Archive
May 2009
Vulnerabilities first published in this month (UTC), newest first.
204 results · Clear filters · Feed
-
Unscored —CVE-2008-6809 Public exploit
SQL injection vulnerability in hotel_habitaciones.php in Venalsur Booking Centre Booking System for Hotels Group 2.01 a…
-
Unscored —CVE-2008-6811 Public exploit
Unrestricted file upload vulnerability in image_processing.php in the e-Commerce Plugin 3.4 and earlier for Wordpress a…
-
Unscored —CVE-2009-1659 Public exploit
Unrestricted file upload vulnerability in admin/uploadimage.php in eLitius 1.0 allows remote attackers to bypass intend…
-
Unscored —CVE-2009-1664 Public exploit
myaccount.php in Easy Scripts Answer and Question Script does not verify the original password before changing password…
-
Unscored —CVE-2009-1663 Public exploit
Unrestricted file upload vulnerability in myaccount.php in Easy Scripts Answer and Question Script allows remote attack…
-
Unscored —CVE-2009-1658 Public exploit
Multiple SQL injection vulnerabilities in admin/admin.php in Realty Webware Technologies Realty Web-Base 1.0 allow remo…
-
Unscored —CVE-2009-1661 Public exploit
SQL injection vulnerability in admin/utopic.php in uTopic 1.0, when magic_quotes_gpc is disabled, allows remote attacke…
-
Unscored —CVE-2009-1665 Public exploit
myaccount.php in Easy Scripts Answer and Question Script allows remote attackers to remove arbitrary user accounts via …
-
Unscored —CVE-2009-1660 Public exploit
Stack-based buffer overflow in URUWorks ViPlay3 3.0 and earlier allows remote attackers to cause a denial of service (c…
-
Unscored —CVE-2009-1662 Public exploit
Multiple SQL injection vulnerabilities in admin/login.php in Wright Way Services Recipe Script 5 allow remote attackers…
-
Unscored —CVE-2009-1650 Public exploit
Multiple SQL injection vulnerabilities in photos.php in Shutter 0.1.1 allow remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2009-1653 Public exploit
Directory traversal vulnerability in examples/tbs_us_examples_0view.php in TinyButStrong 3.4.0 allows remote attackers …
-
Unscored —CVE-2009-1651 Public exploit
SQL injection vulnerability in admin/member_details.php in 2daybiz Business Community Script allows remote attackers to…
-
Unscored —CVE-2009-1655 Public exploit
Multiple SQL injection vulnerabilities in myaccount.php in Easy Scripts Answer and Question Script allow remote authent…
-
Unscored —CVE-2009-1649 Public exploit
Directory traversal vulnerability in arch.php in beLive 0.2.3 allows remote attackers to read arbitrary files via a .. …
-
Unscored —CVE-2009-1652 Public exploit
admin/adminaddeditdetails.php in Business Community Script does not properly restrict access, which allows remote attac…
-
Unscored —CVE-2009-1654 Public exploit
Cross-site scripting (XSS) vulnerability in questiondetail.php in Easy Scripts Answer and Question Script allows remote…
-
Unscored —CVE-2009-1646 Public exploit
Stack-based buffer overflow in Mini-stream RM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via …
-
Unscored —CVE-2009-1643 Public exploit
Stack-based buffer overflow in Sorinara Soritong MP3 Player 1.0 allows remote attackers to execute arbitrary code via a…
-
Unscored —CVE-2009-1637 Public exploit
profile.php in Simple Customer 1.3 does not require administrative authentication, which allows remote attackers to cha…
-
Unscored —CVE-2009-1642 Public exploit
Multiple stack-based buffer overflows in Mini-stream ASX to MP3 Converter 3.0.0.7 allow remote attackers to execute arb…
-
Unscored —CVE-2009-1647 Public exploit
Heap-based buffer overflow in popcorn.exe in Ultrafunk Popcorn 1.87 allows remote POP3 servers to cause a denial of ser…
-
Unscored —CVE-2009-1638 Public exploit
Techno Dreams Job Career Package 3.0 allows remote attackers to bypass authentication and obtain administrative access …
-
Unscored —CVE-2009-1645 Public exploit
Multiple stack-based buffer overflows in Mini-stream Easy RM-MP3 Converter 3.0.0.7 allow remote attackers to execute ar…
-
Unscored —
Multiple stack-based buffer overflows in Mini-stream Ripper 3.0.1.1 allow remote attackers to execute arbitrary code vi…
-
Unscored —CVE-2009-1644 Public exploit
Stack-based buffer overflow in Sorinara Streaming Audio Player 0.9 allows remote attackers to execute arbitrary code vi…
-
Unscored —
Unspecified vulnerability in the dpwinsup module (dpwinsup.dll) for dpwingad (dpwingad.exe) in HP Data Protector Expres…
-
Unscored —CVE-2009-0162 Public exploit
Cross-site scripting (XSS) vulnerability in Safari before 3.2.3, and 4 Public Beta, on Apple Mac OS X 10.5 before 10.5.…
-
Unscored —CVE-2008-6808 Public exploit
SQL injection vulnerability in links.php in Scripts for Sites (SFS) EZ Link Directory allows remote attackers to execut…
-
Unscored —CVE-2008-6806 Public exploit
Unrestricted file upload vulnerability in includes/imageupload.php in 7Shop 1.1 and earlier allows remote attackers to …
-
Unscored —CVE-2008-6807 Public exploit
PHP remote file inclusion vulnerability in ListRecords.php in osprey 1.0a4.1 allows remote attackers to execute arbitra…
-
Unscored —CVE-2009-1620 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in input.php in MataChat allow remote attackers to inject arbitrary…
-
Unscored —CVE-2009-1618 Public exploit
Teraway LiveHelp 2.0 allows remote attackers to bypass authentication and gain administrative access via a pwd=&lvl=1&u…
-
Unscored —CVE-2009-1624 Public exploit
Directory traversal vulnerability in index.php in Dew-NewPHPLinks 2.0 allows remote attackers to read arbitrary files v…
-
Unscored —CVE-2009-1626 Public exploit
SQL injection vulnerability in public/specific.php in EZ-Blog before Beta 2 20090427, when magic_quotes_gpc is disabled…
-
Unscored —CVE-2009-1627 Public exploit
Stack-based buffer overflow in Streaming Download Project (SDP) Downloader 2.3.0 allows remote attackers to execute arb…
-
Unscored —CVE-2009-1619 Public exploit
Teraway FileStream 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the t…
-
Unscored —CVE-2009-1625 Public exploit
Directory traversal vulnerability in index.php in Thickbox Gallery 2 allows remote attackers to include and execute arb…
-
Unscored —CVE-2009-1621 Public exploit
Directory traversal vulnerability in index.php in OpenCart 1.1.8 allows remote attackers to read arbitrary files via a …
-
Unscored —CVE-2009-1617 Public exploit
Teraway LinkTracker 1.0 allows remote attackers to bypass authentication and gain administrative access via a userid=1&…