28 April 2009

26 results · Feed

• Unscored —
  CVE-2008-6766

  cart_save.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to cause a denial of service (excessive sho…

  Apr 28, 2009
• Unscored —
  CVE-2008-6759

  ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to obtain sensitive information via a URL in the POST_DATA p…

  Apr 28, 2009
• Unscored —
  CVE-2008-6764 Public exploit

  Cross-site scripting (XSS) vulnerability in login.php in Silentum LoginSys 1.0.0 allows remote attackers to inject arbi…

  Apr 28, 2009
• Unscored —
  CVE-2008-6758 Public exploit

  Cross-site request forgery (CSRF) vulnerability in cart_save.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote at…

  Apr 28, 2009
• Unscored —
  CVE-2008-6760

  ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to obtain sensitive information via an unauthenticated add a…

  Apr 28, 2009
• Unscored —
  CVE-2008-6761 Public exploit

  Static code injection vulnerability in admin/install.php in Flexcustomer 0.0.6 might allow remote attackers to inject a…

  Apr 28, 2009
• Unscored —
  CVE-2008-6762

  Open redirect vulnerability in wp-admin/upgrade.php in WordPress, probably 2.6.x, allows remote attackers to redirect u…

  wordpress Debian
  Apr 28, 2009
• Unscored —
  CVE-2008-6767

  wp-admin/upgrade.php in WordPress, probably 2.6.x, allows remote attackers to upgrade the application, and possibly cau…

  wordpress Debian
  Apr 28, 2009
• Unscored —
  CVE-2008-6763 Public exploit

  login2.php in Silentum LoginSys 1.0.0 allows remote attackers to bypass authentication and obtain access to an arbitrar…

  Apr 28, 2009
• Unscored —
  CVE-2008-6765 Public exploit

  ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to access the contents of an arbitrary shopping cart via a m…

  Apr 28, 2009
• Unscored —
  CVE-2008-6757 Public exploit

  Cross-site scripting (XSS) vulnerability in manuals_search.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote atta…

  Apr 28, 2009
• Unscored —
  CVE-2008-2438 EPSS 11%

  Integer overflow in ovalarmsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote atta…

  Apr 28, 2009
• Unscored —
  CVE-2009-1458 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in admin/index.php in razorCMS before 0.4 allow remote attackers to…

  Apr 28, 2009
• Unscored —
  CVE-2009-1452 Public exploit

  Multiple PHP remote file inclusion vulnerabilities in theme/format.php in SMA-DB 0.3.13 allow remote attackers to execu…

  Apr 28, 2009
• Unscored —
  CVE-2009-1459

  Cross-site request forgery (CSRF) vulnerability in razorCMS before 0.4 allows remote attackers to hijack the authentica…

  Apr 28, 2009
• Unscored —
  CVE-2009-1463

  Static code injection vulnerability in razorCMS before 0.4 allows remote attackers to inject arbitrary PHP code into an…

  Apr 28, 2009
• Unscored —
  CVE-2009-1455

  Multiple cross-site request forgery (CSRF) vulnerabilities in WebCollab before 2.50 (aka Billy Goat) allow remote attac…

  Apr 28, 2009
• Unscored —
  CVE-2009-1462

  The Security Manager in razorCMS before 0.4 does not verify the permissions of every file owned by the apache user acco…

  Apr 28, 2009
• Unscored —
  CVE-2009-1453 Public exploit

  SQL injection vulnerability in class.eport.php in Tiny Blogr 1.0.0 rc4, when magic_quotes_gpc is disabled, allows remot…

  Apr 28, 2009
• Unscored —
  CVE-2009-1461

  Cross-site scripting (XSS) vulnerability in the Create New Page form in razorCMS 0.3 RC2 and earlier allows remote auth…

  Apr 28, 2009
• Unscored —
  CVE-2009-1454

  Cross-site scripting (XSS) vulnerability in tasks.php in WebCollab before 2.50 (aka Billy Goat) allows remote attackers…

  Apr 28, 2009
• Unscored —
  CVE-2009-1457

  Cross-site scripting (XSS) vulnerability in player.php in Nuke Evolution Xtreme 2.x allows remote attackers to inject a…

  Apr 28, 2009
• Unscored —
  CVE-2009-1456 Public exploit

  Directory traversal vulnerability in admin.php in Malleo 1.2.3 allows remote authenticated administrators to include an…

  Apr 28, 2009
• Unscored —
  CVE-2009-1460

  razorCMS before 0.4 uses weak permissions for (1) admin/core/admin_config.php, which allows local users to obtain the a…

  Apr 28, 2009
• Unscored —
  CVE-2009-1451 Public exploit

  Cross-site scripting (XSS) vulnerability in startpage.php in SMA-DB 0.3.12 allows remote attackers to inject arbitrary …

  Apr 28, 2009
• Unscored —
  CVE-2009-1450 Public exploit

  PHP remote file inclusion vulnerability in format.php in SMA-DB 0.3.12 allows remote attackers to execute arbitrary PHP…

  Apr 28, 2009