Archive
2 March 2009
Vulnerabilities first published on this day (UTC), newest first.
42 results · Clear filters · Feed
-
Unscored —CVE-2009-0750 Public exploit
SQL injection vulnerability in login.php in the smNews example script for txtSQL 2.2 Final allows remote attackers to e…
-
Unscored —
Yaws before 1.80 allows remote attackers to cause a denial of service (memory consumption and crash) via a request with…
-
Unscored —CVE-2009-0368 Public exploit
OpenSC before 0.11.7 allows physically proximate attackers to bypass intended PIN requirements and read private data ob…
-
Unscored —CVE-2008-6380 Public exploit
SQL injection vulnerability in default.aspx in Active Web Helpdesk 2.0 allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2008-6389 Public exploit
SQL injection vulnerability in asadmin/default.asp in Rae Media Contact Management Software SOHO, Standard, and Enterpr…
-
Unscored —CVE-2008-6387 Public exploit
Quick Tree View .NET 3.1 stores sensitive information under the web root with insufficient access control, which allows…
-
Unscored —CVE-2008-6376 Public exploit
SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the pass…
-
Unscored —CVE-2008-6367 Public exploit
Unrestricted file upload vulnerability in Photos/create_album.php in Social Groupie allows remote authenticated users t…
-
Unscored —CVE-2008-6390 Public exploit
SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary…
-
Unscored —CVE-2008-6374 Public exploit
CodefixerSoftware MailingListPro Free Edition stores sensitive information under the web root with insufficient access …
-
Unscored —CVE-2008-6377 Public exploit
PHP remote file inclusion vulnerability in include/global.php in Multi SEO phpBB 1.1.0 allows remote attackers to execu…
-
Unscored —CVE-2008-6372 Public exploit
SQL injection vulnerability in default.asp in Ocean12 FAQ Manager Pro 1.0 allows remote attackers to execute arbitrary …
-
Unscored —CVE-2008-6388 Public exploit
Rapid Classified 3.1 and 3.15 stores sensitive information under the web root with insufficient access control, which a…
-
Unscored —CVE-2008-6379 Public exploit
SQL injection vulnerability in pics_pre.asp in Gallery MX 2.0.0 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2008-6369 Public exploit
SQL injection vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows remote attackers to execute arbit…
-
Unscored —CVE-2008-6378 Public exploit
SQL injection vulnerability in calendar_Eventupdate.asp in Calendar Mx Professional 2.0.0 allows remote attackers to ex…
-
Unscored —CVE-2008-6371 Public exploit
SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary…
-
Unscored —CVE-2008-6385 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in W3matter RevSense 1.0 allows remote attackers to inject arbitr…
-
Unscored —CVE-2008-6370 Public exploit
Cross-site scripting (XSS) vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows remote attackers to …
-
Unscored —CVE-2008-6386 Public exploit
Cross-site scripting (XSS) vulnerability in showads.php in Z1Exchange 1.0 allows remote attackers to inject arbitrary w…
-
Unscored —CVE-2008-6391 Public exploit
SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the user…
-
Unscored —CVE-2008-6392 Public exploit
SQL injection vulnerability in showads.php in Z1Exchange allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2008-6381 Public exploit
SQL injection vulnerability in modules/adresses/viewcat.php in bcoos 1.0.13, and possibly earlier, allows remote authen…
-
Unscored —CVE-2008-6382 Public exploit
ASP Portal 3.2.5 stores sensitive information under the web root with insufficient access control, which allows remote …
-
Unscored —CVE-2008-6366 Public exploit
SQL injection vulnerability in logon.jsp in Ad Server Solutions Affiliate Software Java 4.0 allows remote attackers to …
-
Unscored —CVE-2008-6349 Public exploit
SQL injection vulnerability in survey_results_text.php in TurnkeyForms Business Survey Pro 1.0 allows remote attackers …
-
Unscored —CVE-2008-6358 Public exploit
SQL injection vulnerability in group_index.php in Social Groupie allows remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2008-6350 Public exploit
SQL injection vulnerability in listtest.php in TurnkeyForms Local Classifieds allows remote attackers to execute arbitr…
-
Unscored —CVE-2008-6357 Public exploit
MyCal Personal Events Calendar stores sensitive information under the web root with insufficient access control, which …
-
Unscored —CVE-2008-6355 Public exploit
The Net Guys ASPired2Protect stores sensitive information under the web root with insufficient access control, which al…
-
Unscored —CVE-2008-6362 Public exploit
SQL injection vulnerability in sitepage.php in Multiple Membership Script 2.5 allows remote attackers to execute arbitr…
-
Unscored —CVE-2008-6363 Public exploit
Stack-based buffer overflow in DesignWorks Professional 4.3.1 and 5.0.7 allows remote attackers to execute arbitrary co…
-
Unscored —CVE-2008-6351 Public exploit
Cross-site scripting (XSS) vulnerability in listtest.php in TurnkeyForms Local Classifieds allows remote attackers to i…
-
Unscored —CVE-2008-6361 Public exploit
Directory traversal vulnerability in index.php in InSun Feed CMS 1.7.3 19Beta allows remote attackers to include and ex…
-
Unscored —CVE-2008-6354 Public exploit
The Net Guys ASPired2poll stores sensitive information under the web root with insufficient access control, which allow…
-
Unscored —CVE-2008-6356 Public exploit
evCal Events Calendar stores sensitive information under the web root with insufficient access control, which allows re…
-
Unscored —CVE-2008-6364 Public exploit
SQL injection vulnerability in logon_process.jsp in Ad Server Solutions Banner Exchange Solution Java allows remote att…
-
Unscored —
PHP remote file inclusion vulnerability in lib/onguma.class.php in the Onguma Time Sheet (com_ongumatimesheet20) 2.0 4b…
-
Unscored —CVE-2008-6348 Public exploit
Multiple SQL injection vulnerabilities in DevelopItEasy Photo Gallery 1.2 allow remote attackers to execute arbitrary S…
-
Unscored —CVE-2008-6353 Public exploit
SQL injection vulnerability in index.asp in ASP-CMS 1.0 allows remote attackers to execute arbitrary SQL commands via t…