Archive
April 2009
Vulnerabilities first published in this month (UTC), newest first.
257 results · Clear filters · Feed
-
Unscored —
Stack-based buffer overflow in PortableApps CoolPlayer Portable (aka CoolPlayer+ Portable) 2.19.6 and earlier allows re…
-
Unscored —CVE-2008-6749 Public exploit
Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPDirectory 0.0.1, when magic_quotes_gpc is disab…
-
Unscored —CVE-2008-6750 Public exploit
Unrestricted file upload vulnerability in add.php in FlexPHPDirectory 0.0.1 allows remote attackers to execute arbitrar…
-
Unscored —CVE-2008-6748 Public exploit
Eval injection vulnerability in Megacubo 5.0.7 allows remote attackers to inject and execute arbitrary PHP code via the…
-
Unscored —CVE-2008-6751 Public exploit
Unrestricted file upload vulnerability in index.php in the Twitter Clone (TClone) plugin for ReVou Micro Blogging allow…
-
Unscored —CVE-2008-6752 Public exploit
adminlogin/password.php in the Twitter Clone (TClone) plugin for ReVou Micro Blogging does not verify the original pass…
-
Unscored —CVE-2009-1408 Public exploit
Cross-site scripting (XSS) vulnerability in webSPELL 4.2.0c allows remote attackers to inject arbitrary web script or H…
-
Unscored —CVE-2009-1407 Public exploit
Directory traversal vulnerability in config.php in NotFTP 1.3.1 allows remote attackers to read arbitrary files via a .…
-
Unscored —CVE-2009-1406 Public exploit
Directory traversal vulnerability in cms_detect.php in TotalCalendar 2.4 allows remote attackers to include and execute…
-
Unscored —CVE-2009-1404 Public exploit
SQL injection vulnerability in admin.php in PastelCMS 0.8.0, when magic_quotes_gpc is disabled, allows remote attackers…
-
Unscored —CVE-2009-1411 Public exploit
SQL injection vulnerability in events/inc/events.inc.php in the Events plugin for Seditio CMS 1.0 allows remote attacke…
-
Unscored —CVE-2009-1403 Public exploit
SQL injection vulnerability in product_info.php in CRE Loaded 6.2 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2009-1410 Public exploit
SQL injection vulnerability in index.php in Quick.Cms.Lite 0.5 allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2009-1409 Public exploit
SQL injection vulnerability in usersettings.php in e107 0.7.15 and earlier, when "Extended User Fields" is enabled and …
-
Unscored —CVE-2009-1405 Public exploit
Directory traversal vulnerability in index.php in PastelCMS 0.8.0, when magic_quotes_gpc is disabled, allows remote att…
-
Unscored —CVE-2008-6745 Public exploit
index.php in BlogPHP 2.0 allows remote attackers to gain administrator privileges via a crafted email parameter in a re…
-
Unscored —CVE-2009-1357 Public exploit
CRLF injection vulnerability in da/DA/Login in Sun Java System Delegated Administrator 6.2 through 6.4 allows remote at…
-
Unscored —CVE-2008-6743 Public exploit
RSMScript 1.21 allows remote attackers to bypass authentication and gain administrative privileges by setting the verif…
-
Unscored —CVE-2009-1370 Public exploit
Stack-based buffer overflow in ape_plugin.plg in Xilisoft Video Converter 3.1.53.0704n and 5.1.23.0402 allows remote at…
-
Unscored —CVE-2009-1369 Public exploit
moziloCMS 1.11 allows remote attackers to obtain sensitive information via the (1) gal[] parameter to gallery.php, (2) …
-
Unscored —CVE-2009-1368 Public exploit
Directory traversal vulnerability in index.php in moziloCMS 1.11 allows remote attackers to read arbitrary files via a …
-
Unscored —CVE-2009-1367 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in moziloCMS 1.11 allows remote attackers to inject arbitrary web…
-
Unscored —CVE-2009-0307 Public exploit
Cross-site scripting (XSS) vulnerability in the "Customize Statistics Page" (admin/statistics/ConfigureStatistics) in t…
-
Unscored —CVE-2009-1362 Public exploit
SQL injection vulnerability in administration/index.php in chCounter 3.1.3 allows remote attackers to execute arbitrary…
-
Unscored —CVE-2009-1361 Public exploit
dig.php in GScripts.net DNS Tools allows remote attackers to execute arbitrary commands via shell metacharacters in the…
-
Unscored —CVE-2009-1312 Public exploit
Mozilla Firefox before 3.0.9 and SeaMonkey 1.1.17 do not block javascript: URIs in Refresh headers in HTTP responses, w…
-
Unscored —CVE-2009-1337 Public exploit
The exit_notify function in kernel/exit.c in the Linux kernel before 2.6.30-rc1 does not restrict exit signals when the…
-
Unscored —CVE-2008-6739 Public exploit
Todd Woolums ASP Download management script 1.03 does not require authentication for setupdownload.asp, which allows re…
-
Unscored —CVE-2008-6738 Public exploit
MyShoutPro 1.2 allows remote attackers to bypass authentication and gain administrative access by setting the admin_acc…
-
Unscored —CVE-2008-6740 Public exploit
PHP remote file inclusion vulnerability in html/admin/modules/plugin_admin.php in HoMaP-CMS 0.1 allows remote attackers…
-
Unscored —CVE-2008-6742 Public exploit
Foxy P2P software allows remote attackers to cause a denial of service (memory consumption) via a foxy URI with a downl…
-
Unscored —CVE-2008-6734 Public exploit
Directory traversal vulnerability in Public/index.php in Keller Web Admin CMS 0.94 Pro allows remote attackers to inclu…
-
Unscored —CVE-2008-6741 Public exploit
SQL injection vulnerability in Load.php in Simple Machines Forum (SMF) 1.1.4 and earlier allows remote attackers to exe…
-
Unscored —CVE-2008-6736 Public exploit
Flat Calendar 1.1 does not properly restrict access to administrative functions, which allows remote attackers to (1) a…
-
Unscored —CVE-2008-6735 Public exploit
Directory traversal vulnerability in qc/index.php in ThaiQuickCart 3 allows remote attackers to read arbitrary files vi…
-
Unscored —CVE-2008-6737 Public exploit
Crysis 1.21 and earlier allows remote attackers to obtain sensitive player information such as real IP addresses by sen…
-
Unscored —CVE-2009-1351 Public exploit
Heap-based buffer overflow in Apollo 37zz allows remote attackers to cause a denial of service (application crash) and …
-
Unscored —
Unspecified vulnerability in xtagent.exe in Novell NetIdentity Client before 1.2.4 allows remote attackers to execute a…
-
Unscored —CVE-2009-1354 Public exploit
Directory traversal vulnerability in Mongoose 2.4 allows remote attackers to read arbitrary files via a .. (dot dot) in…
-
Unscored —CVE-2009-1353 Public exploit
Buffer overflow in the http_parse_hex function in libz/misc.c in Zervit Webserver 0.02 allows remote attackers to cause…