22 June 2009

26 results · Clear filters · Feed

• Unscored —
  CVE-2009-2169 Public exploit

  Insecure method vulnerability in the PDFVIEWER.PDFViewerCtrl.1 ActiveX control (pdfviewer.ocx) in Edraw PDF Viewer Comp…

  Jun 22, 2009
• Unscored —
  CVE-2008-6833 Public exploit

  Directory traversal vulnerability in commsrss.php in fuzzylime (cms) before 3.01b allows remote attackers to include an…

  Jun 22, 2009
• Unscored —
  CVE-2008-6834 Public exploit

  Multiple directory traversal vulnerabilities in fuzzylime (cms) 3.01 and 3.01a allow remote attackers to include and ex…

  Jun 22, 2009
• Unscored —
  CVE-2009-2166 Public exploit

  Absolute path traversal vulnerability in cvs.php in OCS Inventory NG before 1.02.1 on Unix allows remote attackers to r…

  ocsinventory-server Debian
  Jun 22, 2009
• Unscored —
  CVE-2009-2163 Public exploit

  Cross-site scripting (XSS) vulnerability in login/default.aspx in Sitecore CMS before 6.0.2 Update-1 090507 allows remo…

  Jun 22, 2009
• Unscored —
  CVE-2009-2164 Public exploit

  Multiple SQL injection vulnerabilities in Kjtechforce mailman beta1, when magic_quotes_gpc is disabled, allow remote at…

  Jun 22, 2009
• Critical 9.8
  CVE-2009-2168 Public exploit EPSS 12%

  cpanel/login.php in EgyPlus 7ammel (aka 7ml) 1.0.1 and earlier sends a redirect to the web browser but does not exit wh…

  Jun 22, 2009
• Unscored —
  CVE-2009-2167 Public exploit

  Multiple SQL injection vulnerabilities in cpanel/login.php in EgyPlus 7ammel (aka 7ml) 1.0.1 and earlier, when magic_qu…

  Jun 22, 2009
• Unscored —
  CVE-2009-2157 Public exploit

  Multiple SQL injection vulnerabilities in TorrentTrader Classic 1.09 allow remote authenticated users to execute arbitr…

  Jun 22, 2009
• Unscored —
  CVE-2009-2161 Public exploit

  Directory traversal vulnerability in backend/admin-functions.php in TorrentTrader Classic 1.09, when used on a case-ins…

  Jun 22, 2009
• Unscored —
  CVE-2009-2159 Public exploit

  backup-database.php in TorrentTrader Classic 1.09 does not require administrative authentication, which allows remote a…

  Jun 22, 2009
• Unscored —
  CVE-2009-2160 Public exploit

  TorrentTrader Classic 1.09 allows remote attackers to (1) obtain configuration information via a direct request to phpi…

  Jun 22, 2009
• Unscored —
  CVE-2009-2158 Public exploit

  account-recover.php in TorrentTrader Classic 1.09 chooses random passwords from an insufficiently large set, which make…

  Jun 22, 2009
• Unscored —
  CVE-2009-2156 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in TorrentTrader Classic 1.09 allow remote authenticated users to i…

  Jun 22, 2009
• Unscored —
  CVE-2009-2147 Public exploit

  SQL injection vulnerability in fdown.php in phpWebThings 1.5.2 and earlier allows remote attackers to execute arbitrary…

  Jun 22, 2009
• Unscored —
  CVE-2009-2142 Public exploit

  Multiple SQL injection vulnerabilities in admin/index.asp in Zip Store Chat 4.0 and 5.0 allow remote attackers to execu…

  Jun 22, 2009
• Unscored —
  CVE-2009-2141 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in TBDev.NET 01-01-08 allow remote attackers to inject arbitrary we…

  Jun 22, 2009
• Unscored —
  CVE-2009-2151 Public exploit

  Directory traversal vulnerability in index.php in AdaptWeb 0.9.2 allows remote attackers to read arbitrary files via a …

  Jun 22, 2009
• Unscored —
  CVE-2009-2146 Public exploit EPSS 21%

  Unrestricted file upload vulnerability in the Compose Email feature in the Emails module in Sugar Community Edition (ak…

  Jun 22, 2009
• Unscored —
  CVE-2009-2145 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in transLucid 1.75 allow remote attackers to inject arbitrary web s…

  Jun 22, 2009
• Unscored —
  CVE-2009-2152 Public exploit

  SQL injection vulnerability in a_index.php in AdaptWeb 0.9.2 allows remote attackers to execute arbitrary SQL commands …

  Jun 22, 2009
• Unscored —
  CVE-2009-2153 Public exploit

  Cross-site scripting (XSS) vulnerability in index.php in Impleo Music Collection 2.0 allows remote attackers to inject …

  Jun 22, 2009
• Unscored —
  CVE-2009-2154 Public exploit

  SQL injection vulnerability in admin/login.php in Impleo Music Collection 2.0, when magic_quotes_gpc is disabled, allow…

  Jun 22, 2009
• Unscored —
  CVE-2009-2150 Public exploit

  Multiple cross-site request forgery (CSRF) vulnerabilities in Campus Virtual-LMS allow (1) remote attackers to hijack t…

  Jun 22, 2009
• Unscored —
  CVE-2009-2149 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in Campus Virtual-LMS allow remote attackers to inject arbitrary we…

  Jun 22, 2009
• Unscored —
  CVE-2009-2148 Public exploit

  SQL injection vulnerability in news/index.php in Campus Virtual-LMS allows remote attackers to execute arbitrary SQL co…

  Jun 22, 2009