Skip to content
OpenAdvisories

Archive

March 2009

Vulnerabilities first published in this month (UTC), newest first.

← February 2009 2009 / March April 2009 →
  1. 1 
  2. 250
  3. 320
  4. 419
  5. 532
  6. 641
  7. 7 
  8. 8 
  9. 924
  10. 1019
  11. 1113
  12. 1217
  13. 1321
  14. 149
  15. 15 
  16. 1617
  17. 1711
  18. 1819
  19. 1915
  20. 2031
  21. 21 
  22. 22 
  23. 2319
  24. 2427
  25. 2558
  26. 2613
  27. 2715
  28. 28 
  29. 29 
  30. 3028
  31. 3135
All Critical High Medium Low Exploited only Public exploit

553 results · Feed

  • Unscored —
    CVE-2008-6424

    Directory traversal vulnerability in FFFTP 1.96b allows remote FTP servers to create or overwrite arbitrary files via a…

  • Unscored —
    CVE-2008-6439 Public exploit

    Cross-site scripting (XSS) vulnerability in search_results.php in ABK-Soft AbleDating 2.4 allows remote attackers to in…

  • Unscored —
    CVE-2008-6433

    Cross-site scripting (XSS) vulnerability in index.cfm in Blue River Interactive Group Sava CMS before 5.0.122 allows re…

  • Unscored —
    CVE-2008-6429 Public exploit

    SQL injection vulnerability in the PrayerCenter (com_prayercenter) component 1.4.9 and earlier for Joomla! allows remot…

  • Unscored —
    CVE-2008-6438 Public exploit

    SQL injection vulnerability in macgurublog_menu/macgurublog.php in the MacGuru BLOG Engine plugin 2.2 for e107 allows r…

  • Unscored —
    CVE-2008-6437 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in PHPFreeForum 1.0 RC2 and earlier allow remote attackers to injec…

  • Unscored —
    CVE-2008-6435 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in phpSQLiteCMS 1 RC2 allow remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2008-6425 Public exploit

    SQL injection vulnerability in news.php in ComicShout 2.8 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2008-6416

    Multiple cross-site scripting (XSS) vulnerabilities in GreenSQL-Console before 0.3.5 allow remote attackers to inject a…

  • Unscored —
    CVE-2008-6420 Public exploit

    Social Site Generator (SSG) 2.0 allows remote attackers to read arbitrary files via the file parameter to (1) filedload…

  • Unscored —
    CVE-2008-6434

    SQL injection vulnerability in index.cfm in Blue River Interactive Group Sava CMS before 5.0.122 allows remote attacker…

  • Unscored —
    CVE-2008-6418 Public exploit

    SQL injection vulnerability in scrape.php in TorrentTrader before 2008-05-13 allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2008-6430 Public exploit

    SQL injection vulnerability in the MyContent (com_mycontent) component 1.1.13 for Joomla! allows remote attackers to ex…

  • Unscored —
    CVE-2008-6440

    Cerberus Helpdesk before 4.0 (Build 600) allows remote attackers to obtain sensitive information via direct requests fo…

  • Unscored —
    CVE-2009-0838

    The crypto pseudo device driver in Sun Solaris 10, and OpenSolaris snv_88 through snv_102, does not properly free memor…

  • Unscored —
    CVE-2008-6410 Public exploit

    Directory traversal vulnerability in show.php in ol'bookmarks manager 0.7.5 and earlier allows remote attackers to incl…

  • Unscored —
    CVE-2008-6415

    Buffer overflow in YoungZSoft CCProxy 6.5 might allow remote attackers to execute arbitrary code via a CONNECTION reque…

  • Unscored —
    CVE-2008-6408 Public exploit

    PHP remote file inclusion vulnerability in frame.php in ol'bookmarks manager 0.7.5 allows remote attackers to execute a…

  • Unscored —
    CVE-2008-6401 Public exploit

    SQL injection vulnerability in sayfa.php in JETIK-WEB allows remote attackers to execute arbitrary SQL commands via the…

  • Unscored —
    CVE-2008-6409 Public exploit

    SQL injection vulnerability in index.php in ol'bookmarks manager 0.7.5 allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2008-6404 Public exploit

    Cross-site scripting (XSS) vulnerability in add_calendars.php in eXtrovert Software Thyme 1.3 allows remote attackers t…

  • Unscored —
    CVE-2008-6413

    Cross-site scripting (XSS) vulnerability in the Answers module 5.x-1.x-dev and possibly other 5.x versions, a module fo…

    Web / CMS
  • Unscored —
    CVE-2008-6402 Public exploit

    PHP remote file inclusion vulnerability in hu/modules/reg-new/modstart.php in Sofi WebGui 0.6.3 PRE and earlier allows …

  • Unscored —
    CVE-2008-6407 Public exploit

    Directory traversal vulnerability in frame.php in ol'bookmarks manager 0.7.5 allows remote attackers to include and exe…

  • Unscored —
    CVE-2008-6412

    Unspecified vulnerability in Vignette Content Management 7.3.0.5, 7.3.1, 7.3.1.1, 7.4, and 7.5 allows "low privileged" …

  • Unscored —
    CVE-2008-6405 Public exploit

    SQL injection vulnerability in showcategory.php in Hotscripts Clone allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2008-6406 Public exploit

    Cross-site scripting (XSS) vulnerability in admin.php in DataLife Engine (DLE) 7.2 allows remote attackers to inject ar…

  • Unscored —
    CVE-2008-6414 Public exploit

    SQL injection vulnerability in detail.php in AJ Auction Pro Platinum Skin 2 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2008-6403 Public exploit

    PHP remote file inclusion vulnerability in themes/default/include/html/insert.inc.php in OpenRat 0.8-beta4 and earlier …

  • Unscored —
    CVE-2008-6411 Public exploit

    Explay CMS 2.1 and earlier allows remote attackers to bypass authentication and gain administrative access by setting t…

  • Unscored —
    CVE-2009-0835 Public exploit

    The __secure_computing function in kernel/seccomp.c in the seccomp subsystem in the Linux kernel 2.6.28.7 and earlier o…

  • Unscored —
    CVE-2009-0834

    The audit_syscall_entry function in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform does not properly hand…

  • Unscored —
    CVE-2008-6399

    Unspecified vulnerability in DotNetNuke 4.5.2 through 4.9 allows remote attackers to "add additional roles to their use…

  • Unscored —
    CVE-2008-6400

    Cross-site scripting (XSS) vulnerability in refbase before 0.9.5 allows remote attackers to inject arbitrary web script…

  • Unscored —
    CVE-2009-0828 Public exploit

    QuoteBook stores quotes.inc under the web root with insufficient access control, which allows remote attackers to obtai…

  • Unscored —
    CVE-2009-0833 Public exploit

    Heap-based buffer overflow in gen_msn.dll in the gen_msn plugin 0.31 for Winamp 5.541 allows remote attackers to execut…

  • Unscored —
    CVE-2009-0832 Public exploit

    SQL injection vulnerability in items.php in the E-Cart module 1.3 for PHP-Fusion allows remote attackers to execute arb…

  • Unscored —
    CVE-2009-0831 Public exploit

    SQL injection vulnerability in members.php in the Members CV (job) module 1.0 for PHP-Fusion, when magic_quotes_gpc is …

  • Unscored —
    CVE-2009-0826 Public exploit

    BlogHelper stores common_db.inc under the web root with insufficient access control, which allows remote attackers to d…

  • Unscored —
    CVE-2009-0830

    Cross-site scripting (XSS) vulnerability in QuoteBook allows remote attackers to inject arbitrary web script or HTML vi…