Skip to content
OpenAdvisories

Archive

24 April 2009

Vulnerabilities first published on this day (UTC), newest first.

← March 2009 2009 / April /24 May 2009 →
  1. 128
  2. 221
  3. 325
  4. 41
  5. 5 
  6. 638
  7. 743
  8. 825
  9. 931
  10. 1032
  11. 11 
  12. 12 
  13. 1318
  14. 146
  15. 1563
  16. 1610
  17. 1732
  18. 18 
  19. 19 
  20. 2011
  21. 2126
  22. 2225
  23. 2325
  24. 2423
  25. 25 
  26. 26 
  27. 2719
  28. 2826
  29. 2923
  30. 3016
All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • Unscored —
    CVE-2008-6749 Public exploit

    Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPDirectory 0.0.1, when magic_quotes_gpc is disab…

  • Unscored —
    CVE-2008-6750 Public exploit

    Unrestricted file upload vulnerability in add.php in FlexPHPDirectory 0.0.1 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2008-6748 Public exploit

    Eval injection vulnerability in Megacubo 5.0.7 allows remote attackers to inject and execute arbitrary PHP code via the…

  • Unscored —
    CVE-2008-6751 Public exploit

    Unrestricted file upload vulnerability in index.php in the Twitter Clone (TClone) plugin for ReVou Micro Blogging allow…

  • Unscored —
    CVE-2008-6752 Public exploit

    adminlogin/password.php in the Twitter Clone (TClone) plugin for ReVou Micro Blogging does not verify the original pass…

  • Unscored —
    CVE-2009-1408 Public exploit

    Cross-site scripting (XSS) vulnerability in webSPELL 4.2.0c allows remote attackers to inject arbitrary web script or H…

  • Unscored —
    CVE-2009-1407 Public exploit

    Directory traversal vulnerability in config.php in NotFTP 1.3.1 allows remote attackers to read arbitrary files via a .…

  • Unscored —
    CVE-2009-1406 Public exploit

    Directory traversal vulnerability in cms_detect.php in TotalCalendar 2.4 allows remote attackers to include and execute…

  • Unscored —
    CVE-2009-1404 Public exploit

    SQL injection vulnerability in admin.php in PastelCMS 0.8.0, when magic_quotes_gpc is disabled, allows remote attackers…

  • Unscored —
    CVE-2009-1411 Public exploit

    SQL injection vulnerability in events/inc/events.inc.php in the Events plugin for Seditio CMS 1.0 allows remote attacke…

  • Unscored —
    CVE-2009-1403 Public exploit

    SQL injection vulnerability in product_info.php in CRE Loaded 6.2 allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2009-1410 Public exploit

    SQL injection vulnerability in index.php in Quick.Cms.Lite 0.5 allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2009-1409 Public exploit

    SQL injection vulnerability in usersettings.php in e107 0.7.15 and earlier, when "Extended User Fields" is enabled and …

  • Unscored —
    CVE-2009-1405 Public exploit

    Directory traversal vulnerability in index.php in PastelCMS 0.8.0, when magic_quotes_gpc is disabled, allows remote att…