Archive
6 April 2009
Vulnerabilities first published on this day (UTC), newest first.
38 results · Feed
-
Unscored —CVE-2008-6623 Public exploit
SQL injection vulnerability in getin.php in WEBBDOMAIN Post Card (aka Web Postcards) 1.02 and earlier allows remote att…
-
Unscored —CVE-2008-6627 Public exploit
SQL injection vulnerability in getin.php in WEBBDOMAIN WebShop 1.2, 1.1, 1.02, and earlier allows remote attackers to e…
-
Unscored —CVE-2008-6624 Public exploit
SQL injection vulnerability in getin.php in WEBBDOMAIN Petition 1.02, 2.0, and 3.0 allows remote attackers to execute a…
-
Unscored —CVE-2008-6625 Public exploit
SQL injection vulnerability in getin.php in WEBBDOMAIN Polls (aka Poll) 1.0 and 1.01 allows remote attackers to execute…
-
Unscored —
Unspecified vulnerability in GraphicsMagick before 1.2.3 allows remote attackers to cause a denial of service (crash) v…
-
Unscored —CVE-2008-6629 Public exploit
Cross-site scripting (XSS) vulnerability in detail.php in WEBBDOMAIN Multi Languages WebShop Online 1.02 allows remote …
-
Unscored —CVE-2008-6622 Public exploit
SQL injection vulnerability in choosecard.php in WEBBDOMAIN Post Card (aka Web Postcards) 1.02, 1.01, and earlier allow…
-
Unscored —CVE-2008-6626 Public exploit
SQL injection vulnerability in getin.php in WEBBDOMAIN Quiz 1.02 and earlier allows remote attackers to execute arbitra…
-
Unscored —CVE-2008-6620 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in javascript/editor/editor/filemanager/browser/mcpuk/connectors/ph…
-
Unscored —CVE-2008-6618 Public exploit
Multiple SQL injection vulnerabilities in ClassSystem 2.3 allow remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2008-6615 Public exploit
SQL injection vulnerability in index.php in Zen Software Zen Cart 2008 allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2008-6619 Public exploit
Unrestricted file upload vulnerability in class/ApplyDB.php in ClassSystem 2.3 allows remote attackers to execute arbit…
-
Unscored —
Multiple SQL injection vulnerabilities in microcms-admin-login.php in Implied By Design (IBD) Micro CMS 3.5 (aka 0.3.5)…
-
Unscored —CVE-2008-6617 Public exploit
Unrestricted file upload vulnerability in adm/visual/upload.php in SiteXS CMS 0.1.1 allows remote attackers to execute …
-
Unscored —CVE-2008-6616 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Zen Software Zen Cart 2008 allows remote attackers to inject a…
-
Unscored —CVE-2008-6611 Public exploit
SQL injection vulnerability in index.php in Minimal ABlog 0.4 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —
Absolute path traversal vulnerability in phpcksec.php in Stefan Ott phpcksec 0.2.0 allows remote attackers to list arbi…
-
Unscored —CVE-2008-6612 Public exploit
Unrestricted file upload vulnerability in admin/uploader.php in Minimal ABlog 0.4 allows remote attackers to execute ar…
-
Unscored —CVE-2008-6613 Public exploit
uploader.php in minimal-ablog 0.4 does not properly restrict access, which allows remote attackers to gain administrati…
-
Unscored —CVE-2008-6609 Public exploit
Cross-site scripting (XSS) vulnerability in phpcksec.php in Stefan Ott phpcksec 0.2 allows remote attackers to inject a…
-
Unscored —
SQL injection vulnerability in login.php in Acute Control Panel 1.0.0 allows remote attackers to execute arbitrary SQL …
-
Unscored —
Multiple SQL injection vulnerabilities in the insert_to_pastebin function in php/cccp-admin/inc/functions.php in CCCP C…
-
Unscored —CVE-2009-1248 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Acute Control Panel 1.0.0 allow remote attackers to execute arbit…
-
Unscored —CVE-2009-1246 Public exploit
Multiple directory traversal vulnerabilities in Blogplus 1.0 allow remote attackers to include and execute arbitrary lo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Feed element mapper 5.x before 5.x-1.1, a module for Drupal, allows remote …
-
Unscored —
Unspecified vulnerability in a guest virtual device driver in VMware Workstation before 5.5.9 build 126128, and 6.5.1 a…
-
Unscored —
VI Client in VMware VirtualCenter before 2.5 Update 4, VMware ESXi 3.5 before Update 4, and VMware ESX 3.5 before Updat…
-
Unscored —
Unspecified vulnerability in the ACE shared folders implementation in the VMware Host Guest File System (HGFS) shared f…
-
Unscored —
Heap-based buffer overflow in the VNnc Codec in VMware Workstation 6.5.x before 6.5.2 build 156735, VMware Player 2.5.x…
-
Unscored —
Heap-based buffer overflow in the VNnc Codec in VMware Workstation 6.5.x before 6.5.2 build 156735, VMware Player 2.5.x…
-
Unscored —
Unspecified vulnerability in vmci.sys in the Virtual Machine Communication Interface (VMCI) in VMware Workstation 6.5.1…
-
Unscored —
Unspecified vulnerability in an ioctl in hcmon.sys in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and ear…
-
Unscored —CVE-2008-6606 Public exploit
SQL injection vulnerability in view.php in MatPo Link 1.2 Beta allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2008-6607 Public exploit
Cross-site scripting (XSS) vulnerability in view.php in MatPo Link 1.2 Beta allows remote attackers to inject arbitrary…
-
Unscored —CVE-2008-6605 Public exploit
Cross-site request forgery (CSRF) vulnerability in the xslt script in the web-based management interface on the 2wire 1…
-
Unscored —CVE-2008-6608 Public exploit
Multiple SQL injection vulnerabilities in DevelopItEasy Events Calendar 1.2 allow remote attackers to execute arbitrary…
-
Unscored —
net/ipv4/udp.c in the Linux kernel before 2.6.29.1 performs an unlocking step in certain incorrect circumstances, which…
-
Unscored —
The vmx_set_msr function in arch/x86/kvm/vmx.c in the VMX implementation in the KVM subsystem in the Linux kernel befor…