Archive
April 2009
Vulnerabilities first published in this month (UTC), newest first.
257 results · Clear filters · Feed
-
Unscored —CVE-2008-6663 Public exploit
SQL injection vulnerability in profile.php in PHPAuctions.info PHPAuctions (aka PHPAuctionSystem) allows remote attacke…
-
Unscored —CVE-2008-6677 Public exploit
Unrestricted file upload vulnerability in fckeditor251/editor/filemanager/connectors/asp/upload.asp in QuickerSite 1.8.…
-
Unscored —CVE-2008-6665 Public exploit
change.php in Ananta CMS 1.0b5, with magic_quotes_gpc disabled, allows remote attackers to gain administrator privilege…
-
Unscored —CVE-2008-6667 Public exploit
A+ PHP Scripts News Management System (NMS) allows remote attackers to bypass authentication and gain administrator pri…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Status.pm in Apache::Status and Apache2::Status in mod_perl1 and mod_perl2 …
-
Unscored —CVE-2009-1256 Public exploit
SQL injection vulnerability in FlexCMS 2.5 allows remote attackers to execute arbitrary SQL commands via the ItemId par…
-
Unscored —
Multiple stack-based buffer overflows in UltraISO 9.3.3.2685 and earlier allow remote attackers to cause a denial of se…
-
Unscored —
Heap-based buffer overflow in Magic ISO Maker 5.5 build 0274 allows remote attackers to cause a denial of service (cras…
-
Unscored —CVE-2009-1259 Public exploit
SQL injection vulnerability in inc/bb/topic.php in Insane Visions AdaptBB 1.0, when magic_quotes_gpc is disabled, allow…
-
Unscored —CVE-2009-1263 Public exploit
SQL injection vulnerability in sub_commententry.php in the BookJoomlas (com_bookjoomlas) component 0.1 for Joomla! allo…
-
Unscored —CVE-2008-6657 Public exploit
Cross-site request forgery (CSRF) vulnerability in index.php in Simple Machines Forum (SMF) 1.0 before 1.0.15 and 1.1 b…
-
Unscored —CVE-2008-6660 Public exploit
Unrestricted file upload vulnerability in bigdump.php in Alexey Ozerov BigDump 0.29b allows remote attackers to execute…
-
Unscored —CVE-2008-6658 Public exploit
Directory traversal vulnerability in index.php in Simple Machines Forum (SMF) 1.0 before 1.0.15 and 1.1 before 1.1.7 al…
-
Unscored —CVE-2008-6659 Public exploit
Directory traversal vulnerability in index.php in Simple Machines Forum (SMF) 1.0 before 1.0.15 and 1.1 before 1.1.7 al…
-
Unscored —CVE-2008-6652 Public exploit
SQL injection vulnerability in asd.php in OneCMS 2.5 allows remote attackers to execute arbitrary SQL commands via the …
-
Unscored —CVE-2008-6655 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in GEDCOM_TO_MYSQL 2 allow remote attackers to inject arbitrary web…
-
Unscored —CVE-2008-6641 Public exploit
Multiple SQL injection vulnerabilities in Shader TV (Beta) allow remote authenticated administrators to execute arbitra…
-
Unscored —CVE-2008-6642 Public exploit
SQL injection vulnerability in view.php in DotContent FluentCMS 4.x allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2008-6651 Public exploit
Static code injection vulnerability in edithistory.php in OxYProject OxYBox 0.85 allows remote attackers to inject arbi…
-
Unscored —CVE-2008-6634 Public exploit
SQL injection vulnerability in RoomPHPlanning 1.5 allows remote attackers to execute arbitrary SQL commands via the idr…
-
Unscored —CVE-2008-6637 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in forgotPW.php in Library Video Company SAFARI Montage 3.1.x allow…
-
Unscored —CVE-2008-6656 Public exploit
Multiple SQL injection vulnerabilities in Open Auto Classifieds 1.4.3b allow remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2008-6633 Public exploit
SQL injection vulnerability in RoomPHPlanning 1.5 allows remote attackers to execute arbitrary SQL commands via the idr…
-
Unscored —CVE-2008-6631 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in BlogPHP 2.0 allow remote attackers to inject arbitr…
-
Unscored —CVE-2008-6650 Public exploit
del.php in miniBloggie 1.0 allows remote attackers to delete arbitrary posts via a direct request with a modified post_…
-
Unscored —CVE-2008-6635 Public exploit
PHP remote file inclusion vulnerability in skins/default.php in Geody Labs Dagger - The Cutting Edge r12feb2008, when r…
-
Unscored —CVE-2008-6640 Public exploit
Multiple SQL injection vulnerabilities in BatmanPorTaL allow remote attackers to execute arbitrary SQL commands via the…
-
Unscored —CVE-2008-6653 Public exploit
SQL injection vulnerability in webhosting.php in the Webhosting Component (com_webhosting) module before 1.1 RC7 for Jo…
-
Unscored —CVE-2008-6648 Public exploit
SQL injection vulnerability in crumbs.php in Ktools PhotoStore 3.4.3 and 3.5.2 allows remote attackers to execute arbit…
-
Unscored —CVE-2008-6643 Public exploit
LokiCMS 0.3.4 and possibly earlier versions does not properly restrict access to administrative functions, which allows…
-
Unscored —CVE-2008-6644 Public exploit
Cross-site scripting (XSS) vulnerability in Default.aspx in DotNetNuke 4.8.3 and earlier allows remote attackers to inj…
-
Unscored —CVE-2008-6649 Public exploit
SQL injection vulnerability in manager/image_details_editor.php in Ktools PhotoStore 2.5, 2.9.8, 3.1.0, and other versi…
-
Unscored —CVE-2008-6632 Public exploit
SQL injection vulnerability in func/login.php in MercuryBoard 1.1.5 and earlier allows remote attackers to execute arbi…
-
Unscored —CVE-2008-6636 Public exploit
PHP remote file inclusion vulnerability in skins/default.php in Geody Labs Dagger - The Cutting Edge r12feb2008, when r…
-
Unscored —CVE-2008-6647 Public exploit
SQL injection vulnerability in gallery.php in Ktools PhotoStore 3.4.3 allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2008-6623 Public exploit
SQL injection vulnerability in getin.php in WEBBDOMAIN Post Card (aka Web Postcards) 1.02 and earlier allows remote att…
-
Unscored —CVE-2008-6627 Public exploit
SQL injection vulnerability in getin.php in WEBBDOMAIN WebShop 1.2, 1.1, 1.02, and earlier allows remote attackers to e…
-
Unscored —CVE-2008-6624 Public exploit
SQL injection vulnerability in getin.php in WEBBDOMAIN Petition 1.02, 2.0, and 3.0 allows remote attackers to execute a…
-
Unscored —CVE-2008-6625 Public exploit
SQL injection vulnerability in getin.php in WEBBDOMAIN Polls (aka Poll) 1.0 and 1.01 allows remote attackers to execute…
-
Unscored —CVE-2008-6629 Public exploit
Cross-site scripting (XSS) vulnerability in detail.php in WEBBDOMAIN Multi Languages WebShop Online 1.02 allows remote …