Skip to content
OpenAdvisories

Archive

7 May 2009

Vulnerabilities first published on this day (UTC), newest first.

13 results · Clear filters · Feed

  • Unscored —
    CVE-2008-6802 Public exploit

    Multiple SQL injection vulnerabilities in index.php in phPhotoGallery 0.92 allow remote attackers to execute arbitrary …

  • Unscored —
    CVE-2008-6799 Public exploit

    connection.php in FlashChat 5.0.8 allows remote attackers to bypass the role filter mechanism and gain administrative p…

  • Unscored —
    CVE-2009-1586 Public exploit

    Stack-based buffer overflow in the NZB importer feature in GrabIt 1.7.2 Beta 3 and earlier allows remote attackers to e…

  • Unscored —
    CVE-2009-1587 Public exploit

    index.php in PHP Site Lock 2.0 allows remote attackers to bypass authentication and obtain administrative access by set…

  • Unscored —
    CVE-2009-1584 Public exploit

    Multiple SQL injection vulnerabilities in TemaTres 1.0.3 and 1.031, when magic_quotes_gpc is disabled, allow remote att…

  • Unscored —
    CVE-2009-1582 Public exploit

    Million Dollar Text Links 1.0 does not properly restrict administrator access to admin.home.php, which allows remote at…

  • Unscored —
    CVE-2009-1583 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in TemaTres 1.0.3 and 1.031 allow remote attackers to inject arbitr…

  • Unscored —
    CVE-2009-1585 Public exploit

    Multiple SQL injection vulnerabilities in TemaTres 1.031, when magic_quotes_gpc is disabled, allow remote attackers to …

  • Unscored —
    CVE-2008-6798 Public exploit

    Multiple SQL injection vulnerabilities in login.php in Pre Projects Pre Real Estate Listings allow remote attackers to …

  • Unscored —
    CVE-2008-6794 Public exploit

    SQL injection vulnerability in directory.php in Scripts For Sites (SFS) EZ Pub Site allows remote attackers to execute …

  • Unscored —
    CVE-2008-6795 Public exploit

    SQL injection vulnerability in view_news.php in nicLOR Vibro-School-CMS allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2008-6793 Public exploit

    The get_file_type function in lib/file_content.php in DFLabs PTK 0.1, 0.2, and 1.0 allows remote attackers to execute a…

  • Unscored —
    CVE-2008-6796 Public exploit

    SQL injection vulnerability in manager/login.php in Pre Projects Pre Real Estate Listings allows remote attackers to ex…