Skip to content
OpenAdvisories

Archive

8 April 2009

Vulnerabilities first published on this day (UTC), newest first.

← March 2009 2009 / April /8 May 2009 →
  1. 128
  2. 221
  3. 325
  4. 41
  5. 5 
  6. 638
  7. 743
  8. 825
  9. 931
  10. 1032
  11. 11 
  12. 12 
  13. 1318
  14. 146
  15. 1563
  16. 1610
  17. 1732
  18. 18 
  19. 19 
  20. 2011
  21. 2126
  22. 2225
  23. 2325
  24. 2423
  25. 25 
  26. 26 
  27. 2719
  28. 2826
  29. 2923
  30. 3016
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • Unscored —
    CVE-2008-6670 Public exploit

    Integer overflow in Vertex4 SunAge 1.08.1 and earlier allows remote attackers to cause a denial of service (crash) via …

  • Unscored —
    CVE-2008-6664 Public exploit

    action.php in SH-News 3.0 allows remote attackers to bypass authentication and gain administrator privileges by setting…

  • Unscored —
    CVE-2008-6674 Public exploit

    mailPage.asp in QuickerSite 1.8.5 allows remote attackers to flood e-mail accounts with messages via a large number of …

  • Unscored —
    CVE-2008-6675 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in QuickerSite 1.8.5 allow remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2008-6676 Public exploit

    QuickerSite 1.8.5 allows remote attackers to obtain sensitive information via a request to showThumb.aspx without any p…

  • Unscored —
    CVE-2008-6678 Public exploit

    SQL injection vulnerability in asp/includes/contact.asp in QuickerSite 1.8.5 allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2008-6673 Public exploit

    asp/bs_login.asp in QuickerSite 1.8.5 does not properly restrict access to administrative functionality, which allows r…

  • Unscored —
    CVE-2008-6669 Public exploit

    viewrq.php in nweb2fax 0.2.7 and earlier allows remote attackers to execute arbitrary code via shell metacharacters in …

  • Unscored —
    CVE-2008-6668 Public exploit Scanner template EPSS 14%

    Multiple directory traversal vulnerabilities in nweb2fax 0.2.7 and earlier allow remote attackers to read arbitrary fil…

  • Unscored —
    CVE-2008-6663 Public exploit

    SQL injection vulnerability in profile.php in PHPAuctions.info PHPAuctions (aka PHPAuctionSystem) allows remote attacke…

  • Unscored —
    CVE-2008-6677 Public exploit

    Unrestricted file upload vulnerability in fckeditor251/editor/filemanager/connectors/asp/upload.asp in QuickerSite 1.8.…

  • Unscored —
    CVE-2008-6665 Public exploit

    change.php in Ananta CMS 1.0b5, with magic_quotes_gpc disabled, allows remote attackers to gain administrator privilege…

  • Unscored —
    CVE-2008-6667 Public exploit

    A+ PHP Scripts News Management System (NMS) allows remote attackers to bypass authentication and gain administrator pri…