection vulnerability in comments.php in WSN Links Free 4.0.34P allows remote attackers to execute arbitrary SQL …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in index.php in BLUEPAGE CMS 2.5 and earlier allow remote attackers…
-
Unscored —CVE-2008-6043 Public exploit
Multiple SQL injection vulnerabilities in PHP Pro Bid (PPB) 6.04 allow remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2008-6038 Public exploit
SQL injection vulnerability in index.php in MapCal 0.1 allows remote attackers to execute arbitrary SQL commands via th…
-
Unscored —CVE-2008-6036 Public exploit
PHP remote file inclusion vulnerability in main.inc.php in BaseBuilder 2.0.1 and earlier allows remote attackers to exe…
-
Unscored —CVE-2008-6031 Public exploit
SQL injection vulnerability in vote.php in WSN Links 2.22 and 2.23 allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2008-6034 Public exploit
Cross-site scripting (XSS) vulnerability in dispatch.php in Achievo 1.3.2 allows remote attackers to inject arbitrary w…