Skip to content
OpenAdvisories

Archive

16 March 2009

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Unscored —
    CVE-2008-6478 Public exploit

    Cross-site request forgery (CSRF) vulnerability in the file manager in the VZPP web interface for Parallels Virtuozzo 3…

  • Unscored —
    CVE-2008-6479 Public exploit

    Cross-site request forgery (CSRF) vulnerability in the "change password" feature in the VZPP web interface for Parallel…

  • Unscored —
    CVE-2008-6477 Public exploit

    SQL injection vulnerability in Mumbo Jumbo Media OP4 allows remote attackers to execute arbitrary SQL commands via the …

  • Unscored —
    CVE-2008-6475 Public exploit

    SQL injection vulnerability in the guestbook component (components/guestbook/guestbook.php) in Drake CMS 0.4.11 and ear…

  • Unscored —
    CVE-2008-6473 Public exploit

    _blogadata/include/init_pass2.php in Blogator-script 0.95 allows remote attackers to change the password for arbitrary …

  • Unscored —
    CVE-2008-6476 Public exploit

    Cross-site scripting (XSS) vulnerability in blog/search.aspx in BlogEngine.NET allows remote attackers to inject arbitr…