Skip to content
OpenAdvisories

Archive

6 April 2009

Vulnerabilities first published on this day (UTC), newest first.

24 results · Clear filters · Feed

  • Unscored —
    CVE-2008-6623 Public exploit

    SQL injection vulnerability in getin.php in WEBBDOMAIN Post Card (aka Web Postcards) 1.02 and earlier allows remote att…

  • Unscored —
    CVE-2008-6627 Public exploit

    SQL injection vulnerability in getin.php in WEBBDOMAIN WebShop 1.2, 1.1, 1.02, and earlier allows remote attackers to e…

  • Unscored —
    CVE-2008-6624 Public exploit

    SQL injection vulnerability in getin.php in WEBBDOMAIN Petition 1.02, 2.0, and 3.0 allows remote attackers to execute a…

  • Unscored —
    CVE-2008-6625 Public exploit

    SQL injection vulnerability in getin.php in WEBBDOMAIN Polls (aka Poll) 1.0 and 1.01 allows remote attackers to execute…

  • Unscored —
    CVE-2008-6629 Public exploit

    Cross-site scripting (XSS) vulnerability in detail.php in WEBBDOMAIN Multi Languages WebShop Online 1.02 allows remote …

  • Unscored —
    CVE-2008-6622 Public exploit

    SQL injection vulnerability in choosecard.php in WEBBDOMAIN Post Card (aka Web Postcards) 1.02, 1.01, and earlier allow…

  • Unscored —
    CVE-2008-6626 Public exploit

    SQL injection vulnerability in getin.php in WEBBDOMAIN Quiz 1.02 and earlier allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2008-6620 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in javascript/editor/editor/filemanager/browser/mcpuk/connectors/ph…

  • Unscored —
    CVE-2008-6618 Public exploit

    Multiple SQL injection vulnerabilities in ClassSystem 2.3 allow remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2008-6615 Public exploit

    SQL injection vulnerability in index.php in Zen Software Zen Cart 2008 allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2008-6619 Public exploit

    Unrestricted file upload vulnerability in class/ApplyDB.php in ClassSystem 2.3 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2008-6617 Public exploit

    Unrestricted file upload vulnerability in adm/visual/upload.php in SiteXS CMS 0.1.1 allows remote attackers to execute …

  • Unscored —
    CVE-2008-6616 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Zen Software Zen Cart 2008 allows remote attackers to inject a…

  • Unscored —
    CVE-2008-6611 Public exploit

    SQL injection vulnerability in index.php in Minimal ABlog 0.4 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2008-6612 Public exploit

    Unrestricted file upload vulnerability in admin/uploader.php in Minimal ABlog 0.4 allows remote attackers to execute ar…

  • Unscored —
    CVE-2008-6613 Public exploit

    uploader.php in minimal-ablog 0.4 does not properly restrict access, which allows remote attackers to gain administrati…

  • Unscored —
    CVE-2008-6609 Public exploit

    Cross-site scripting (XSS) vulnerability in phpcksec.php in Stefan Ott phpcksec 0.2 allows remote attackers to inject a…

  • Unscored —
    CVE-2009-1247 Public exploit EPSS 12%

    SQL injection vulnerability in login.php in Acute Control Panel 1.0.0 allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2009-1248 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Acute Control Panel 1.0.0 allow remote attackers to execute arbit…

  • Unscored —
    CVE-2009-1246 Public exploit

    Multiple directory traversal vulnerabilities in Blogplus 1.0 allow remote attackers to include and execute arbitrary lo…

  • Unscored —
    CVE-2008-6606 Public exploit

    SQL injection vulnerability in view.php in MatPo Link 1.2 Beta allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2008-6607 Public exploit

    Cross-site scripting (XSS) vulnerability in view.php in MatPo Link 1.2 Beta allows remote attackers to inject arbitrary…

  • Unscored —
    CVE-2008-6605 Public exploit

    Cross-site request forgery (CSRF) vulnerability in the xslt script in the web-based management interface on the 2wire 1…

  • Unscored —
    CVE-2008-6608 Public exploit

    Multiple SQL injection vulnerabilities in DevelopItEasy Events Calendar 1.2 allow remote attackers to execute arbitrary…