Skip to content
OpenAdvisories

Archive

March 2009

Vulnerabilities first published in this month (UTC), newest first.

← February 2009 2009 / March April 2009 →
  1. 1 
  2. 250
  3. 320
  4. 419
  5. 532
  6. 641
  7. 7 
  8. 8 
  9. 924
  10. 1019
  11. 1113
  12. 1217
  13. 1321
  14. 149
  15. 15 
  16. 1617
  17. 1711
  18. 1819
  19. 1915
  20. 2031
  21. 21 
  22. 22 
  23. 2319
  24. 2427
  25. 2558
  26. 2613
  27. 2715
  28. 28 
  29. 29 
  30. 3028
  31. 3135
All Critical High Medium Low Exploited only Public exploit

259 results · Clear filters · Feed

  • Unscored —
    CVE-2008-6382 Public exploit

    ASP Portal 3.2.5 stores sensitive information under the web root with insufficient access control, which allows remote …

  • Unscored —
    CVE-2008-6366 Public exploit

    SQL injection vulnerability in logon.jsp in Ad Server Solutions Affiliate Software Java 4.0 allows remote attackers to …

  • Unscored —
    CVE-2008-6349 Public exploit

    SQL injection vulnerability in survey_results_text.php in TurnkeyForms Business Survey Pro 1.0 allows remote attackers …

  • Unscored —
    CVE-2008-6358 Public exploit

    SQL injection vulnerability in group_index.php in Social Groupie allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2008-6350 Public exploit

    SQL injection vulnerability in listtest.php in TurnkeyForms Local Classifieds allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2008-6357 Public exploit

    MyCal Personal Events Calendar stores sensitive information under the web root with insufficient access control, which …

  • Unscored —
    CVE-2008-6355 Public exploit

    The Net Guys ASPired2Protect stores sensitive information under the web root with insufficient access control, which al…

  • Unscored —
    CVE-2008-6362 Public exploit

    SQL injection vulnerability in sitepage.php in Multiple Membership Script 2.5 allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2008-6363 Public exploit

    Stack-based buffer overflow in DesignWorks Professional 4.3.1 and 5.0.7 allows remote attackers to execute arbitrary co…

  • Unscored —
    CVE-2008-6351 Public exploit

    Cross-site scripting (XSS) vulnerability in listtest.php in TurnkeyForms Local Classifieds allows remote attackers to i…

  • Unscored —
    CVE-2008-6361 Public exploit

    Directory traversal vulnerability in index.php in InSun Feed CMS 1.7.3 19Beta allows remote attackers to include and ex…

  • Unscored —
    CVE-2008-6354 Public exploit

    The Net Guys ASPired2poll stores sensitive information under the web root with insufficient access control, which allow…

  • Unscored —
    CVE-2008-6356 Public exploit

    evCal Events Calendar stores sensitive information under the web root with insufficient access control, which allows re…

  • Unscored —
    CVE-2008-6364 Public exploit

    SQL injection vulnerability in logon_process.jsp in Ad Server Solutions Banner Exchange Solution Java allows remote att…

  • Unscored —
    CVE-2008-6347 Public exploit EPSS 31%

    PHP remote file inclusion vulnerability in lib/onguma.class.php in the Onguma Time Sheet (com_ongumatimesheet20) 2.0 4b…

  • Unscored —
    CVE-2008-6348 Public exploit

    Multiple SQL injection vulnerabilities in DevelopItEasy Photo Gallery 1.2 allow remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2008-6353 Public exploit

    SQL injection vulnerability in index.asp in ASP-CMS 1.0 allows remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2008-6365 Public exploit

    SQL injection vulnerability in logon.jsp in Ad Server Solutions Ad Management Software Java allows remote attackers to …

  • Unscored —
    CVE-2008-6352 Public exploit

    SQL injection vulnerability in home.html in Xpoze Pro 4.10 allows remote attackers to execute arbitrary SQL commands vi…