Archive
March 2009
Vulnerabilities first published in this month (UTC), newest first.
259 results · Clear filters · Feed
-
Unscored —CVE-2008-6493 Public exploit
Easy Content Management Publishing stores sensitive information under the web root with insufficient access control, wh…
-
Unscored —CVE-2008-6498 Public exploit
Cross-site request forgery (CSRF) vulnerability in security/xamppsecurity.php in XAMPP 1.6.8 allows remote attackers to…
-
Unscored —CVE-2008-6497 Public exploit
The Neostrada Livebox ADSL Router allows remote attackers to cause a denial of service (network outage) via multiple HT…
-
Unscored —
Directory traversal vulnerability in the FTP server in Rhino Software Serv-U File Server 7.0.0.1 through 7.4.0.1 allows…
-
Unscored —CVE-2009-1022 Public exploit
Heap-based buffer overflow in the Preview/ Set Segment function in Gretech GOMlab GOM Encoder 1.0.0.11 and earlier allo…
-
Unscored —CVE-2009-1026 Public exploit
Multiple SQL injection vulnerabilities in login.php in Kim Websites 1.0 allow remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2009-1024 Public exploit
Multiple SQL injection vulnerabilities in Beerwin PHPLinkAdmin 1.0 allow remote attackers to execute arbitrary SQL comm…
-
Unscored —
Stack-based buffer overflow in POP Peeper 3.4.0.0 and earlier allows remote POP3 servers to execute arbitrary code via …
-
Unscored —
PHP remote file inclusion vulnerability in linkadmin.php in Beerwin PHPLinkAdmin 1.0 allows remote attackers to execute…
-
Unscored —CVE-2009-1023 Public exploit
SQL injection vulnerability in index.php in phpComasy 0.9.1 allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —
Stack-based buffer overflow in ediSys eZip Wizard 3.0 allows remote attackers to execute arbitrary code via a crafted .…
-
Unscored —CVE-2009-1030 Public exploit
Cross-site scripting (XSS) vulnerability in the choose_primary_blog function in wp-includes/wpmu-functions.php in WordP…
-
Unscored —CVE-2008-6489 Public exploit
SQL injection vulnerability in MyAlbum component (com_myalbum) 1.0 for Joomla! allows remote attackers to execute arbit…
-
Unscored —CVE-2008-6491 Public exploit
PHP remote file inclusion vulnerability in connexion.php in PHPGKit 0.9 allows remote attackers to execute arbitrary PH…
-
Unscored —CVE-2008-6490 Public exploit
function/update_xml.php in FLABER 1.1 and earlier allows remote attackers to overwrite arbitrary files by specifying th…
-
Unscored —CVE-2009-0963 Public exploit
Multiple SQL injection vulnerabilities in PHPRunner 4.2, and possibly earlier, allow remote attackers to execute arbitr…
-
Unscored —CVE-2009-0964 Public exploit
UserView_list.php in PHPRunner 4.2, and possibly earlier, stores passwords in cleartext in the database, which allows a…
-
High 8.8
Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows …
KEV Mar 25, 2022 -
Unscored —CVE-2009-0968 Public exploit
SQL injection vulnerability in fmoblog.php in the fMoblog plugin 2.1 for WordPress allows remote attackers to execute a…
-
Unscored —CVE-2009-0965 Public exploit
SQL injection vulnerability in functions/browse.php in Ganesha Digital Library (GDL) 4.0 and 4.2 allows remote attacker…
-
Unscored —CVE-2009-0967 Public exploit
The FTP server in Serv-U 7.0.0.1 through 7.4.0.1 allows remote authenticated users to cause a denial of service (servic…
-
Unscored —CVE-2009-0966 Public exploit
PHP remote file inclusion vulnerability in cross.php in YABSoft Mega File Hosting 1.2 allows remote attackers to execut…
-
Unscored —CVE-2008-6484 Public exploit
SQL injection vulnerability in login.php in Mole Group Taxi Map Script (aka Taxi Calc Dist Script) allows remote attack…
-
Unscored —CVE-2008-6488 Public exploit
SQL injection vulnerability in index.php in SoftComplex PHP Image Gallery 1.0 allows remote attackers to execute arbitr…
-
Unscored —CVE-2008-6485 Public exploit
SQL injection vulnerability in index.php in SoftComplex PHP Image Gallery allows remote attackers to execute arbitrary …
-
Unscored —
PHP remote file inclusion vulnerability in admin.googlebase.php in the Ecom Solutions VirtueMart Google Base (aka com_g…
-
Unscored —
PHP remote file inclusion vulnerability in admin.treeg.php in the Flash Tree Gallery (com_treeg) component 1.0 for Joom…
-
Unscored —CVE-2008-6487 Public exploit
Multiple SQL injection vulnerabilities in login.asp in Digiappz DigiAffiliate 1.4 and earlier allow remote attackers to…
-
Unscored —
Directory traversal vulnerability in framework/Image/Image.php in Horde before 3.2.4 and 3.3.3 and Horde Groupware befo…
-
Unscored —CVE-2008-6481 Public exploit
SQL injection vulnerability in the Versioning component (com_versioning) 1.0.2 in Joomla! and Mambo allows remote attac…
-
Unscored —
PostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to cause a denial of serv…
-
Unscored —CVE-2008-6478 Public exploit
Cross-site request forgery (CSRF) vulnerability in the file manager in the VZPP web interface for Parallels Virtuozzo 3…
-
Unscored —CVE-2008-6479 Public exploit
Cross-site request forgery (CSRF) vulnerability in the "change password" feature in the VZPP web interface for Parallel…
-
Unscored —CVE-2008-6477 Public exploit
SQL injection vulnerability in Mumbo Jumbo Media OP4 allows remote attackers to execute arbitrary SQL commands via the …
-
Unscored —CVE-2008-6475 Public exploit
SQL injection vulnerability in the guestbook component (components/guestbook/guestbook.php) in Drake CMS 0.4.11 and ear…
-
Unscored —CVE-2008-6473 Public exploit
_blogadata/include/init_pass2.php in Blogator-script 0.95 allows remote attackers to change the password for arbitrary …
-
Unscored —CVE-2008-6476 Public exploit
Cross-site scripting (XSS) vulnerability in blog/search.aspx in BlogEngine.NET allows remote attackers to inject arbitr…
-
Unscored —CVE-2009-0824 Public exploit
Elaborate Bytes ElbyCDIO.sys 6.0.2.0 and earlier, as distributed in SlySoft AnyDVD before 6.5.2.6, Virtual CloneDrive 5…
-
Unscored —CVE-2008-6452 Public exploit
SQL injection vulnerability in show_vote.php in Oceandir 2.9 and earlier allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2008-6451 Public exploit
SQL injection vulnerability in humor.php in jPORTAL 2 allows remote attackers to execute arbitrary SQL commands via the…