Archive
June 2009
Vulnerabilities first published in this month (UTC), newest first.
186 results · Clear filters · Feed
-
Unscored —
PeaZIP 2.6.1, 2.5.1, and earlier on Windows allows user-assisted remote attackers to execute arbitrary commands via a .…
-
Unscored —CVE-2009-2256 Public exploit
The administrative web interface on the Netgear DG632 with firmware 3.4.0_ap allows remote attackers to cause a denial …
-
Unscored —CVE-2009-2257 Public exploit
The administrative web interface on the Netgear DG632 with firmware 3.4.0_ap allows remote attackers to bypass authenti…
-
Unscored —CVE-2009-2263 Public exploit
Directory traversal vulnerability in index.php in Awesome PHP Mega File Manager 1.0 allows remote attackers to include …
-
Unscored —
Zen Cart 1.3.8a, 1.3.8, and earlier does not require administrative authentication for admin/record_company.php, which …
-
Unscored —
Zen Cart 1.3.8a, 1.3.8, and earlier does not require administrative authentication for admin/sqlpatch.php, which allows…
-
Unscored —CVE-2009-2258 Public exploit
Directory traversal vulnerability in cgi-bin/webcm in the administrative web interface on the Netgear DG632 with firmwa…
-
Unscored —CVE-2008-6837 Public exploit
SQL injection vulnerability in Zoph 0.7.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified v…
-
Unscored —CVE-2008-6839 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in TGS Content Management 0.3.2r2 allow remote attackers to inject …
-
Unscored —CVE-2008-6838 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in Zoph 0.7.2.1 allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2009-2234 Public exploit
Multiple SQL injection vulnerabilities in admin.php in VICIDIAL Call Center Suite 2.0.5-173 allow remote attackers to e…
-
Unscored —CVE-2009-2235 Public exploit
SQL injection vulnerability in page.php in Your Articles Directory allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2009-2236 Public exploit
SQL injection vulnerability in yad-admin/login.php in Your Article Directory allows remote attackers to execute arbitra…
-
Unscored —CVE-2009-2243 Public exploit
SQL injection vulnerability in active_appointments.asp in ASP Inline Corporate Calendar allows remote attackers to exec…
-
Unscored —CVE-2009-2241 Public exploit
Cross-site scripting (XSS) vulnerability in search.asp in ASP Inline Corporate Calendar allows remote attackers to inje…
-
Unscored —CVE-2009-2238 Public exploit
Unrestricted file upload vulnerability in includes/shared_scripts/wysiwyg_editor/assetmanager/assetmanager.asp in DMXRe…
-
Unscored —CVE-2009-2242 Public exploit
SQL injection vulnerability in active_appointments.asp in ASP Inline Corporate Calendar allows remote attackers to exec…
-
Unscored —CVE-2009-2239 Public exploit
SQL injection vulnerability in the (1) casinobase (com_casinobase), (2) casino_blackjack (com_casino_blackjack), and (3…
-
Unscored —
Stack-based buffer overflow in Motorola Timbuktu Pro 8.6.5 on Windows allows remote attackers to execute arbitrary code…
-
Unscored —CVE-2009-2229 Public exploit
Directory traversal vulnerability in engine.php in Kasseler CMS 1.3.5 lite allows remote attackers to read arbitrary fi…
-
Unscored —CVE-2009-2231 Public exploit
MIDAS 1.43 allows remote attackers to bypass authentication and obtain administrative access via an admin account recor…
-
Unscored —CVE-2009-2228 Public exploit
Cross-site scripting (XSS) vulnerability in engine.php in Kasseler CMS allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2009-2230 Public exploit
SQL injection vulnerability in inc/datahandlers/user.php in MyBB (aka MyBulletinBoard) before 1.4.7 allows remote authe…
-
Unscored —CVE-2009-2233 Public exploit
The admin interface in AWScripts.com Gallery Search Engine 1.5 allows remote attackers to bypass authentication and gai…
-
Unscored —
Stack-based buffer overflow in B Labs Bopup Communication Server 3.2.26.5460 allows remote attackers to execute arbitra…
-
Unscored —CVE-2009-2220 Public exploit
Multiple directory traversal vulnerabilities in Tribiq CMS 5.0.12c, when register_globals is enabled and magic_quotes_g…
-
Unscored —CVE-2009-2223 Public exploit
Directory traversal vulnerability in locms/smarty.php in LightOpenCMS 0.1 allows remote attackers to include and execut…
-
Unscored —CVE-2009-2216 Public exploit
Cross-site scripting (XSS) vulnerability in CMD_REDIRECT in DirectAdmin 1.33.6 and earlier allows remote attackers to i…
-
Unscored —CVE-2009-2219 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in phpCollegeExchange 0.1.5c allow remote attackers to inject arbit…
-
Unscored —CVE-2009-2218 Public exploit
Multiple PHP remote file inclusion vulnerabilities in phpCollegeExchange 0.1.5c, when register_globals is enabled, allo…
-
Unscored —CVE-2009-1203 Public exploit
WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 does not properly …
-
Unscored —CVE-2009-1201 Public exploit
Eval injection vulnerability in the csco_wrap_js function in /+CSCOL+/cte.js in WebVPN on the Cisco Adaptive Security A…
-
Unscored —CVE-2009-2209 Public exploit
SQL injection vulnerability in rscms_mod_newsview.php in RS-CMS 2.1 allows remote attackers to execute arbitrary SQL co…
-
Unscored —
Multiple format string vulnerabilities in client/client.c in smbclient in Samba 3.2.0 through 3.2.12 might allow contex…
-
Unscored —CVE-2009-2180 Public exploit
Multiple directory traversal vulnerabilities in upfiles/index.php in Pc4 Uploader 10.0 and earlier allow remote attacke…
-
Unscored —CVE-2009-2178 Public exploit
Cross-site scripting (XSS) vulnerability in website.php in phpDatingClub 3.7 allows remote attackers to inject arbitrar…
-
Unscored —CVE-2009-2174 Public exploit
GUPnP 0.12.7 allows remote attackers to cause a denial of service (crash) via an empty (1) subscription or (2) control …
-
Unscored —CVE-2009-2181 Public exploit
Cross-site scripting (XSS) vulnerability in admin-files/templates/list_dir.php in Campsite 3.3.0 RC1 allows remote atta…
-
Unscored —CVE-2009-2177 Public exploit
code/display.php in fuzzylime (cms) 3.03a and earlier, when magic_quotes_gpc is disabled, allows remote attackers to co…
-
Unscored —CVE-2009-2176 Public exploit
Multiple directory traversal vulnerabilities in fuzzylime (cms) 3.03a and earlier, when magic_quotes_gpc is disabled, a…