Skip to content
OpenAdvisories

Archive

19 March 2009

Vulnerabilities first published on this day (UTC), newest first.

15 results · Feed

  • Unscored —
    CVE-2008-6489 Public exploit

    SQL injection vulnerability in MyAlbum component (com_myalbum) 1.0 for Joomla! allows remote attackers to execute arbit…

  • Unscored —
    CVE-2008-6491 Public exploit

    PHP remote file inclusion vulnerability in connexion.php in PHPGKit 0.9 allows remote attackers to execute arbitrary PH…

  • Unscored —
    CVE-2008-6490 Public exploit

    function/update_xml.php in FLABER 1.1 and earlier allows remote attackers to overwrite arbitrary files by specifying th…

  • Unscored —

    PHP remote file inclusion vulnerability in includes/class_image.php in PHP Pro Bid 6.05, when register_globals is enabl…

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability in account/settings/account/index.php in phpFoX 1.6.21 allows remote at…

  • Unscored —
    CVE-2009-0963 Public exploit

    Multiple SQL injection vulnerabilities in PHPRunner 4.2, and possibly earlier, allow remote attackers to execute arbitr…

  • Unscored —
    CVE-2009-0964 Public exploit

    UserView_list.php in PHPRunner 4.2, and possibly earlier, stores passwords in cleartext in the database, which allows a…

  • High 8.8
    CVE-2009-0927 Exploited Public exploit EPSS 97%

    Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows …

    KEV Mar 25, 2022
  • Unscored —
    CVE-2009-0968 Public exploit

    SQL injection vulnerability in fmoblog.php in the fMoblog plugin 2.1 for WordPress allows remote attackers to execute a…

  • Unscored —
    CVE-2009-0965 Public exploit

    SQL injection vulnerability in functions/browse.php in Ganesha Digital Library (GDL) 4.0 and 4.2 allows remote attacker…

  • Unscored —
    CVE-2009-0967 Public exploit

    The FTP server in Serv-U 7.0.0.1 through 7.4.0.1 allows remote authenticated users to cause a denial of service (servic…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in futomi's CGI Cafe Access Analyzer CGI Standard Version 3.8.1 and earlier al…

  • Unscored —

    Wee Enhanced Environment for Chat (WeeChat) 0.2.6 allows remote attackers to cause a denial of service (crash) via an I…

  • Unscored —
    CVE-2009-0966 Public exploit

    PHP remote file inclusion vulnerability in cross.php in YABSoft Mega File Hosting 1.2 allows remote attackers to execut…

  • Unscored —

    Unspecified vulnerability in Futomi's CGI Cafe MP Form Mail CGI eCommerce 1.3.0 and earlier, and CGI Professional 3.2.2…