March 2009

553 results · Feed

• Unscored —
  CVE-2008-6388 Public exploit

  Rapid Classified 3.1 and 3.15 stores sensitive information under the web root with insufficient access control, which a…

  Mar 2, 2009
• Unscored —
  CVE-2008-6379 Public exploit

  SQL injection vulnerability in pics_pre.asp in Gallery MX 2.0.0 allows remote attackers to execute arbitrary SQL comman…

  Mar 2, 2009
• Unscored —
  CVE-2008-6384

  Multiple cross-site request forgery (CSRF) vulnerabilities in Comment Mail 5.x before 5.x-1.1, a module for Drupal, all…

  Web / CMS
  Mar 2, 2009
• Unscored —
  CVE-2008-6369 Public exploit

  SQL injection vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows remote attackers to execute arbit…

  Mar 2, 2009
• Unscored —
  CVE-2008-6378 Public exploit

  SQL injection vulnerability in calendar_Eventupdate.asp in Calendar Mx Professional 2.0.0 allows remote attackers to ex…

  Mar 2, 2009
• Unscored —
  CVE-2008-6371 Public exploit

  SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary…

  Mar 2, 2009
• Unscored —
  CVE-2008-6385 Public exploit

  Cross-site scripting (XSS) vulnerability in index.php in W3matter RevSense 1.0 allows remote attackers to inject arbitr…

  Mar 2, 2009
• Unscored —
  CVE-2008-6370 Public exploit

  Cross-site scripting (XSS) vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows remote attackers to …

  Mar 2, 2009
• Unscored —
  CVE-2008-6386 Public exploit

  Cross-site scripting (XSS) vulnerability in showads.php in Z1Exchange 1.0 allows remote attackers to inject arbitrary w…

  Mar 2, 2009
• Unscored —
  CVE-2008-6391 Public exploit

  SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the user…

  Mar 2, 2009
• Unscored —
  CVE-2008-6392 Public exploit

  SQL injection vulnerability in showads.php in Z1Exchange allows remote attackers to execute arbitrary SQL commands via …

  Mar 2, 2009
• Unscored —
  CVE-2008-6381 Public exploit

  SQL injection vulnerability in modules/adresses/viewcat.php in bcoos 1.0.13, and possibly earlier, allows remote authen…

  Mar 2, 2009
• Unscored —
  CVE-2008-6382 Public exploit

  ASP Portal 3.2.5 stores sensitive information under the web root with insufficient access control, which allows remote …

  Mar 2, 2009
• Unscored —
  CVE-2008-6366 Public exploit

  SQL injection vulnerability in logon.jsp in Ad Server Solutions Affiliate Software Java 4.0 allows remote attackers to …

  Mar 2, 2009
• Unscored —
  CVE-2008-6349 Public exploit

  SQL injection vulnerability in survey_results_text.php in TurnkeyForms Business Survey Pro 1.0 allows remote attackers …

  Mar 2, 2009
• Unscored —
  CVE-2008-6358 Public exploit

  SQL injection vulnerability in group_index.php in Social Groupie allows remote attackers to execute arbitrary SQL comma…

  Mar 2, 2009
• Unscored —
  CVE-2008-6350 Public exploit

  SQL injection vulnerability in listtest.php in TurnkeyForms Local Classifieds allows remote attackers to execute arbitr…

  Mar 2, 2009
• Unscored —
  CVE-2008-6357 Public exploit

  MyCal Personal Events Calendar stores sensitive information under the web root with insufficient access control, which …

  Mar 2, 2009
• Unscored —
  CVE-2008-6355 Public exploit

  The Net Guys ASPired2Protect stores sensitive information under the web root with insufficient access control, which al…

  Mar 2, 2009
• Unscored —
  CVE-2008-6362 Public exploit

  SQL injection vulnerability in sitepage.php in Multiple Membership Script 2.5 allows remote attackers to execute arbitr…

  Mar 2, 2009
• Unscored —
  CVE-2008-6363 Public exploit

  Stack-based buffer overflow in DesignWorks Professional 4.3.1 and 5.0.7 allows remote attackers to execute arbitrary co…

  Mar 2, 2009
• Unscored —
  CVE-2008-6351 Public exploit

  Cross-site scripting (XSS) vulnerability in listtest.php in TurnkeyForms Local Classifieds allows remote attackers to i…

  Mar 2, 2009
• Unscored —
  CVE-2008-6361 Public exploit

  Directory traversal vulnerability in index.php in InSun Feed CMS 1.7.3 19Beta allows remote attackers to include and ex…

  Mar 2, 2009
• Unscored —
  CVE-2008-6354 Public exploit

  The Net Guys ASPired2poll stores sensitive information under the web root with insufficient access control, which allow…

  Mar 2, 2009
• Unscored —
  CVE-2008-6360

  Cross-site scripting (XSS) vulnerability in the userranks feature in modules/system/admin.php in ImpressCMS 1.0.2 final…

  Mar 2, 2009
• Unscored —
  CVE-2008-6359

  Cross-site scripting (XSS) vulnerability in index.php in Max's Guestbook allows remote attackers to inject arbitrary we…

  Mar 2, 2009
• Unscored —
  CVE-2008-6356 Public exploit

  evCal Events Calendar stores sensitive information under the web root with insufficient access control, which allows re…

  Mar 2, 2009
• Unscored —
  CVE-2008-6364 Public exploit

  SQL injection vulnerability in logon_process.jsp in Ad Server Solutions Banner Exchange Solution Java allows remote att…

  Mar 2, 2009
• Unscored —
  CVE-2008-6347 Public exploit EPSS 31%

  PHP remote file inclusion vulnerability in lib/onguma.class.php in the Onguma Time Sheet (com_ongumatimesheet20) 2.0 4b…

  Mar 2, 2009
• Unscored —
  CVE-2008-6348 Public exploit

  Multiple SQL injection vulnerabilities in DevelopItEasy Photo Gallery 1.2 allow remote attackers to execute arbitrary S…

  Mar 2, 2009
• Unscored —
  CVE-2008-6353 Public exploit

  SQL injection vulnerability in index.asp in ASP-CMS 1.0 allows remote attackers to execute arbitrary SQL commands via t…

  Mar 2, 2009
• Unscored —
  CVE-2008-6365 Public exploit

  SQL injection vulnerability in logon.jsp in Ad Server Solutions Ad Management Software Java allows remote attackers to …

  Mar 2, 2009
• Unscored —
  CVE-2008-6352 Public exploit

  SQL injection vulnerability in home.html in Xpoze Pro 4.10 allows remote attackers to execute arbitrary SQL commands vi…

  Mar 2, 2009