Skip to content
OpenAdvisories

Archive

6 March 2009

Vulnerabilities first published on this day (UTC), newest first.

28 results · Clear filters · Feed

  • Unscored —
    CVE-2008-6422 Public exploit

    Multiple SQL injection vulnerabilities in PsychoStats 2.3, 2.3.1, and 2.3.3 allow remote attackers to execute arbitrary…

  • Unscored —
    CVE-2008-6421 Public exploit

    PHP remote file inclusion vulnerability in social_game_play.php in Social Site Generator (SSG) 2.0 allows remote attack…

  • Unscored —
    CVE-2008-6419 Public exploit

    Multiple SQL injection vulnerabilities in Social Site Generator (SSG) 2.0 allow remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2008-6427 Public exploit

    SQL injection vulnerability in index.php in Hivemaker Professional 1.0.2 and earlier, when magic_quotes_gpc is disabled…

  • Unscored —
    CVE-2008-6423 Public exploit

    Directory traversal vulnerability in passwiki.php in PassWiki 0.9.16 RC3 and earlier allows remote attackers to read ar…

  • Unscored —
    CVE-2008-6431 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in BMForum 5.6 allow remote attackers to inject arbitrary web scrip…

  • Unscored —
    CVE-2008-6439 Public exploit

    Cross-site scripting (XSS) vulnerability in search_results.php in ABK-Soft AbleDating 2.4 allows remote attackers to in…

  • Unscored —
    CVE-2008-6429 Public exploit

    SQL injection vulnerability in the PrayerCenter (com_prayercenter) component 1.4.9 and earlier for Joomla! allows remot…

  • Unscored —
    CVE-2008-6438 Public exploit

    SQL injection vulnerability in macgurublog_menu/macgurublog.php in the MacGuru BLOG Engine plugin 2.2 for e107 allows r…

  • Unscored —
    CVE-2008-6437 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in PHPFreeForum 1.0 RC2 and earlier allow remote attackers to injec…

  • Unscored —
    CVE-2008-6435 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in phpSQLiteCMS 1 RC2 allow remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2008-6425 Public exploit

    SQL injection vulnerability in news.php in ComicShout 2.8 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2008-6420 Public exploit

    Social Site Generator (SSG) 2.0 allows remote attackers to read arbitrary files via the file parameter to (1) filedload…

  • Unscored —
    CVE-2008-6418 Public exploit

    SQL injection vulnerability in scrape.php in TorrentTrader before 2008-05-13 allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2008-6430 Public exploit

    SQL injection vulnerability in the MyContent (com_mycontent) component 1.1.13 for Joomla! allows remote attackers to ex…

  • Unscored —
    CVE-2008-6410 Public exploit

    Directory traversal vulnerability in show.php in ol'bookmarks manager 0.7.5 and earlier allows remote attackers to incl…

  • Unscored —
    CVE-2008-6408 Public exploit

    PHP remote file inclusion vulnerability in frame.php in ol'bookmarks manager 0.7.5 allows remote attackers to execute a…

  • Unscored —
    CVE-2008-6401 Public exploit

    SQL injection vulnerability in sayfa.php in JETIK-WEB allows remote attackers to execute arbitrary SQL commands via the…

  • Unscored —
    CVE-2008-6409 Public exploit

    SQL injection vulnerability in index.php in ol'bookmarks manager 0.7.5 allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2008-6404 Public exploit

    Cross-site scripting (XSS) vulnerability in add_calendars.php in eXtrovert Software Thyme 1.3 allows remote attackers t…

  • Unscored —
    CVE-2008-6402 Public exploit

    PHP remote file inclusion vulnerability in hu/modules/reg-new/modstart.php in Sofi WebGui 0.6.3 PRE and earlier allows …

  • Unscored —
    CVE-2008-6407 Public exploit

    Directory traversal vulnerability in frame.php in ol'bookmarks manager 0.7.5 allows remote attackers to include and exe…

  • Unscored —
    CVE-2008-6405 Public exploit

    SQL injection vulnerability in showcategory.php in Hotscripts Clone allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2008-6406 Public exploit

    Cross-site scripting (XSS) vulnerability in admin.php in DataLife Engine (DLE) 7.2 allows remote attackers to inject ar…

  • Unscored —
    CVE-2008-6414 Public exploit

    SQL injection vulnerability in detail.php in AJ Auction Pro Platinum Skin 2 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2008-6403 Public exploit

    PHP remote file inclusion vulnerability in themes/default/include/html/insert.inc.php in OpenRat 0.8-beta4 and earlier …

  • Unscored —
    CVE-2008-6411 Public exploit

    Explay CMS 2.1 and earlier allows remote attackers to bypass authentication and gain administrative access by setting t…

  • Unscored —
    CVE-2009-0835 Public exploit

    The __secure_computing function in kernel/seccomp.c in the seccomp subsystem in the Linux kernel 2.6.28.7 and earlier o…