Skip to content
OpenAdvisories

Archive

13 March 2009

Vulnerabilities first published on this day (UTC), newest first.

21 results · Feed

  • Unscored —

    Multiple unspecified vulnerabilities in ClanSphere before 2008.2.1 allow remote attackers to obtain sensitive informati…

  • Unscored —
    CVE-2008-6452 Public exploit

    SQL injection vulnerability in show_vote.php in Oceandir 2.9 and earlier allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2008-6451 Public exploit

    SQL injection vulnerability in humor.php in jPORTAL 2 allows remote attackers to execute arbitrary SQL commands via the…

  • Unscored —
    CVE-2008-6469 Public exploit

    SQL injection vulnerability in index.php in PlainCart 1.1.2 allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —

    Session fixation vulnerability in Edikon phpShop 0.8.1 allows remote attackers to hijack web sessions via unspecified v…

  • Unscored —

    SQL injection vulnerability in the Swigmore institute (cgswigmore) extension before 0.1.2 for TYPO3 allows remote attac…

  • Unscored —
    CVE-2008-6465 Scanner template

    Multiple cross-site scripting (XSS) vulnerabilities in login.php in webshell4 in Parallels H-Sphere 3.0.0 P9 and 3.1 P1…

  • Unscored —

    SQL injection vulnerability in the HBook (h_book) extension 2.3.0 and earlier for TYPO3 allows remote attackers to exec…

  • Unscored —
    CVE-2008-6453 Public exploit

    Directory traversal vulnerability in section.php in 6rbScript 3.3, when magic_quotes_gpc is disabled, allows remote att…

  • Unscored —
    CVE-2008-6468 Public exploit

    SQL injection vulnerability in index.php in Diesel Pay allows remote attackers to execute arbitrary SQL commands via th…

  • Unscored —
    CVE-2008-6466 Public exploit

    SQL injection vulnerability in image_gallery.php in the Akira Powered Image Gallery (image_gallery) plugin 0.9.6.2 for …

  • Unscored —

    SQL injection vulnerability in the Simple Random Objects (mw_random_objects) extension 1.0.3 and earlier for TYPO3 allo…

  • Unscored —
    CVE-2008-6464 Public exploit

    SQL injection vulnerability in event.php in Mevin Productions Basic PHP Events Lister 1.0 allows remote attackers to ex…

  • Unscored —

    SQL injection vulnerability in the FE address edit for tt_address & direct mail (dmaddredit) extension 0.4.0 and earlie…

  • Unscored —
    CVE-2008-6467 Public exploit

    SQL injection vulnerability in jobs/jobseekers/job-info.php in Diesel Job Site allows remote attackers to execute arbit…

  • Unscored —

    SQL injection vulnerability in the auto BE User Registration (autobeuser) extension 0.0.2 and earlier for TYPO3 allows …

  • Unscored —
    CVE-2008-6471 Public exploit

    SQL injection vulnerability in detail.php in MountainGrafix easyLink 1.1.0 allows remote attackers to execute arbitrary…

  • Unscored —

    SQL injection vulnerability in the My quiz and poll (myquizpoll) extension before 0.1.4 for TYPO3 allows remote attacke…

  • Unscored —

    SQL injection vulnerability in the Diocese of Portsmouth Church Search (pd_churchsearch) extension before 0.1.1, and 0.…

  • Unscored —

    SQL injection vulnerability in the Random Prayer 2 (ste_prayer2) extension before 0.0.3 for TYPO3 allows remote attacke…

  • Unscored —
    CVE-2008-6454 Public exploit

    SQL injection vulnerability in section.php in 6rbScript 3.3 allows remote attackers to execute arbitrary SQL commands v…