Skip to content
OpenAdvisories

Archive

19 June 2009

Vulnerabilities first published on this day (UTC), newest first.

12 results · Clear filters · Feed

  • Unscored —
    CVE-2009-2134 Public exploit

    pivot/tb.php in Pivot 1.40.4 and 1.40.7 allows remote attackers to obtain sensitive information via an invalid url para…

  • Unscored —
    CVE-2009-2138 Public exploit

    Multiple open redirect vulnerabilities in TBDev.NET 01-01-08 allow remote attackers to redirect users to arbitrary web …

  • Unscored —
    CVE-2009-2130 Public exploit

    Elvin 1.2.0 allows remote attackers to read the PHP source code of (1) login.ei, (2) jump_bug.ei, or (3) create_account…

  • Unscored —
    CVE-2009-2123 Public exploit

    Multiple SQL injection vulnerabilities in Elvin 1.2.0 allow remote attackers to execute arbitrary SQL commands via the …

  • Unscored —
    CVE-2009-2131 Public exploit

    Cross-site scripting (XSS) vulnerability in 4images 1.7.7 and earlier allows remote authenticated users to inject arbit…

  • Unscored —
    CVE-2009-2132 Public exploit

    Directory traversal vulnerability in global.php in 4images before 1.7.7, when magic_quotes_gpc is disabled, allows remo…

  • Unscored —
    CVE-2009-2124 Public exploit

    Directory traversal vulnerability in page.php in Elvin 1.2.0 allows remote attackers to include and execute arbitrary l…

  • Unscored —
    CVE-2009-2127 Public exploit

    Cross-site scripting (XSS) vulnerability in show_activity.php in Elvin 1.2.0 allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2009-2122 Public exploit

    SQL injection vulnerability in viewimg.php in the Paolo Palmonari Photoracer plugin 1.0 for WordPress allows remote att…

  • Unscored —
    CVE-2009-2129 Public exploit

    Cross-site request forgery (CSRF) vulnerability in login.php in Elvin 1.2.0 allows remote attackers to hijack the authe…

  • Unscored —
    CVE-2009-2133 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Pivot 1.40.4 and 1.40.7 allow remote attackers to inject arbitra…

  • Unscored —
    CVE-2009-0961 Public exploit

    The Mail component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 dismisses the ca…