Archive
March 2009
Vulnerabilities first published in this month (UTC), newest first.
259 results · Clear filters · Feed
-
Unscored —CVE-2008-6572 Public exploit
SQL injection vulnerability in search_results.php in ABK-Soft AbleDating 2.4 allows remote attackers to execute arbitra…
-
Unscored —CVE-2008-6563 Public exploit
Buffer overflow in the XML parser in Trillian 3.1.9.0, and possibly earlier, allows remote attackers to cause a denial …
-
Unscored —CVE-2008-6565 Public exploit
Cross-site scripting (XSS) vulnerability in Invision Power Board 2.3.1 and earlier allows remote attackers to inject ar…
-
Unscored —CVE-2008-6562 Public exploit
Cross-site scripting (XSS) vulnerability in jax_linklists.php in Jack (tR) Jax LinkLists 1.00 allows remote attackers t…
-
Unscored —CVE-2005-4879 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in jax_guestbook.php in Jax Guestbook 3.1 and 3.31 allow remote att…
-
Unscored —CVE-2005-4880 Public exploit
Jax Guestbook 3.1 and 3.31 stores sensitive information under the web root with insufficient access control, which allo…
-
Unscored —CVE-2009-1171 Public exploit
The TeX filter in Moodle 1.6 before 1.6.9+, 1.7 before 1.7.7+, 1.8 before 1.8.9, and 1.9 before 1.9.5 allows user-assis…
-
Unscored —CVE-2008-6559 Public exploit
Merge mcd in ReliantHA 1.1.4 in SCO UnixWare 7.1.4 allows local users to gain root privileges via a crafted -d argument…
-
Unscored —CVE-2008-6555 Public exploit
cgi-bin/webutil.pl in The Puppet Master WebUtil allows remote attackers to execute arbitrary commands via shell metacha…
-
Unscored —CVE-2008-6558 Public exploit
Untrusted search path vulnerability in (1) hvdisp and (2) rcvm in ReliantHA 1.1.4 in SCO UnixWare 7.1.4 allows local us…
-
Unscored —CVE-2008-6553 Public exploit
microcms-admin-home.php in Implied by Design Micro CMS (Micro-CMS) 3.5 (aka 0.3.5) does not require authentication as a…
-
Unscored —CVE-2008-6551 Public exploit
Multiple directory traversal vulnerabilities in e-Vision CMS 2.0.2 and earlier, when magic_quotes_gpc is disabled, allo…
-
Medium —CVE-2008-6540 Public exploit
DotNetNuke Default Machine Key Exposure
DotNetNuke before 4.8.2, during installation or upgrade, does not warn the administrator when the default (1) ValidationKey and (2) DecryptionKey values cannot be modified in the web.config file, which allows remote attackers to bypass intended access restric…
-
Unscored —CVE-2008-6544 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Simple Machines Forum (SMF) 1.1.4 allow remote attackers to execu…
-
Unscored —CVE-2008-6550 Public exploit
Cross-site scripting (XSS) vulnerability in glossaire.php in Glossaire 2.0 allows remote attackers to inject arbitrary …
-
Unscored —CVE-2008-6539 Public exploit
Static code injection vulnerability in user/settings/ in DeStar 0.2.2-5 allows remote authenticated users to add arbitr…
-
Unscored —CVE-2008-6545 Public exploit
PHP remote file inclusion vulnerability in news/include/createdb.php in Web Server Creator Web Portal 0.1 allows remote…
-
Unscored —CVE-2008-6537 Public exploit
LightNEasy/lightneasy.php in LightNEasy No database version 1.2 allows remote attackers to obtain the hash of the admin…
-
Unscored —CVE-2008-6543 Public exploit
Multiple PHP remote file inclusion vulnerabilities in ComScripts TEAM Quick Classifieds 1.0 via the DOCUMENT_ROOT param…
-
Unscored —CVE-2008-6538 Public exploit
DeStar 0.2.2-5 allows remote attackers to add arbitrary users via a direct request to config/add/CfgOptUser.
-
Unscored —
The txMozillaXSLTProcessor::TransformToDoc function in Mozilla Firefox before 3.0.8 and SeaMonkey before 1.1.16 allows …
-
Unscored —CVE-2008-6530 Public exploit
Unrestricted file upload vulnerability in editimage.php in eZoneScripts Living Local 1.1 allows remote authenticated ad…
-
Unscored —CVE-2008-6535 Public exploit
admin/settings.php in PayPal eStores allows remote attackers to bypass intended access restrictions and change the admi…
-
Unscored —CVE-2008-6529 Public exploit
Cross-site scripting (XSS) vulnerability in listtest.php in eZoneScripts Living Local 1.1 allows remote attackers to in…
-
Unscored —CVE-2008-6534 Public exploit
Incomplete blacklist vulnerability in NULL FTP Server Free and Pro 1.1.0.7 allows remote authenticated users to execute…
-
Unscored —CVE-2008-6528 Public exploit
NTFS TmaxSoft JEUS 5 before Fix 26 allows remote attackers to read the source code for scripts by appending ::$DATA to …
-
Unscored —CVE-2009-1152 Public exploit
Siemens Gigaset SE461 WiMAX router 1.5-BL024.9.6401, and possibly other versions, allows remote attackers to cause a de…
-
Critical 9.8
Static code injection vulnerability in setup.php in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allows rem…
KEV Mar 25, 2022 -
Unscored —CVE-2008-6522 Public exploit
Multiple directory traversal vulnerabilities in the RenderFile function in ContentRender.class.php in Terracotta (aka O…
-
Unscored —CVE-2008-6527 Public exploit
SQL injection vulnerability in forum.asp in GO4I.NET ASP Forum 1.0 allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2008-6518 Public exploit
Unrestricted file upload vulnerability in the profile feature in VidiScript allows registered remote authenticated user…
-
Unscored —CVE-2008-6517 Public exploit
SQL injection vulnerability in NewsHOWLER 1.03 Beta allows remote attackers to execute arbitrary SQL commands via the n…
-
Unscored —CVE-2008-6519 Public exploit
Format string vulnerability in Xitami Web Server 2.2a through 2.5c2, and possibly other versions, allows remote attacke…
-
Unscored —CVE-2008-6525 Public exploit
SQL injection vulnerability in the Admin Panel in Nice PHP FAQ Script (Knowledge base Script) allows remote attackers t…
-
Unscored —CVE-2008-6526 Public exploit
SQL injection vulnerability in index.php in BosDev BosClassifieds allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2008-6524 Public exploit
resetpass.php in openInvoice 0.90 beta and earlier allows remote authenticated users to change the passwords of arbitra…
-
Unscored —CVE-2008-6516 Public exploit
Multiple directory traversal vulnerabilities in phpKF-Portal 1.10 allow remote attackers to include arbitrary files via…
-
Unscored —CVE-2008-6523 Public exploit
auth.php in openInvoice 0.90 beta and earlier allows remote attackers to bypass authentication and gain privileges by s…
-
Unscored —CVE-2009-1087 Public exploit
Multiple argument injection vulnerabilities in PPLive.exe in PPLive 1.9.21 and earlier allow remote attackers to execut…
-
Unscored —
Hannon Hill Cascade Server 5.7 and other versions allows remote authenticated users to execute arbitrary programs or Ja…