Archive
May 2009
Vulnerabilities first published in this month (UTC), newest first.
204 results · Clear filters · Feed
-
Unscored —CVE-2009-1768 Public exploit
Directory traversal vulnerability in download.php in Rama Zaiten CMS 0.9.8 and earlier allows remote attackers to read …
-
Unscored —CVE-2009-1770 Public exploit
Directory traversal vulnerability in includes/database/examples/addressbook.php in Flyspeck CMS 6.8 allows remote attac…
-
Unscored —
Multiple directory traversal vulnerabilities in pluck 4.6.2, when register_globals is enabled, allow remote attackers t…
-
Unscored —CVE-2009-1767 Public exploit
admin/edituser.php in 2daybiz Template Monster Clone does not require administrative authentication, which allows remot…
-
Unscored —CVE-2009-1764 Public exploit
SQL injection vulnerability in inc/ajax.asp in MaxCMS 2.0 allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —
Directory traversal vulnerability in plugins/ddb/foot.php in Strawberry 1.1.1 allows remote attackers to include and ex…
-
Unscored —CVE-2009-1771 Public exploit
index.php in Flyspeck CMS 6.8 does not require administrative authentication for the updateExistingContent action, whic…
-
Unscored —
Stack-based buffer overflow in the btFiles::BuildFromMI function (trunk/btfiles.cpp) in Enhanced CTorrent (aka dTorrent…
-
Unscored —CVE-2008-6812 Public exploit
SQL injection vulnerability in bukutamu.php in phpWebNews 0.2 MySQL Edition allows remote attackers to execute arbitrar…
-
Unscored —CVE-2008-6813 Public exploit
SQL injection vulnerability in index.php in phpWebNews 0.2 MySQL Edition allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2009-1749 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Catviz 0.4.0 beta 1 allow remote attackers to injec…
-
Unscored —CVE-2009-1750 Public exploit
Unrestricted file upload vulnerability in VidSharePro allows remote authenticated users to execute arbitrary code by up…
-
Unscored —CVE-2009-1752 Public exploit
exJune Office Message System 1 does not properly restrict access to (1) configure.asp and (2) addmessage2.asp, which al…
-
Unscored —CVE-2009-1747 Public exploit
SQL injection vulnerability in index.php in 26th Avenue bSpeak 1.10 allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2009-1751 Public exploit
SQL injection vulnerability in list_list.php in Realty Webware Technologies Web-Base 1.0 allows remote attackers to exe…
-
Unscored —CVE-2009-1748 Public exploit
Multiple directory traversal vulnerabilities in index.php in Catviz 0.4.0 Beta 1 allow remote attackers to read arbitra…
-
Unscored —CVE-2009-1746 Public exploit
SQL injection vulnerability in berita.php in Dian Gemilang DGNews 3.0 Beta allows remote attackers to execute arbitrary…
-
Unscored —CVE-2009-1593 Public exploit
Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, does not properly implement the "ne…
-
Unscored —CVE-2009-1729 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Communications Express 6 2005Q4 (aka 6.2) and 6.…
-
Unscored —CVE-2009-1744 Public exploit
InstallHFZ.exe 6.5.201.0 in Pinnacle Hollywood Effects 6, a module in Pinnacle Systems Pinnacle Studio 12, allows remot…
-
Unscored —CVE-2009-1743 Public exploit
Directory traversal vulnerability in InstallHFZ.exe 6.5.201.0 in Pinnacle Hollywood Effects 6, a module in Pinnacle Sys…
-
Unscored —CVE-2009-1742 Public exploit
code.php in PC4Arb Pc4 Uploader 9.0 and earlier makes it easier for remote attackers to conduct SQL injection attacks v…
-
Unscored —CVE-2009-1734 Public exploit
SQL injection vulnerability in listing_video.php in VidSharePro allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2009-1735 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in VidSharePro allows remote attackers to inject arbitrary web s…
-
Unscored —CVE-2009-1741 Public exploit
Multiple SQL injection vulnerabilities in login.php in DM FileManager 3.9.2, when magic_quotes_gpc is disabled, allow r…
-
Unscored —CVE-2009-1739 Public exploit
PAD Site Scripts 3.6 allows remote attackers to bypass authentication and gain privileges as other users, including adm…
-
Unscored —CVE-2009-1736 Public exploit
SQL injection vulnerability in the GridSupport (GS) Ticket System (com_gsticketsystem) component for Joomla! allows rem…
-
Unscored —
Multiple directory traversal vulnerabilities in NetMechanica NetDecision TFTP Server 4.2 allow remote attackers to read…
-
Unscored —
Use-after-free vulnerability in the dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL 1.0.0 Beta 2 …
-
Unscored —CVE-2009-1668 Public exploit
TYPSoft FTP Server 1.11 allows remote attackers to cause a denial of service (CPU consumption) by sending an ABOR (abor…
-
Unscored —
Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a…
-
Unscored —CVE-2009-1670 Public exploit
user/index.php in TCPDB 3.8 does not require administrative authentication, which allows remote attackers to add admin …
-
Unscored —
The smarty_function_math function in libs/plugins/function.math.php in Smarty 2.6.22 allows context-dependent attackers…
-
Unscored —CVE-2009-1677 Public exploit
Multiple static code injection vulnerabilities in the saveFeed function in rss/feedcreator.class.php in Bitweaver 2.6 a…
-
Unscored —CVE-2009-1674 Public exploit
Stack-based buffer overflow in Microchip MPLAB IDE 8.30 allows user-assisted remote attackers to execute arbitrary code…
-
Unscored —
Stack-based buffer overflow in Mini-stream CastRipper 2.50.70 allows remote attackers to execute arbitrary code via a l…
-
Unscored —CVE-2009-1672 Public exploit
The Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Environment (aka JRE) 6 Update …
-
Unscored —CVE-2009-1678 Public exploit
Directory traversal vulnerability in the saveFeed function in rss/feedcreator.class.php in Bitweaver 2.6 and earlier al…
-
Unscored —
Multiple buffer overflows in the Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime En…
-
Unscored —CVE-2008-6810 Public exploit
Multiple SQL injection vulnerabilities in admin/checklogin.php in Venalsur Booking Centre Booking System for Hotels Gro…