Skip to content
OpenAdvisories

Archive

27 June 2009

Vulnerabilities first published on this day (UTC), newest first.

15 results · Feed

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability in OpenID 5.x before 5x.-1.2, a module for Drupal, allows remote attack…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in OpenID 5.x before 5.x-1.2, a module for Drupal, allows remote attackers to …

  • Unscored —
    CVE-2008-6837 Public exploit

    SQL injection vulnerability in Zoph 0.7.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified v…

  • Unscored —
    CVE-2008-6839 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in TGS Content Management 0.3.2r2 allow remote attackers to inject …

  • Unscored —
    CVE-2008-6838 Public exploit

    Cross-site scripting (XSS) vulnerability in search.php in Zoph 0.7.2.1 allows remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2009-2234 Public exploit

    Multiple SQL injection vulnerabilities in admin.php in VICIDIAL Call Center Suite 2.0.5-173 allow remote attackers to e…

  • Unscored —
    CVE-2009-2235 Public exploit

    SQL injection vulnerability in page.php in Your Articles Directory allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2009-2236 Public exploit

    SQL injection vulnerability in yad-admin/login.php in Your Article Directory allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2009-2243 Public exploit

    SQL injection vulnerability in active_appointments.asp in ASP Inline Corporate Calendar allows remote attackers to exec…

  • Unscored —
    CVE-2009-2241 Public exploit

    Cross-site scripting (XSS) vulnerability in search.asp in ASP Inline Corporate Calendar allows remote attackers to inje…

  • Unscored —

    Unspecified vulnerability in Views Bulk Operations 5.x-1.x before 5.x-1.4 and 6.x-1.x before 6.x-1.7, a module for Drup…

  • Unscored —
    CVE-2009-2238 Public exploit

    Unrestricted file upload vulnerability in includes/shared_scripts/wysiwyg_editor/assetmanager/assetmanager.asp in DMXRe…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in AD2000 free-sw leger (aka Web Conference Room Free) 1.6.4 and earlier allow…

  • Unscored —
    CVE-2009-2242 Public exploit

    SQL injection vulnerability in active_appointments.asp in ASP Inline Corporate Calendar allows remote attackers to exec…

  • Unscored —
    CVE-2009-2239 Public exploit

    SQL injection vulnerability in the (1) casinobase (com_casinobase), (2) casino_blackjack (com_casino_blackjack), and (3…