1 May 2009

33 results · Feed

• Unscored —
  CVE-2009-1512 Public exploit

  Static code injection vulnerability in X-Forum 0.6.2 allows remote authenticated administrators to inject arbitrary PHP…

  May 1, 2009
• Unscored —
  CVE-2008-6786

  Multiple directory traversal vulnerabilities in geekigeeki.py in GeekiGeeki before 3.0 allow remote attackers to read a…

  May 1, 2009
• Unscored —
  CVE-2008-6787 Public exploit

  SQL injection vulnerability in administrator/index.php in Lizardware CMS 0.6.0 and earlier allows remote attackers to e…

  May 1, 2009
• Unscored —
  CVE-2008-6785 Public exploit

  Unrestricted file upload vulnerability in Mini File Host 1.5 allows remote attackers to execute arbitrary code by uploa…

  May 1, 2009
• Unscored —
  CVE-2009-1511 Public exploit EPSS 14%

  GDI+ in Microsoft Windows XP SP3 allows remote attackers to cause a denial of service (infinite loop) via a PNG file th…

  May 1, 2009
• Unscored —
  CVE-2009-1509 Public exploit

  SQL injection vulnerability in ajaxp_backend.php in MyioSoft AjaxPortal 3.0 allows remote attackers to execute arbitrar…

  May 1, 2009
• Unscored —
  CVE-2009-1510 Public exploit

  Multiple directory traversal vulnerabilities in KoschtIT Image Gallery 1.82 allow remote attackers to include and execu…

  May 1, 2009
• Unscored —
  CVE-2009-1508 Public exploit

  SQL injection vulnerability in the xforum_validateUser function in Common.php in X-Forum 0.6.2 allows remote attackers …

  May 1, 2009
• Unscored —
  CVE-2008-6777 Public exploit

  Multiple SQL injection vulnerabilities in MyPHP Forum 3.0 and earlier allow remote attackers to execute arbitrary SQL c…

  May 1, 2009
• Unscored —
  CVE-2008-6779 Public exploit

  SQL injection vulnerability in the Sarkilar module for PHP-Nuke allows remote attackers to execute arbitrary SQL comman…

  May 1, 2009
• Unscored —
  CVE-2008-6783 Public exploit

  SQL injection vulnerability in directory.php in Sites for Scripts (SFS) EZ Home Business Directory allows remote attack…

  May 1, 2009
• Unscored —
  CVE-2008-6776 Public exploit

  SQL injection vulnerability in viewcomments.php in Scripts For Sites (SFS) EZ Hot or Not allows remote attackers to exe…

  May 1, 2009
• Unscored —
  CVE-2008-6781 Public exploit

  SQL injection vulnerability in directory.php in Sites for Scripts (SFS) Gaming Directory allows remote attackers to exe…

  May 1, 2009
• Unscored —
  CVE-2008-6784 Public exploit

  SQL injection vulnerability in directory.php in Scripts For Sites (SFS) EZ Adult Directory allows remote attackers to e…

  May 1, 2009
• Unscored —
  CVE-2008-6780 Public exploit

  SQL injection vulnerability in directory.php in Scripts for Sites (SFS) SFS EZ Affiliate allows remote attackers to exe…

  May 1, 2009
• Unscored —
  CVE-2008-6778 Public exploit

  SQL injection vulnerability in viewfaqs.php in Scripts for Sites (SFS) EZ Auction allows remote attackers to execute ar…

  May 1, 2009
• Unscored —
  CVE-2008-6782 Public exploit

  SQL injection vulnerability in directory.php in Sites for Scripts (SFS) EZ Hosting Directory allows remote attackers to…

  May 1, 2009
• Unscored —
  CVE-2009-1503 Public exploit

  Multiple SQL injection vulnerabilities in login.php in Tiger Document Management System (DMS) allow remote attackers to…

  May 1, 2009
• Unscored —
  CVE-2009-1505

  SQL injection vulnerability in the News Page module 5.x before 5.x-1.2 for Drupal allows remote authenticated users, wi…

  May 1, 2009
• Unscored —
  CVE-2009-1504 Public exploit

  Absolute Form Processor XE 1.5 allows remote attackers to bypass authentication and gain administrative access by setti…

  May 1, 2009
• Unscored —
  CVE-2009-1365

  Unspecified vulnerability in Adobe Flash Media Server (FMS) before 3.0.4 and 3.5.x before 3.5.2, as used in Flash Media…

  May 1, 2009
• Unscored —
  CVE-2009-1502 Public exploit

  Directory traversal vulnerability in plugin.php in S-Cms 1.1 Stable and 1.5.2 allows remote attackers to include and ex…

  May 1, 2009
• Unscored —
  CVE-2009-1364

  Use-after-free vulnerability in the embedded GD library in libwmf 0.2.8.4 allows context-dependent attackers to cause a…

  libwmf Debian
  May 1, 2009
• Unscored —
  CVE-2009-1500 Public exploit

  SQL injection vulnerability in index.php in ProjectCMS 1.0 Beta allows remote attackers to execute arbitrary SQL comman…

  May 1, 2009
• Unscored —
  CVE-2009-1506 Public exploit

  SQL injection vulnerability in classes/Xp.php in eLitius 1.0 allows remote attackers to execute arbitrary SQL commands …

  May 1, 2009
• Unscored —
  CVE-2009-1507

  The Node Access User Reference module 5.x before 5.x-2.0-beta4 and 6.x before 6.x-2.0-beta6, a module for Drupal, inter…

  Web / CMS
  May 1, 2009
• Unscored —
  CVE-2009-1501

  Cross-site scripting (XSS) vulnerability in the Exif module 5.x-1.x before 5.x-1.2 and 6.x-1.x-dev before April 13, 200…

  Web / CMS
  May 1, 2009
• Unscored —
  CVE-2008-6775 Public exploit

  HTC Touch Pro and HTC Touch Cruise vCard allows remote attackers to cause denial of service (CPU consumption, SMS consu…

  May 1, 2009
• Unscored —
  CVE-2009-1498 Public exploit

  Directory traversal vulnerability in inc/profilemain.php in Game Maker 2k Internet Discussion Boards (iDB) 0.2.5 Pre-Al…

  May 1, 2009
• Unscored —
  CVE-2009-1499 Public exploit

  SQL injection vulnerability in the MailTo (aka com_mailto) component in Joomla! allows remote attackers to execute arbi…

  May 1, 2009
• Unscored —
  CVE-2009-1496 Public exploit Scanner template

  Directory traversal vulnerability in the Cmi Marketplace (com_cmimarketplace) component 0.1 for Joomla! allows remote a…

  May 1, 2009
• Unscored —
  CVE-2009-1497 Public exploit

  Stack-based buffer overflow in srt2smi.exe in Gretech Online Movie Player (GOM Player) 2.1.16.4635 allows remote attack…

  May 1, 2009
• Unscored —
  CVE-2009-1495 Public exploit

  Web File Explorer 3.1 stores sensitive information under the web root with insufficient access control, which allows re…

  May 1, 2009