Skip to content
OpenAdvisories

Archive

20 March 2009

Vulnerabilities first published on this day (UTC), newest first.

26 results · Clear filters · Feed

  • Unscored —
    CVE-2008-6501 Public exploit

    Cross-site scripting (XSS) vulnerability in profiles/index.php in Pro Chat Rooms 3.0.2 allows remote attackers to injec…

  • Unscored —
    CVE-2008-6502 Public exploit

    Directory traversal vulnerability in Pro Chat Rooms 3.0.2 allows remote authenticated users to select an arbitrary loca…

  • Unscored —
    CVE-2008-6503 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in PrestaShop 1.1.0.3 allow remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2008-6500 Public exploit

    Cross-site scripting (XSS) vulnerability in CodeToad ASP Shopping Cart Script allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2009-1040 Public exploit

    Buffer overflow in WinAsm Studio 5.1.5.0 allows user-assisted remote attackers to execute arbitrary code via a crafted …

  • Unscored —
    CVE-2009-1033 Public exploit

    SQL injection vulnerability in misc.php in DeluxeBB 1.3 and earlier allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2009-1038 Public exploit

    Multiple SQL injection vulnerabilities in YAP Blog 1.1.1 allow remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2009-1039 Public exploit

    Buffer overflow in CDex 1.70b2 allows remote attackers to execute arbitrary code via a crafted Info header in an Ogg Vo…

  • Unscored —
    CVE-2009-1032 Public exploit

    SQL injection vulnerability in gallery_list.php in YABSoft Advanced Image Hosting (AIH) Script 2.3 allows remote attack…

  • Unscored —
    CVE-2008-6495 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Fritz Berger yet another php photo album - next generation (ya…

  • Unscored —
    CVE-2008-6499 Public exploit

    security/xamppsecurity.php in XAMPP 1.6.8 performs an extract operation on the SERVER superglobal array, which allows r…

  • Unscored —
    CVE-2008-6494 Public exploit

    ASP User Engine.NET stores sensitive information under the web root with insufficient access control, which allows remo…

  • Unscored —
    CVE-2008-6496 Public exploit

    Insecure method vulnerability in the VSPDFEditorX.VSPDFEdit ActiveX control in VSPDFEditorX.ocx 1.0.200.0 in VISAGESOFT…

  • Unscored —
    CVE-2008-6492 Public exploit

    Unrestricted file upload vulnerability in process.php in Tizag Countdown Creator 3 allows remote attackers to execute a…

  • Unscored —
    CVE-2008-6493 Public exploit

    Easy Content Management Publishing stores sensitive information under the web root with insufficient access control, wh…

  • Unscored —
    CVE-2008-6498 Public exploit

    Cross-site request forgery (CSRF) vulnerability in security/xamppsecurity.php in XAMPP 1.6.8 allows remote attackers to…

  • Unscored —
    CVE-2008-6497 Public exploit

    The Neostrada Livebox ADSL Router allows remote attackers to cause a denial of service (network outage) via multiple HT…

  • Unscored —
    CVE-2009-1031 Public exploit EPSS 11%

    Directory traversal vulnerability in the FTP server in Rhino Software Serv-U File Server 7.0.0.1 through 7.4.0.1 allows…

  • Unscored —
    CVE-2009-1022 Public exploit

    Heap-based buffer overflow in the Preview/ Set Segment function in Gretech GOMlab GOM Encoder 1.0.0.11 and earlier allo…

  • Unscored —
    CVE-2009-1026 Public exploit

    Multiple SQL injection vulnerabilities in login.php in Kim Websites 1.0 allow remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2009-1024 Public exploit

    Multiple SQL injection vulnerabilities in Beerwin PHPLinkAdmin 1.0 allow remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2009-1029 Public exploit EPSS 32%

    Stack-based buffer overflow in POP Peeper 3.4.0.0 and earlier allows remote POP3 servers to execute arbitrary code via …

  • Unscored —
    CVE-2009-1025 Public exploit EPSS 57%

    PHP remote file inclusion vulnerability in linkadmin.php in Beerwin PHPLinkAdmin 1.0 allows remote attackers to execute…

  • Unscored —
    CVE-2009-1023 Public exploit

    SQL injection vulnerability in index.php in phpComasy 0.9.1 allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2009-1028 Public exploit EPSS 33%

    Stack-based buffer overflow in ediSys eZip Wizard 3.0 allows remote attackers to execute arbitrary code via a crafted .…

  • Unscored —
    CVE-2009-1030 Public exploit

    Cross-site scripting (XSS) vulnerability in the choose_primary_blog function in wp-includes/wpmu-functions.php in WordP…