Skip to content
OpenAdvisories

Archive

2 March 2009

Vulnerabilities first published on this day (UTC), newest first.

50 results · Feed

  • Unscored —
    CVE-2008-6354 Public exploit

    The Net Guys ASPired2poll stores sensitive information under the web root with insufficient access control, which allow…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the userranks feature in modules/system/admin.php in ImpressCMS 1.0.2 final…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in index.php in Max's Guestbook allows remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2008-6356 Public exploit

    evCal Events Calendar stores sensitive information under the web root with insufficient access control, which allows re…

  • Unscored —
    CVE-2008-6364 Public exploit

    SQL injection vulnerability in logon_process.jsp in Ad Server Solutions Banner Exchange Solution Java allows remote att…

  • Unscored —
    CVE-2008-6347 Public exploit EPSS 31%

    PHP remote file inclusion vulnerability in lib/onguma.class.php in the Onguma Time Sheet (com_ongumatimesheet20) 2.0 4b…

  • Unscored —
    CVE-2008-6348 Public exploit

    Multiple SQL injection vulnerabilities in DevelopItEasy Photo Gallery 1.2 allow remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2008-6353 Public exploit

    SQL injection vulnerability in index.asp in ASP-CMS 1.0 allows remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2008-6365 Public exploit

    SQL injection vulnerability in logon.jsp in Ad Server Solutions Ad Management Software Java allows remote attackers to …

  • Unscored —
    CVE-2008-6352 Public exploit

    SQL injection vulnerability in home.html in Xpoze Pro 4.10 allows remote attackers to execute arbitrary SQL commands vi…