Archive
March 2009
Vulnerabilities first published in this month (UTC), newest first.
259 results · Clear filters · Feed
-
Unscored —CVE-2009-0810 Public exploit
SQL injection vulnerability in login.php in xGuestbook 2.0 allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2009-0812 Public exploit
Stack-based buffer overflow in BreakPoint Software Hex Workshop 4.23, 6.0.1.4603, and other 6.x and earlier versions al…
-
Unscored —CVE-2009-0811 Public exploit
Insecure method vulnerability in the SopCast SopCore ActiveX control in sopocx.ocx 3.0.3.501 allows remote attackers to…
-
Unscored —CVE-2009-0761 Public exploit
Cross-site scripting (XSS) vulnerability in online.asp in Team Board 1.x allows remote attackers to inject arbitrary we…
-
Unscored —CVE-2009-0768 Public exploit
SQL injection vulnerability in forumhop.php in YapBB 1.2 and earlier allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2009-0763 Public exploit
Cross-site scripting (XSS) vulnerability in default.php in Kipper 2.01 allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2009-0767 Public exploit
Kipper 2.01 stores sensitive information under the web root with insufficient access control, which allows remote attac…
-
Unscored —CVE-2009-0760 Public exploit
Team Board 1.x and 2.x stores sensitive information under the web root with insufficient access control, which allows r…
-
Unscored —CVE-2009-0764 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Kipper 2.01 allow remote attackers to inject arbitrary web scrip…
-
Unscored —CVE-2009-0766 Public exploit
Directory traversal vulnerability in default.php in Kipper 2.01 allows remote attackers to include and execute arbitrar…
-
Unscored —CVE-2009-0769 Public exploit
QIP 2005 build 8082 allows remote attackers to cause a denial of service (CPU consumption and application hang) via a c…
-
Unscored —CVE-2009-0765 Public exploit
Directory traversal vulnerability in index.php in Kipper 2.01 allows remote attackers to include and execute arbitrary …
-
Unscored —
PSI Jabber client before 0.12.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbit…
-
Unscored —CVE-2009-0754 Public exploit
PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites host…
-
Unscored —
The JBIG2Stream::readSymbolDictSeg function in Poppler before 0.10.4 allows remote attackers to cause a denial of servi…
-
Unscored —CVE-2009-0753 Public exploit
Absolute path traversal vulnerability in MLDonkey 2.8.4 through 2.9.7 allows remote attackers to read arbitrary files v…
-
Unscored —
The FormWidgetChoice::loadDefaults function in Poppler before 0.10.4 allows remote attackers to cause a denial of servi…
-
Unscored —CVE-2009-0750 Public exploit
SQL injection vulnerability in login.php in the smNews example script for txtSQL 2.2 Final allows remote attackers to e…
-
Unscored —
Yaws before 1.80 allows remote attackers to cause a denial of service (memory consumption and crash) via a request with…
-
Unscored —CVE-2009-0368 Public exploit
OpenSC before 0.11.7 allows physically proximate attackers to bypass intended PIN requirements and read private data ob…
-
Unscored —CVE-2008-6380 Public exploit
SQL injection vulnerability in default.aspx in Active Web Helpdesk 2.0 allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2008-6389 Public exploit
SQL injection vulnerability in asadmin/default.asp in Rae Media Contact Management Software SOHO, Standard, and Enterpr…
-
Unscored —CVE-2008-6387 Public exploit
Quick Tree View .NET 3.1 stores sensitive information under the web root with insufficient access control, which allows…
-
Unscored —CVE-2008-6376 Public exploit
SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the pass…
-
Unscored —CVE-2008-6367 Public exploit
Unrestricted file upload vulnerability in Photos/create_album.php in Social Groupie allows remote authenticated users t…
-
Unscored —CVE-2008-6390 Public exploit
SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary…
-
Unscored —CVE-2008-6374 Public exploit
CodefixerSoftware MailingListPro Free Edition stores sensitive information under the web root with insufficient access …
-
Unscored —CVE-2008-6377 Public exploit
PHP remote file inclusion vulnerability in include/global.php in Multi SEO phpBB 1.1.0 allows remote attackers to execu…
-
Unscored —CVE-2008-6372 Public exploit
SQL injection vulnerability in default.asp in Ocean12 FAQ Manager Pro 1.0 allows remote attackers to execute arbitrary …
-
Unscored —CVE-2008-6388 Public exploit
Rapid Classified 3.1 and 3.15 stores sensitive information under the web root with insufficient access control, which a…
-
Unscored —CVE-2008-6379 Public exploit
SQL injection vulnerability in pics_pre.asp in Gallery MX 2.0.0 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2008-6369 Public exploit
SQL injection vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows remote attackers to execute arbit…
-
Unscored —CVE-2008-6378 Public exploit
SQL injection vulnerability in calendar_Eventupdate.asp in Calendar Mx Professional 2.0.0 allows remote attackers to ex…
-
Unscored —CVE-2008-6371 Public exploit
SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary…
-
Unscored —CVE-2008-6385 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in W3matter RevSense 1.0 allows remote attackers to inject arbitr…
-
Unscored —CVE-2008-6370 Public exploit
Cross-site scripting (XSS) vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows remote attackers to …
-
Unscored —CVE-2008-6386 Public exploit
Cross-site scripting (XSS) vulnerability in showads.php in Z1Exchange 1.0 allows remote attackers to inject arbitrary w…
-
Unscored —CVE-2008-6391 Public exploit
SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the user…
-
Unscored —CVE-2008-6392 Public exploit
SQL injection vulnerability in showads.php in Z1Exchange allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2008-6381 Public exploit
SQL injection vulnerability in modules/adresses/viewcat.php in bcoos 1.0.13, and possibly earlier, allows remote authen…