Archive
March 2009
Vulnerabilities first published in this month (UTC), newest first.
259 results · Clear filters · Feed
-
Unscored —CVE-2008-6439 Public exploit
Cross-site scripting (XSS) vulnerability in search_results.php in ABK-Soft AbleDating 2.4 allows remote attackers to in…
-
Unscored —CVE-2008-6429 Public exploit
SQL injection vulnerability in the PrayerCenter (com_prayercenter) component 1.4.9 and earlier for Joomla! allows remot…
-
Unscored —CVE-2008-6438 Public exploit
SQL injection vulnerability in macgurublog_menu/macgurublog.php in the MacGuru BLOG Engine plugin 2.2 for e107 allows r…
-
Unscored —CVE-2008-6437 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in PHPFreeForum 1.0 RC2 and earlier allow remote attackers to injec…
-
Unscored —CVE-2008-6435 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in phpSQLiteCMS 1 RC2 allow remote attackers to inject arbitrary we…
-
Unscored —CVE-2008-6425 Public exploit
SQL injection vulnerability in news.php in ComicShout 2.8 allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2008-6420 Public exploit
Social Site Generator (SSG) 2.0 allows remote attackers to read arbitrary files via the file parameter to (1) filedload…
-
Unscored —CVE-2008-6418 Public exploit
SQL injection vulnerability in scrape.php in TorrentTrader before 2008-05-13 allows remote attackers to execute arbitra…
-
Unscored —CVE-2008-6430 Public exploit
SQL injection vulnerability in the MyContent (com_mycontent) component 1.1.13 for Joomla! allows remote attackers to ex…
-
Unscored —CVE-2008-6410 Public exploit
Directory traversal vulnerability in show.php in ol'bookmarks manager 0.7.5 and earlier allows remote attackers to incl…
-
Unscored —CVE-2008-6408 Public exploit
PHP remote file inclusion vulnerability in frame.php in ol'bookmarks manager 0.7.5 allows remote attackers to execute a…
-
Unscored —CVE-2008-6401 Public exploit
SQL injection vulnerability in sayfa.php in JETIK-WEB allows remote attackers to execute arbitrary SQL commands via the…
-
Unscored —CVE-2008-6409 Public exploit
SQL injection vulnerability in index.php in ol'bookmarks manager 0.7.5 allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2008-6404 Public exploit
Cross-site scripting (XSS) vulnerability in add_calendars.php in eXtrovert Software Thyme 1.3 allows remote attackers t…
-
Unscored —CVE-2008-6402 Public exploit
PHP remote file inclusion vulnerability in hu/modules/reg-new/modstart.php in Sofi WebGui 0.6.3 PRE and earlier allows …
-
Unscored —CVE-2008-6407 Public exploit
Directory traversal vulnerability in frame.php in ol'bookmarks manager 0.7.5 allows remote attackers to include and exe…
-
Unscored —CVE-2008-6405 Public exploit
SQL injection vulnerability in showcategory.php in Hotscripts Clone allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2008-6406 Public exploit
Cross-site scripting (XSS) vulnerability in admin.php in DataLife Engine (DLE) 7.2 allows remote attackers to inject ar…
-
Unscored —CVE-2008-6414 Public exploit
SQL injection vulnerability in detail.php in AJ Auction Pro Platinum Skin 2 allows remote attackers to execute arbitrar…
-
Unscored —CVE-2008-6403 Public exploit
PHP remote file inclusion vulnerability in themes/default/include/html/insert.inc.php in OpenRat 0.8-beta4 and earlier …
-
Unscored —CVE-2008-6411 Public exploit
Explay CMS 2.1 and earlier allows remote attackers to bypass authentication and gain administrative access by setting t…
-
Unscored —CVE-2009-0835 Public exploit
The __secure_computing function in kernel/seccomp.c in the seccomp subsystem in the Linux kernel 2.6.28.7 and earlier o…
-
Unscored —CVE-2009-0828 Public exploit
QuoteBook stores quotes.inc under the web root with insufficient access control, which allows remote attackers to obtai…
-
Unscored —CVE-2009-0833 Public exploit
Heap-based buffer overflow in gen_msn.dll in the gen_msn plugin 0.31 for Winamp 5.541 allows remote attackers to execut…
-
Unscored —CVE-2009-0832 Public exploit
SQL injection vulnerability in items.php in the E-Cart module 1.3 for PHP-Fusion allows remote attackers to execute arb…
-
Unscored —CVE-2009-0831 Public exploit
SQL injection vulnerability in members.php in the Members CV (job) module 1.0 for PHP-Fusion, when magic_quotes_gpc is …
-
Unscored —CVE-2009-0826 Public exploit
BlogHelper stores common_db.inc under the web root with insufficient access control, which allows remote attackers to d…
-
Unscored —CVE-2009-0827 Public exploit
PollHelper stores poll.inc under the web root with insufficient access control, which allows remote attackers to downlo…
-
Unscored —CVE-2009-0829 Public exploit
Multiple SQL injection vulnerabilities in QuoteBook allow remote attackers to execute arbitrary SQL commands via the (1…
-
Unscored —
sql/item_xmlfunc.cc in MySQL 5.1 before 5.1.32 and 6.0 before 6.0.10 allows remote authenticated users to cause a denia…
-
Unscored —CVE-2009-0814 Public exploit
Cross-site scripting (XSS) vulnerability in Widgets.aspx in Blogsa 1.0 Beta 3 and earlier allows remote attackers to in…
-
Medium —
TYPO3 leaks a hash secret in an error message
The jumpUrl mechanism in class.tslib_fe.php in TYPO3 3.3.x through 3.8.x, 4.0 before 4.0.12, 4.1 before 4.1.10, 4.2 before 4.2.6, and 4.3alpha1 leaks a hash secret (juHash) in an error message, which allows remote attackers to read arbitrary files by includin…
-
Unscored —
The Python AI module in Wesnoth 1.4.x and 1.5 before 1.5.11 allows remote attackers to escape the sandbox and execute a…
-
Unscored —CVE-2009-0037 Public exploit
The redirect implementation in curl and libcurl 5.11 through 7.19.3, when CURLOPT_FOLLOWLOCATION is enabled, accepts ar…
-
Unscored —CVE-2009-0813 Public exploit
Insecure method vulnerability in the ImeraIEPlugin ActiveX control (ImeraIEPlugin.dll 1.0.2.54) in Imera TeamLinks Clie…
-
Unscored —CVE-2009-0820 Public exploit
Multiple eval injection vulnerabilities in phpScheduleIt before 1.2.11 allow remote attackers to execute arbitrary code…
-
Unscored —CVE-2009-0821 Public exploit
Mozilla Firefox 2.0.0.20 and earlier allows remote attackers to cause a denial of service (application crash) via neste…
-
Unscored —CVE-2008-6394 Public exploit
SQL injection vulnerability in core/user.php in CS-Cart 1.3.5 and earlier allows remote attackers to execute arbitrary …
-
Unscored —CVE-2008-6396 Public exploit
Cross-site scripting (XSS) vulnerability in account.php in Celerondude Uploader 6.1 allows remote attackers to inject a…
-
Unscored —CVE-2009-0807 Public exploit
zFeeder 1.6 allows remote attackers to gain administrative access via a direct request to admin.php.