Archive
March 2009
Vulnerabilities first published in this month (UTC), newest first.
259 results · Clear filters · Feed
-
Unscored —CVE-2008-6469 Public exploit
SQL injection vulnerability in index.php in PlainCart 1.1.2 allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2008-6453 Public exploit
Directory traversal vulnerability in section.php in 6rbScript 3.3, when magic_quotes_gpc is disabled, allows remote att…
-
Unscored —CVE-2008-6468 Public exploit
SQL injection vulnerability in index.php in Diesel Pay allows remote attackers to execute arbitrary SQL commands via th…
-
Unscored —CVE-2008-6466 Public exploit
SQL injection vulnerability in image_gallery.php in the Akira Powered Image Gallery (image_gallery) plugin 0.9.6.2 for …
-
Unscored —CVE-2008-6464 Public exploit
SQL injection vulnerability in event.php in Mevin Productions Basic PHP Events Lister 1.0 allows remote attackers to ex…
-
Unscored —CVE-2008-6467 Public exploit
SQL injection vulnerability in jobs/jobseekers/job-info.php in Diesel Job Site allows remote attackers to execute arbit…
-
Unscored —CVE-2008-6471 Public exploit
SQL injection vulnerability in detail.php in MountainGrafix easyLink 1.1.0 allows remote attackers to execute arbitrary…
-
Unscored —CVE-2008-6454 Public exploit
SQL injection vulnerability in section.php in 6rbScript 3.3 allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2009-0879 Public exploit
The CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to cause a denial of s…
-
Unscored —CVE-2009-0883 Public exploit
SQL injection vulnerability in Blue Eye CMS 1.0.0 and earlier, when magic_quotes_gpc is disabled, allows remote attacke…
-
Unscored —CVE-2009-0876 Public exploit
Sun xVM VirtualBox 2.0.0, 2.0.2, 2.0.4, 2.0.6r39760, 2.1.0, 2.1.2, and 2.1.4r42893 on Linux allows local users to gain …
-
Unscored —CVE-2009-0881 Public exploit
SQL injection vulnerability in ejemplo/paises.php in isiAJAX 1 allows remote attackers to execute arbitrary SQL command…
-
Unscored —
Directory traversal vulnerability in the CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows re…
-
Unscored —CVE-2009-0882 Public exploit
Multiple SQL injection vulnerabilities in nForum 1.5 allow remote attackers to execute arbitrary SQL commands via the (…
-
Unscored —CVE-2009-0886 Public exploit
Directory traversal vulnerability in login.php in OneOrZero Helpdesk 1.6.5.7 and earlier allows remote attackers to rea…
-
Unscored —CVE-2009-0885 Public exploit
Multiple heap-based buffer overflows in Media Commands 1.0 allow remote attackers to execute arbitrary code or cause a …
-
Unscored —
Stack-based buffer overflow in Foxit Reader 3.0 before Build 1506, including 1120 and 1301, allows remote attackers to …
-
Unscored —
Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 1120 and 1301, does not require user confirmati…
-
Unscored —CVE-2009-0864 Public exploit
S-Cms 1.1 Stable allows remote attackers to bypass authentication and obtain administrative access via an OK value for …
-
Unscored —CVE-2009-0863 Public exploit
SQL injection vulnerability in admin/delete_page.php in S-Cms 1.1 Stable allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2009-0865 Public exploit
Directory traversal vulnerability in the SnapShotToFile method in the GeoVision LiveX (aka LiveX_v8200) ActiveX control…
-
Unscored —CVE-2009-0866 Public exploit
pHNews Alpha 1 stores sensitive information under the web root with insufficient access control, which allows remote at…
-
Unscored —CVE-2009-0537 Public exploit
Integer overflow in the fts_build function in fts.c in libc in (1) OpenBSD 4.4 and earlier and (2) Microsoft Interix 6.…
-
Unscored —CVE-2009-0858 Public exploit
The response_addname function in response.c in Daniel J. Bernstein djbdns 1.05 and earlier does not constrain offsets i…
-
Unscored —CVE-2009-0825 Public exploit
SQL injection vulnerability in system/rss.php in TinX/cms 3.x before 3.5.1 allows remote attackers to execute arbitrary…
-
Unscored —CVE-2009-0853 Public exploit
login.php in CelerBB 0.0.2, when magic_quotes_gpc is disabled, allows remote attackers to bypass authentication and obt…
-
Unscored —CVE-2009-0852 Public exploit
showme.php in CelerBB 0.0.2 allows remote attackers to obtain "reserved information" via the user parameter.
-
Unscored —CVE-2009-0851 Public exploit
Multiple SQL injection vulnerabilities in CelerBB 0.0.2, when magic_quotes_gpc is disabled, allow remote attackers to e…
-
Unscored —
Stack-based buffer overflow in the DtbClsLogin function in NovaStor NovaNET 12 allows remote attackers to (1) execute a…
-
Unscored —CVE-2008-6442 Public exploit
Insecure method vulnerability in Sina Inc. DLoader Class ActiveX Control allows remote attackers to overwrite arbitrary…
-
Unscored —CVE-2008-6446 Public exploit
Static code injection vulnerability in the Guestbook component in CMS MAXSITE allows remote attackers to inject arbitra…
-
Unscored —CVE-2008-6447 Public exploit
Buffer overflow in emmailstore.dll 6.5.0.3 in the QuikSoft EasyMail MailStore ActiveX control allows remote attackers t…
-
Unscored —CVE-2008-6443 Public exploit
SQL injection vulnerability in forum_duzen.php in phpKF allows remote attackers to execute arbitrary SQL commands via t…
-
Unscored —CVE-2009-0855 Public exploit
Cross-site scripting (XSS) vulnerability in the administrative console in IBM WebSphere Application Server (WAS) 6.1 be…
-
Unscored —CVE-2008-6422 Public exploit
Multiple SQL injection vulnerabilities in PsychoStats 2.3, 2.3.1, and 2.3.3 allow remote attackers to execute arbitrary…
-
Unscored —CVE-2008-6421 Public exploit
PHP remote file inclusion vulnerability in social_game_play.php in Social Site Generator (SSG) 2.0 allows remote attack…
-
Unscored —CVE-2008-6419 Public exploit
Multiple SQL injection vulnerabilities in Social Site Generator (SSG) 2.0 allow remote attackers to execute arbitrary S…
-
Unscored —CVE-2008-6427 Public exploit
SQL injection vulnerability in index.php in Hivemaker Professional 1.0.2 and earlier, when magic_quotes_gpc is disabled…
-
Unscored —CVE-2008-6423 Public exploit
Directory traversal vulnerability in passwiki.php in PassWiki 0.9.16 RC3 and earlier allows remote attackers to read ar…
-
Unscored —CVE-2008-6431 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in BMForum 5.6 allow remote attackers to inject arbitrary web scrip…