Skip to content
OpenAdvisories

Archive

20 April 2009

Vulnerabilities first published on this day (UTC), newest first.

11 results · Feed

  • Unscored —

    SQL injection vulnerability in the Sections module in PHP-Nuke, probably before 8.0, allows remote attackers to execute…

  • Unscored —
    CVE-2008-6731 Public exploit

    Unrestricted file upload vulnerability in submitlink.php in FlexPHPLink Pro 0.0.7 allows remote attackers to execute ar…

  • Unscored —
    CVE-2008-6729 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in password.php in PHPmotion 2.1 and earlier allow remote at…

  • Unscored —
    CVE-2008-6730 Public exploit

    Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPLink Pro 0.0.6 and 0.0.7, when magic_quotes_gpc…

  • Unscored —
    CVE-2008-6727 Public exploit

    Cross-site scripting (XSS) vulnerability in Ultimate PHP Board (UPB) 2.2.2, 2.2.1, and earlier 2.x versions allows remo…

  • Unscored —
    CVE-2009-1347 Public exploit

    Multiple SQL injection vulnerabilities in stats/index.php in chCounter 3.1.3 allow remote attackers to execute arbitrar…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the Localization client module 5.x before 5.x-1.2 and 6.x before 6.x-1.7, a…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the CCK comment reference module 6.x before 6.x-1.2, a module for Drupal, a…

  • Unscored —
    CVE-2009-1346 Public exploit

    SQL injection vulnerability in publico/ficha.php in NetHoteles 3.0 allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2009-1345 Public exploit

    SQL injection vulnerability in document.php in cpCommerce 1.2.8 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the Print (aka Printer, e-mail and PDF versions) module 5.x before 5.x-4.5 …