Archive
June 2009
Vulnerabilities first published in this month (UTC), newest first.
450 results · Feed
-
Unscored —
PeaZIP 2.6.1, 2.5.1, and earlier on Windows allows user-assisted remote attackers to execute arbitrary commands via a .…
-
Unscored —CVE-2009-2256 Public exploit
The administrative web interface on the Netgear DG632 with firmware 3.4.0_ap allows remote attackers to cause a denial …
-
Unscored —CVE-2009-2257 Public exploit
The administrative web interface on the Netgear DG632 with firmware 3.4.0_ap allows remote attackers to bypass authenti…
-
Unscored —CVE-2009-2263 Public exploit
Directory traversal vulnerability in index.php in Awesome PHP Mega File Manager 1.0 allows remote attackers to include …
-
Unscored —
Zen Cart 1.3.8a, 1.3.8, and earlier does not require administrative authentication for admin/record_company.php, which …
-
Unscored —
Zen Cart 1.3.8a, 1.3.8, and earlier does not require administrative authentication for admin/sqlpatch.php, which allows…
-
Unscored —
stardict 3.0.1, when Enable Net Dict is configured, sends the contents of the clipboard to a dictionary server, which a…
-
Unscored —
PHP remote file inclusion vulnerability in install/di.php in AjaxPortal 3.0 allows remote attackers to execute arbitrar…
-
Unscored —CVE-2009-2258 Public exploit
Directory traversal vulnerability in cgi-bin/webcm in the administrative web interface on the Netgear DG632 with firmwa…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in OpenID 5.x before 5x.-1.2, a module for Drupal, allows remote attack…
-
Unscored —
Cross-site scripting (XSS) vulnerability in OpenID 5.x before 5.x-1.2, a module for Drupal, allows remote attackers to …
-
Unscored —CVE-2008-6837 Public exploit
SQL injection vulnerability in Zoph 0.7.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified v…
-
Unscored —CVE-2008-6839 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in TGS Content Management 0.3.2r2 allow remote attackers to inject …
-
Unscored —CVE-2008-6838 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in Zoph 0.7.2.1 allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2009-2234 Public exploit
Multiple SQL injection vulnerabilities in admin.php in VICIDIAL Call Center Suite 2.0.5-173 allow remote attackers to e…
-
Unscored —CVE-2009-2235 Public exploit
SQL injection vulnerability in page.php in Your Articles Directory allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2009-2236 Public exploit
SQL injection vulnerability in yad-admin/login.php in Your Article Directory allows remote attackers to execute arbitra…
-
Unscored —CVE-2009-2243 Public exploit
SQL injection vulnerability in active_appointments.asp in ASP Inline Corporate Calendar allows remote attackers to exec…
-
Unscored —CVE-2009-2241 Public exploit
Cross-site scripting (XSS) vulnerability in search.asp in ASP Inline Corporate Calendar allows remote attackers to inje…
-
Unscored —
Unspecified vulnerability in Views Bulk Operations 5.x-1.x before 5.x-1.4 and 6.x-1.x before 6.x-1.7, a module for Drup…
-
Unscored —CVE-2009-2238 Public exploit
Unrestricted file upload vulnerability in includes/shared_scripts/wysiwyg_editor/assetmanager/assetmanager.asp in DMXRe…
-
Unscored —
Cross-site scripting (XSS) vulnerability in AD2000 free-sw leger (aka Web Conference Room Free) 1.6.4 and earlier allow…
-
Unscored —CVE-2009-2242 Public exploit
SQL injection vulnerability in active_appointments.asp in ASP Inline Corporate Calendar allows remote attackers to exec…
-
Unscored —CVE-2009-2239 Public exploit
SQL injection vulnerability in the (1) casinobase (com_casinobase), (2) casino_blackjack (com_casino_blackjack), and (3…
-
Unscored —
agent/snmp_agent.c in snmpd in net-snmp 5.0.9 in Red Hat Enterprise Linux (RHEL) 3 allows remote attackers to cause a d…
-
Unscored —
Stack-based buffer overflow in mnet.exe in Unisys Business Information Server (BIS) 10 and 10.1 on Windows allows remot…
-
Unscored —
Stack-based buffer overflow in Motorola Timbuktu Pro 8.6.5 on Windows allows remote attackers to execute arbitrary code…
-
Unscored —CVE-2009-2229 Public exploit
Directory traversal vulnerability in engine.php in Kasseler CMS 1.3.5 lite allows remote attackers to read arbitrary fi…
-
Unscored —CVE-2009-2231 Public exploit
MIDAS 1.43 allows remote attackers to bypass authentication and obtain administrative access via an admin account recor…
-
Unscored —CVE-2009-2228 Public exploit
Cross-site scripting (XSS) vulnerability in engine.php in Kasseler CMS allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2009-2230 Public exploit
SQL injection vulnerability in inc/datahandlers/user.php in MyBB (aka MyBulletinBoard) before 1.4.7 allows remote authe…
-
Unscored —CVE-2009-2233 Public exploit
The admin interface in AWScripts.com Gallery Search Engine 1.5 allows remote attackers to bypass authentication and gai…
-
Unscored —
SQL injection vulnerability in image.php in Softbiz Banner Ad Management Script allows remote attackers to execute arbi…
-
Unscored —
Stack-based buffer overflow in B Labs Bopup Communication Server 3.2.26.5460 allows remote attackers to execute arbitra…
-
Unscored —
Cross-site scripting (XSS) vulnerability in PHP-I-BOARD 1.2 and earlier allows remote attackers to inject arbitrary web…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Let's PHP! Tree BBS 2004/11/23 and earlier allows remote attackers to injec…
-
Unscored —
Stack-based buffer overflow in SureThing CD/DVD Labeler 5.1.616 trial version allows user-assisted remote attackers to …
-
Unscored —CVE-2009-2220 Public exploit
Multiple directory traversal vulnerabilities in Tribiq CMS 5.0.12c, when register_globals is enabled and magic_quotes_g…
-
Unscored —
Directory traversal vulnerability in ang/shared/flags.php in AN Guestbook 0.7.8, when register_globals is enabled, allo…
-
Unscored —
Directory traversal vulnerability in PHP-I-BOARD 1.2 and earlier allows remote attackers to read arbitrary files via di…