Skip to content
OpenAdvisories

Archive

25 March 2009

Vulnerabilities first published on this day (UTC), newest first.

15 results · Clear filters · Feed

  • Unscored —
    CVE-2008-6522 Public exploit

    Multiple directory traversal vulnerabilities in the RenderFile function in ContentRender.class.php in Terracotta (aka O…

  • Unscored —
    CVE-2008-6527 Public exploit

    SQL injection vulnerability in forum.asp in GO4I.NET ASP Forum 1.0 allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2008-6518 Public exploit

    Unrestricted file upload vulnerability in the profile feature in VidiScript allows registered remote authenticated user…

  • Unscored —
    CVE-2008-6517 Public exploit

    SQL injection vulnerability in NewsHOWLER 1.03 Beta allows remote attackers to execute arbitrary SQL commands via the n…

  • Unscored —
    CVE-2008-6519 Public exploit

    Format string vulnerability in Xitami Web Server 2.2a through 2.5c2, and possibly other versions, allows remote attacke…

  • Unscored —
    CVE-2008-6525 Public exploit

    SQL injection vulnerability in the Admin Panel in Nice PHP FAQ Script (Knowledge base Script) allows remote attackers t…

  • Unscored —
    CVE-2008-6526 Public exploit

    SQL injection vulnerability in index.php in BosDev BosClassifieds allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2008-6524 Public exploit

    resetpass.php in openInvoice 0.90 beta and earlier allows remote authenticated users to change the passwords of arbitra…

  • Unscored —
    CVE-2008-6516 Public exploit

    Multiple directory traversal vulnerabilities in phpKF-Portal 1.10 allow remote attackers to include arbitrary files via…

  • Unscored —
    CVE-2008-6523 Public exploit

    auth.php in openInvoice 0.90 beta and earlier allows remote attackers to bypass authentication and gain privileges by s…

  • Unscored —
    CVE-2009-1087 Public exploit

    Multiple argument injection vulnerabilities in PPLive.exe in PPLive 1.9.21 and earlier allow remote attackers to execut…

  • Unscored —
    CVE-2009-1088 Public exploit EPSS 12%

    Hannon Hill Cascade Server 5.7 and other versions allows remote authenticated users to execute arbitrary programs or Ja…

  • Unscored —
    CVE-2009-1092 Public exploit

    Use-after-free vulnerability in the LIVEAUDIO.LiveAudioCtrl.1 ActiveX control in LIVEAU~1.OCX 7.0 for GeoVision DVR sys…

  • Unscored —
    CVE-2009-0215 Public exploit EPSS 36%

    Stack-based buffer overflow in the GetXMLValue method in the IBM Access Support ActiveX control in IbmEgath.dll, as dis…

  • Unscored —
    CVE-2009-0920 Public exploit EPSS 75%

    Stack-based buffer overflow in OvCgi/Toolbar.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allo…