Skip to content
OpenAdvisories

Archive

28 April 2009

Vulnerabilities first published on this day (UTC), newest first.

12 results · Clear filters · Feed

  • Unscored —
    CVE-2008-6764 Public exploit

    Cross-site scripting (XSS) vulnerability in login.php in Silentum LoginSys 1.0.0 allows remote attackers to inject arbi…

  • Unscored —
    CVE-2008-6758 Public exploit

    Cross-site request forgery (CSRF) vulnerability in cart_save.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote at…

  • Unscored —
    CVE-2008-6761 Public exploit

    Static code injection vulnerability in admin/install.php in Flexcustomer 0.0.6 might allow remote attackers to inject a…

  • Unscored —
    CVE-2008-6763 Public exploit

    login2.php in Silentum LoginSys 1.0.0 allows remote attackers to bypass authentication and obtain access to an arbitrar…

  • Unscored —
    CVE-2008-6765 Public exploit

    ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to access the contents of an arbitrary shopping cart via a m…

  • Unscored —
    CVE-2008-6757 Public exploit

    Cross-site scripting (XSS) vulnerability in manuals_search.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote atta…

  • Unscored —
    CVE-2009-1458 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in admin/index.php in razorCMS before 0.4 allow remote attackers to…

  • Unscored —
    CVE-2009-1452 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in theme/format.php in SMA-DB 0.3.13 allow remote attackers to execu…

  • Unscored —
    CVE-2009-1453 Public exploit

    SQL injection vulnerability in class.eport.php in Tiny Blogr 1.0.0 rc4, when magic_quotes_gpc is disabled, allows remot…

  • Unscored —
    CVE-2009-1456 Public exploit

    Directory traversal vulnerability in admin.php in Malleo 1.2.3 allows remote authenticated administrators to include an…

  • Unscored —
    CVE-2009-1451 Public exploit

    Cross-site scripting (XSS) vulnerability in startpage.php in SMA-DB 0.3.12 allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2009-1450 Public exploit

    PHP remote file inclusion vulnerability in format.php in SMA-DB 0.3.12 allows remote attackers to execute arbitrary PHP…