Archive
May 2009
Vulnerabilities first published in this month (UTC), newest first.
204 results · Clear filters · Feed
-
Unscored —CVE-2009-1622 Public exploit
SQL injection vulnerability in user.php in EcShop 2.5.0 allows remote attackers to execute arbitrary SQL commands via t…
-
Unscored —CVE-2009-1623 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Dew-NewPHPLinks 2.0 allows remote attackers to inject arbitrar…
-
Unscored —CVE-2008-6805 Public exploit
Multiple SQL injection vulnerabilities in Mic_Blog 0.0.3, when magic_quotes_gpc is disabled, allow remote attackers to …
-
Unscored —CVE-2008-6804 Public exploit
Tribiq CMS 5.0.9a beta allows remote attackers to bypass authentication and gain administrative access by setting the C…
-
Unscored —CVE-2008-6803 Public exploit
SQL injection vulnerability in diziler.asp in Yigit Aybuga Dizi Portali allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2009-1616 Public exploit
Cross-site scripting (XSS) vulnerability in docs/showdoc.php in Coppermine Photo Gallery (CPG) before 1.4.22 allows rem…
-
Unscored —CVE-2009-1613 Public exploit
Multiple SQL injection vulnerabilities in leap.php in Leap CMS 0.1.4, when magic_quotes_gpc is disabled, allow remote a…
-
Unscored —CVE-2009-1614 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Leap CMS 0.1.4 allow remote attackers to inject arbitrary web sc…
-
Unscored —CVE-2009-1615 Public exploit
Unrestricted file upload vulnerability in Leap CMS 0.1.4 allows remote attackers to execute arbitrary code by uploading…
-
Unscored —
Stack-based buffer overflow in the MPS.StormPlayer.1 ActiveX control in mps.dll 3.9.4.27 in Baofeng Storm allows remote…
-
Unscored —
Multiple buffer overflows in Microchip MPLAB IDE 8.30 and possibly earlier versions allow user-assisted remote attacker…
-
Unscored —CVE-2009-1607 Public exploit
Cross-site scripting (XSS) vulnerability in the administrator panel in phpForm.net LinkBase 2.0 allows remote attackers…
-
Unscored —CVE-2009-1609 Public exploit
Unrestricted file upload vulnerability in admin/uploadform.asp in Battle Blog 1.25 allows remote attackers to execute a…
-
Unscored —CVE-2009-1610 Public exploit
admin/changepassword.php in Job Script Job Board Software 2.0 allows remote attackers to change the administrator passw…
-
Unscored —CVE-2009-1611 Public exploit
Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a…
-
Unscored —CVE-2009-1602 Public exploit
Pablo Software Solutions Quick 'n Easy Mail Server 3.3 allows remote attackers to cause a denial of service (daemon out…
-
Medium —CVE-2009-1595 Public exploit
Ignite Realtime Openfire Allows Users to Change Passwords of Arbitrary Accounts
The jabber:iq:auth implementation in IQAuthHandler.java in Ignite Realtime Openfire before 3.6.4 allows remote authenticated users to change the passwords of arbitrary accounts via a modified username element in a passwd_change action.
-
Unscored —CVE-2009-1592 Public exploit
Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a…
-
Unscored —CVE-2008-6802 Public exploit
Multiple SQL injection vulnerabilities in index.php in phPhotoGallery 0.92 allow remote attackers to execute arbitrary …
-
Unscored —CVE-2008-6799 Public exploit
connection.php in FlashChat 5.0.8 allows remote attackers to bypass the role filter mechanism and gain administrative p…
-
Unscored —CVE-2009-1586 Public exploit
Stack-based buffer overflow in the NZB importer feature in GrabIt 1.7.2 Beta 3 and earlier allows remote attackers to e…
-
Unscored —CVE-2009-1587 Public exploit
index.php in PHP Site Lock 2.0 allows remote attackers to bypass authentication and obtain administrative access by set…
-
Unscored —CVE-2009-1584 Public exploit
Multiple SQL injection vulnerabilities in TemaTres 1.0.3 and 1.031, when magic_quotes_gpc is disabled, allow remote att…
-
Unscored —CVE-2009-1582 Public exploit
Million Dollar Text Links 1.0 does not properly restrict administrator access to admin.home.php, which allows remote at…
-
Unscored —CVE-2009-1583 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in TemaTres 1.0.3 and 1.031 allow remote attackers to inject arbitr…
-
Unscored —CVE-2009-1585 Public exploit
Multiple SQL injection vulnerabilities in TemaTres 1.031, when magic_quotes_gpc is disabled, allow remote attackers to …
-
Unscored —CVE-2008-6798 Public exploit
Multiple SQL injection vulnerabilities in login.php in Pre Projects Pre Real Estate Listings allow remote attackers to …
-
Unscored —CVE-2008-6794 Public exploit
SQL injection vulnerability in directory.php in Scripts For Sites (SFS) EZ Pub Site allows remote attackers to execute …
-
Unscored —CVE-2008-6795 Public exploit
SQL injection vulnerability in view_news.php in nicLOR Vibro-School-CMS allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2008-6793 Public exploit
The get_file_type function in lib/file_content.php in DFLabs PTK 0.1, 0.2, and 1.0 allows remote attackers to execute a…
-
Unscored —CVE-2008-6796 Public exploit
SQL injection vulnerability in manager/login.php in Pre Projects Pre Real Estate Listings allows remote attackers to ex…
-
Unscored —
racoon/isakmp_frag.c in ipsec-tools before 0.7.2 allows remote attackers to cause a denial of service (crash) via craft…
-
Unscored —CVE-2009-1553 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the Admin Console in Sun GlassFish Enterprise Server 2.1 allow r…
-
Unscored —CVE-2009-1561 Public exploit
Cross-site request forgery (CSRF) vulnerability in administration.cgi on the Cisco Linksys WRT54GC router with firmware…
-
Unscored —CVE-2009-1557 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities on the Cisco Linksys WVC54GCA wireless video camera with firmware 1…
-
Unscored —CVE-2009-1554 Public exploit
Cross-site scripting (XSS) vulnerability in ThemeServlet.java in Sun Woodstock 4.2, as used in Sun GlassFish Enterprise…
-
Unscored —
Directory traversal vulnerability in adm/file.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.0…
-
Unscored —CVE-2009-1550 Public exploit
Zakkis Technology ABC Advertise 1.0 does not properly restrict access to admin.inc.php, which allows remote attackers t…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Qt quickteam 2 allow remote attackers to execute arbitrary PHP co…
-
Unscored —CVE-2009-1548 Public exploit
SQL injection vulnerability in index.php in BluSky CMS allows remote attackers to execute arbitrary SQL commands via th…