Archive
11 May 2009
Vulnerabilities first published on this day (UTC), newest first.
15 results · Clear filters · Feed
-
Unscored —CVE-2008-6805 Public exploit
Multiple SQL injection vulnerabilities in Mic_Blog 0.0.3, when magic_quotes_gpc is disabled, allow remote attackers to …
-
Unscored —CVE-2008-6804 Public exploit
Tribiq CMS 5.0.9a beta allows remote attackers to bypass authentication and gain administrative access by setting the C…
-
Unscored —CVE-2008-6803 Public exploit
SQL injection vulnerability in diziler.asp in Yigit Aybuga Dizi Portali allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2009-1616 Public exploit
Cross-site scripting (XSS) vulnerability in docs/showdoc.php in Coppermine Photo Gallery (CPG) before 1.4.22 allows rem…
-
Unscored —CVE-2009-1613 Public exploit
Multiple SQL injection vulnerabilities in leap.php in Leap CMS 0.1.4, when magic_quotes_gpc is disabled, allow remote a…
-
Unscored —CVE-2009-1614 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Leap CMS 0.1.4 allow remote attackers to inject arbitrary web sc…
-
Unscored —CVE-2009-1615 Public exploit
Unrestricted file upload vulnerability in Leap CMS 0.1.4 allows remote attackers to execute arbitrary code by uploading…
-
Unscored —
Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote…
-
Unscored —
Multiple buffer overflows in Microchip MPLAB IDE 8.30 and possibly earlier versions allow user-assisted remote attacker…
-
Unscored —CVE-2009-1607 Public exploit
Cross-site scripting (XSS) vulnerability in the administrator panel in phpForm.net LinkBase 2.0 allows remote attackers…
-
Unscored —CVE-2009-1609 Public exploit
Unrestricted file upload vulnerability in admin/uploadform.asp in Battle Blog 1.25 allows remote attackers to execute a…
-
Unscored —CVE-2009-1610 Public exploit
admin/changepassword.php in Job Script Job Board Software 2.0 allows remote attackers to change the administrator passw…
-
Unscored —CVE-2009-1611 Public exploit
Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a…
-
Unscored —CVE-2009-1602 Public exploit
Pablo Software Solutions Quick 'n Easy Mail Server 3.3 allows remote attackers to cause a denial of service (daemon out…
-
Medium —CVE-2009-1595 Public exploit
Ignite Realtime Openfire Allows Users to Change Passwords of Arbitrary Accounts
The jabber:iq:auth implementation in IQAuthHandler.java in Ignite Realtime Openfire before 3.6.4 allows remote authenticated users to change the passwords of arbitrary accounts via a modified username element in a passwd_change action.