Archive
February 2009
Vulnerabilities first published in this month (UTC), newest first.
685 results · Feed
-
Unscored —CVE-2008-6237 Public exploit
SQL injection vulnerability in software-description.php in Scripts For Sites (SFS) Hotscripts-like Site allows remote a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in archive/savedqueries/savequeryfinish.html in OpenEdit Digital Asset Managem…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in OpenEdit Digital Asset Management (DAM) before 5.2014 allows remote …
-
Unscored —CVE-2009-0699 Public exploit
Cross-site scripting (XSS) vulnerability in pagesUTF8/auftrag_allgemeinauftrag.jsp in Plunet BusinessManager 4.1 and ea…
-
Unscored —CVE-2009-0704 Public exploit
SQL injection vulnerability in search.php in WSN Guest 1.23 allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2009-0705 Public exploit
SQL injection vulnerability in news.php in PowerScripts PowerNews 2.5.4, when magic_quotes_gpc is disabled, allows remo…
-
Unscored —CVE-2009-0707 Public exploit
SQL injection vulnerability in admin/index.php in PowerClan 1.14a allows remote attackers to execute arbitrary SQL comm…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in SemanticScuttle before 0.91 allow remote attackers to (1)…
-
Unscored —
Integer overflow in the 4xm demuxer (demuxers/demux_4xm.c) in xine-lib 1.1.16.1 allows remote attackers to cause a deni…
-
Unscored —CVE-2009-0711 Public exploit
filter.php in PHPFootball 1.6 and earlier allows remote attackers to retrieve password hashes via a request with an Acc…
-
Unscored —CVE-2009-0709 Public exploit
SQL injection vulnerability in login.php in PHPFootball 1.6 allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2009-0710 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in PHPFootball 1.6 allow remote attackers to inject arbitrary web s…
-
Unscored —CVE-2009-0701 Public exploit
Multiple PHP remote file inclusion vulnerabilities in index.php in Cybershade CMS 0.2b, when register_globals is enable…
-
Unscored —CVE-2009-0702 Public exploit
SQL injection vulnerability in the Phoca Documentation (com_phocadocumentation) component for Joomla! allows remote att…
-
Unscored —CVE-2009-0700 Public exploit
Plunet BusinessManager 4.1 and earlier allows remote authenticated users to bypass access restrictions and (1) read sen…
-
Unscored —CVE-2009-0703 Public exploit
SQL injection vulnerability in bview.asp in ASPThai.Net Webboard 6.0 allows remote attackers to execute arbitrary SQL c…
-
Unscored —
SQL injection vulnerability in the Simple Review (com_simple_review) component 1.3.5 for Joomla! and Mambo allows remot…
-
Unscored —CVE-2009-0680 Public exploit
cgi-bin/welcome/VPN_only in the web interface in Netgear SSL312 allows remote attackers to cause a denial of service (d…
-
Unscored —
The skfp_ioctl function in drivers/net/skfp/skfddi.c in the Linux kernel before 2.6.28.6 permits SKFP_CLR_STATS request…
-
Unscored —
IBM WebSphere Partner Gateway (WPG) 6.0.0 through 6.0.0.7 does not properly handle failures of signature verification, …
-
Unscored —CVE-2009-0672 Public exploit
SQL injection vulnerability in the Resend_Email module in Raven Web Services RavenNuke 2.30 allows remote authenticated…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Your Account module in RavenNuke 2.30 allows remote attackers to inject…
-
Unscored —CVE-2009-0673 Public exploit
Eval injection vulnerability in the Custom Fields feature in the Your Account module in Raven Web Services RavenNuke 2.…
-
Unscored —CVE-2009-0674 Public exploit
images/captcha.php in Raven Web Services RavenNuke 2.30, when register_globals and display_errors are enabled, allows r…
-
Unscored —
The PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in pngcrush and other applicatio…
-
Unscored —CVE-2009-0676 Public exploit
The sock_getsockopt function in net/core/sock.c in the Linux kernel before 2.6.28.6 does not initialize a certain struc…
-
Unscored —CVE-2009-0677 Public exploit
avatarlist.php in the Your Account module, reached through modules.php, in Raven Web Services RavenNuke 2.30 allows rem…
-
Unscored —CVE-2009-0678 Public exploit
images/captcha.php in RavenNuke 2.30 allows remote attackers to obtain sensitive information via an aFonts array parame…
-
Unscored —
The Netrw plugin (netrw.vim) in Vim 7.0 and 7.1 allows user-assisted attackers to execute arbitrary commands via shell …
-
Unscored —CVE-2008-6236 Public exploit
SQL injection vulnerability in login.php in Simple Document Management System (SDMS) 1.1.5 and 1.1.4, and possibly earl…
-
Unscored —
The shellescape function in Vim 7.0 through 7.2, including 7.2a.10, allows user-assisted attackers to execute arbitrary…
-
Unscored —
The shellescape function in Vim 7.0 through 7.2, including 7.2a.10, allows user-assisted attackers to execute arbitrary…
-
Unscored —CVE-2008-3076 Public exploit
The Netrw plugin 125 in netrw.vim in Vim 7.2a.10 allows user-assisted attackers to execute arbitrary code via shell met…
-
Unscored —CVE-2008-6234 Public exploit
SQL injection vulnerability in the com_musica module in Joomla! and Mambo allows remote attackers to execute arbitrary …
-
Unscored —CVE-2008-6228 Public exploit
Pre Multi-Vendor Shopping Malls allows remote attackers to bypass authentication and gain administrative access by sett…
-
Unscored —CVE-2008-6226 Public exploit
SQL injection vulnerability in moreinfo.php in Pre Projects PHP Auto Listings Script, when magic_quotes_gpc is disabled…
-
Unscored —CVE-2008-6230 Public exploit
SQL injection vulnerability in Tour.php in Pre Projects Pre Podcast Portal allows remote attackers to execute arbitrary…
-
Unscored —CVE-2008-6233 Public exploit
SQL injection vulnerability in index.php in Five Dollar Scripts Drinks script allows remote attackers to execute arbitr…
-
Unscored —CVE-2008-6223 Public exploit
PHP remote file inclusion vulnerability in visualizza.php in Way Of The Warrior (WOTW) 5.0 and earlier allows remote at…
-
Unscored —CVE-2008-6227 Public exploit
SQL injection vulnerability in buyer_detail.php in Pre Multi-Vendor Shopping Malls allows remote attackers to execute a…