Archive
April 2009
Vulnerabilities first published in this month (UTC), newest first.
257 results · Clear filters · Feed
-
Unscored —CVE-2008-6622 Public exploit
SQL injection vulnerability in choosecard.php in WEBBDOMAIN Post Card (aka Web Postcards) 1.02, 1.01, and earlier allow…
-
Unscored —CVE-2008-6626 Public exploit
SQL injection vulnerability in getin.php in WEBBDOMAIN Quiz 1.02 and earlier allows remote attackers to execute arbitra…
-
Unscored —CVE-2008-6620 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in javascript/editor/editor/filemanager/browser/mcpuk/connectors/ph…
-
Unscored —CVE-2008-6618 Public exploit
Multiple SQL injection vulnerabilities in ClassSystem 2.3 allow remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2008-6615 Public exploit
SQL injection vulnerability in index.php in Zen Software Zen Cart 2008 allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2008-6619 Public exploit
Unrestricted file upload vulnerability in class/ApplyDB.php in ClassSystem 2.3 allows remote attackers to execute arbit…
-
Unscored —CVE-2008-6617 Public exploit
Unrestricted file upload vulnerability in adm/visual/upload.php in SiteXS CMS 0.1.1 allows remote attackers to execute …
-
Unscored —CVE-2008-6616 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Zen Software Zen Cart 2008 allows remote attackers to inject a…
-
Unscored —CVE-2008-6611 Public exploit
SQL injection vulnerability in index.php in Minimal ABlog 0.4 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2008-6612 Public exploit
Unrestricted file upload vulnerability in admin/uploader.php in Minimal ABlog 0.4 allows remote attackers to execute ar…
-
Unscored —CVE-2008-6613 Public exploit
uploader.php in minimal-ablog 0.4 does not properly restrict access, which allows remote attackers to gain administrati…
-
Unscored —CVE-2008-6609 Public exploit
Cross-site scripting (XSS) vulnerability in phpcksec.php in Stefan Ott phpcksec 0.2 allows remote attackers to inject a…
-
Unscored —
SQL injection vulnerability in login.php in Acute Control Panel 1.0.0 allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2009-1248 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Acute Control Panel 1.0.0 allow remote attackers to execute arbit…
-
Unscored —CVE-2009-1246 Public exploit
Multiple directory traversal vulnerabilities in Blogplus 1.0 allow remote attackers to include and execute arbitrary lo…
-
Unscored —CVE-2008-6606 Public exploit
SQL injection vulnerability in view.php in MatPo Link 1.2 Beta allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2008-6607 Public exploit
Cross-site scripting (XSS) vulnerability in view.php in MatPo Link 1.2 Beta allows remote attackers to inject arbitrary…
-
Unscored —CVE-2008-6605 Public exploit
Cross-site request forgery (CSRF) vulnerability in the xslt script in the web-based management interface on the 2wire 1…
-
Unscored —CVE-2008-6608 Public exploit
Multiple SQL injection vulnerabilities in DevelopItEasy Events Calendar 1.2 allow remote attackers to execute arbitrary…
-
Unscored —CVE-2008-6604 Public exploit
Directory traversal vulnerability in index.php in PicoFlat CMS 0.5.9 allows remote attackers to include and execute arb…
-
Unscored —CVE-2008-6586 Public exploit
Cross-site request forgery (CSRF) vulnerability in gui/index.php in µTorrent (uTorrent) WebUI 0.315 allows remote attac…
-
Unscored —CVE-2008-6585 Public exploit
Cross-site request forgery (CSRF) vulnerability in html/admin.php in TorrentFlux 2.3 allows remote attackers to hijack …
-
Unscored —CVE-2008-6590 Public exploit
Multiple directory traversal vulnerabilities in LightNEasy "no database" (aka flat) version 1.2.2, and possibly SQLite …
-
Unscored —CVE-2008-6596 Public exploit
SQL injection vulnerability in admin/index.php in PHCDownload 1.1 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2008-6597 Public exploit
Cross-site scripting (XSS) vulnerability in upload/install/index.php in PHCDownload 1.1 allows remote attackers to inje…
-
Unscored —CVE-2008-6592 Public exploit
thumbsup.php in Thumbs-Up 1.12, as used in LightNEasy "no database" (aka flat) and SQLite 1.2.2 and earlier, allows rem…
-
Unscored —CVE-2008-6583 Public exploit
Buffer overflow in BS.player 2.27 build 959 allows remote attackers to cause a denial of service (crash) and possibly e…
-
Unscored —CVE-2008-6593 Public exploit
SQL injection vulnerability in LightNEasy/lightneasy.php in LightNEasy SQLite 1.2.2 and earlier allows remote attackers…
-
Unscored —CVE-2009-1236 Public exploit
Heap-based buffer overflow in the AppleTalk networking stack in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and …
-
Unscored —CVE-2009-1237 Public exploit
Multiple memory leaks in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and earlier allow local users to cause a de…
-
Unscored —CVE-2009-1233 Public exploit
Apple Safari 3.2.2 and 4 Beta on Windows allows remote attackers to cause a denial of service (application crash) via a…
-
Unscored —CVE-2009-1235 Public exploit
XNU 1228.9.59 and earlier on Apple Mac OS X 10.5.6 and earlier does not properly restrict interaction between user spac…
-
Unscored —CVE-2009-1238 Public exploit
Race condition in the HFS vfs sysctl interface in XNU 1228.8.20 and earlier on Apple Mac OS X 10.5.6 and earlier allows…
-
Unscored —CVE-2009-1234 Public exploit
Opera 9.64 allows remote attackers to cause a denial of service (application crash) via an XML document containing a lo…
-
Unscored —CVE-2009-1232 Public exploit
Mozilla Firefox 3.0.8 and earlier 3.0.x versions allows remote attackers to cause a denial of service (memory corruptio…
-
Unscored —CVE-2008-6580 Public exploit
The Red_Reservations script for ColdFusion stores sensitive information under the web root with insufficient access con…
-
Unscored —CVE-2008-6581 Public exploit
login.php in PhpAddEdit 1.3 allows remote attackers to bypass authentication and gain administrative access by setting …
-
Unscored —CVE-2008-6582 Public exploit
SQL injection vulnerability in index.php in Miniweb 2.0 allows remote attackers to execute arbitrary SQL commands via t…
-
Unscored —CVE-2009-1229 Public exploit
SQL injection vulnerability in Arcadwy Arcade Script allows remote attackers to execute arbitrary SQL commands via the …
-
Unscored —CVE-2009-1226 Public exploit
core/admin/delete.php in Podcast Generator 1.1 and earlier does not properly restrict access to administrative function…