Archive
29 April 2009
Vulnerabilities first published on this day (UTC), newest first.
23 results · Feed
-
Unscored —CVE-2008-6772 Public exploit
login/register_form.php in YourPlace 1.0.2 and earlier does not check that a username already exists when a new account…
-
Unscored —CVE-2008-6771 Public exploit
YourPlace 1.0.2 and earlier allows remote attackers to obtain sensitive system information via a direct request via a d…
-
Unscored —
internettoolbar/edit.php in YourPlace 1.0.2 and earlier does not end execution when an invalid username is detected, wh…
-
Unscored —CVE-2008-6769 Public exploit
Unrestricted file upload vulnerability in upload.php in YourPlace 1.0.2 and earlier allows remote authenticated users t…
-
Unscored —CVE-2008-6768 Public exploit
Unrestricted file upload vulnerability in admin/editor/images.php in K&S Shopsoftware allows remote attackers to execut…
-
Unscored —CVE-2008-6770 Public exploit
YourPlace 1.0.2 and earlier stores sensitive information under the web root with insufficient access control, which all…
-
Unscored —CVE-2008-6773 Public exploit
Static code injection vulnerability in user/internettoolbar/edit.php in YourPlace 1.0.2 and earlier allows remote authe…
-
Unscored —
The logging feature in eMule Plus before 1.2e allows remote attackers to cause a denial of service (infinite loop) via …
-
Unscored —CVE-2009-1487 Public exploit
SQL injection vulnerability in pages/login.php in FunGamez RC1 allows remote attackers to execute arbitrary SQL command…
-
Medium 6.1
MoinMoin Cross-site Scripting (XSS) vulnerability
Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) an AttachFile sub-action in the error_msg function or (2) multiple vectors related …
-
Unscored —
SQL injection vulnerability in action.asp in PuterJam's Blog (PJBlog3) 3.0.6.170 allows remote attackers to execute arb…
-
Unscored —CVE-2009-1488 Public exploit
Directory traversal vulnerability in admin/load.php in FunGamez RC1 allows remote attackers to include and execute arbi…
-
Unscored —CVE-2009-1480 Public exploit
SQL injection vulnerability in index.php Pragyan CMS 2.6.4 allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2009-1483 Public exploit
Unrestricted file upload vulnerability in upload-file.php in Adam Patterson Studio Lounge Address Book 2.5, as reachabl…
-
Unscored —CVE-2009-1486 Public exploit
Directory traversal vulnerability in pmscript.php in Flatchat 3.0 allows remote attackers to include and execute arbitr…
-
Unscored —CVE-2009-1489 Public exploit
includes/user.php in Fungamez RC1 allows remote attackers to bypass authentication and gain administrative access by se…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the web mail interface feature in AXIGEN Mail Server 6.2.2 allows remote at…
-
Unscored —
Unspecified vulnerability in useradd in HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to access arbitrary f…
-
Unscored —
The Intel LANDesk Common Base Agent (CBA) in Symantec Alert Management System 2 (AMS2), as used in Symantec System Cent…
-
Unscored —CVE-2009-1478 Public exploit
Multiple unspecified vulnerabilities in the DTrace ioctl handlers in Sun Solaris 10, and OpenSolaris before snv_114, al…
-
Unscored —
Multiple stack-based buffer overflows in IAO.EXE in the Intel Alert Originator Service in Symantec Alert Management Sys…
-
Unscored —
XFR.EXE in the Intel File Transfer service in the console in Symantec Alert Management System 2 (AMS2), as used in Syma…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in ccLgView.exe in the Symantec Log Viewer, as used in Symantec Ant…