Archive
June 2009
Vulnerabilities first published in this month (UTC), newest first.
186 results · Clear filters · Feed
-
Unscored —CVE-2009-2172 Public exploit
Cross-site scripting (XSS) vulnerability in forum/radioandtv.php in the Radio and TV Player addon for vBulletin allows …
-
Unscored —CVE-2009-2179 Public exploit
SQL injection vulnerability in search.php in phpDatingClub 3.7 allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2009-2183 Public exploit
Directory traversal vulnerability in admin-files/ad.php in Campsite 3.3.0 RC1 allows remote attackers to read and possi…
-
Unscored —CVE-2009-2184 Public exploit
Absolute path traversal vulnerability in forcedownload.php in Gravy Media Photo Host 1.0.8 allows remote attackers to r…
-
Unscored —CVE-2009-2173 Public exploit
The LAN game feature in Carom3D 5.06 allows remote authenticated users to cause a denial of service (application hang) …
-
Unscored —CVE-2009-2182 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Campsite 3.3.0 RC1 allow remote attackers to execute arbitrary PH…
-
Unscored —CVE-2009-2169 Public exploit
Insecure method vulnerability in the PDFVIEWER.PDFViewerCtrl.1 ActiveX control (pdfviewer.ocx) in Edraw PDF Viewer Comp…
-
Unscored —CVE-2008-6833 Public exploit
Directory traversal vulnerability in commsrss.php in fuzzylime (cms) before 3.01b allows remote attackers to include an…
-
Unscored —CVE-2008-6834 Public exploit
Multiple directory traversal vulnerabilities in fuzzylime (cms) 3.01 and 3.01a allow remote attackers to include and ex…
-
Unscored —CVE-2009-2166 Public exploit
Absolute path traversal vulnerability in cvs.php in OCS Inventory NG before 1.02.1 on Unix allows remote attackers to r…
-
Unscored —CVE-2009-2163 Public exploit
Cross-site scripting (XSS) vulnerability in login/default.aspx in Sitecore CMS before 6.0.2 Update-1 090507 allows remo…
-
Unscored —CVE-2009-2164 Public exploit
Multiple SQL injection vulnerabilities in Kjtechforce mailman beta1, when magic_quotes_gpc is disabled, allow remote at…
-
Critical 9.8
cpanel/login.php in EgyPlus 7ammel (aka 7ml) 1.0.1 and earlier sends a redirect to the web browser but does not exit wh…
-
Unscored —CVE-2009-2167 Public exploit
Multiple SQL injection vulnerabilities in cpanel/login.php in EgyPlus 7ammel (aka 7ml) 1.0.1 and earlier, when magic_qu…
-
Unscored —CVE-2009-2157 Public exploit
Multiple SQL injection vulnerabilities in TorrentTrader Classic 1.09 allow remote authenticated users to execute arbitr…
-
Unscored —CVE-2009-2161 Public exploit
Directory traversal vulnerability in backend/admin-functions.php in TorrentTrader Classic 1.09, when used on a case-ins…
-
Unscored —CVE-2009-2159 Public exploit
backup-database.php in TorrentTrader Classic 1.09 does not require administrative authentication, which allows remote a…
-
Unscored —CVE-2009-2160 Public exploit
TorrentTrader Classic 1.09 allows remote attackers to (1) obtain configuration information via a direct request to phpi…
-
Unscored —CVE-2009-2158 Public exploit
account-recover.php in TorrentTrader Classic 1.09 chooses random passwords from an insufficiently large set, which make…
-
Unscored —CVE-2009-2156 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in TorrentTrader Classic 1.09 allow remote authenticated users to i…
-
Unscored —CVE-2009-2147 Public exploit
SQL injection vulnerability in fdown.php in phpWebThings 1.5.2 and earlier allows remote attackers to execute arbitrary…
-
Unscored —CVE-2009-2142 Public exploit
Multiple SQL injection vulnerabilities in admin/index.asp in Zip Store Chat 4.0 and 5.0 allow remote attackers to execu…
-
Unscored —CVE-2009-2141 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in TBDev.NET 01-01-08 allow remote attackers to inject arbitrary we…
-
Unscored —CVE-2009-2151 Public exploit
Directory traversal vulnerability in index.php in AdaptWeb 0.9.2 allows remote attackers to read arbitrary files via a …
-
Unscored —
Unrestricted file upload vulnerability in the Compose Email feature in the Emails module in Sugar Community Edition (ak…
-
Unscored —CVE-2009-2145 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in transLucid 1.75 allow remote attackers to inject arbitrary web s…
-
Unscored —CVE-2009-2152 Public exploit
SQL injection vulnerability in a_index.php in AdaptWeb 0.9.2 allows remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2009-2153 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Impleo Music Collection 2.0 allows remote attackers to inject …
-
Unscored —CVE-2009-2154 Public exploit
SQL injection vulnerability in admin/login.php in Impleo Music Collection 2.0, when magic_quotes_gpc is disabled, allow…
-
Unscored —CVE-2009-2150 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in Campus Virtual-LMS allow (1) remote attackers to hijack t…
-
Unscored —CVE-2009-2149 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Campus Virtual-LMS allow remote attackers to inject arbitrary we…
-
Unscored —CVE-2009-2148 Public exploit
SQL injection vulnerability in news/index.php in Campus Virtual-LMS allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2009-2134 Public exploit
pivot/tb.php in Pivot 1.40.4 and 1.40.7 allows remote attackers to obtain sensitive information via an invalid url para…
-
Unscored —CVE-2009-2138 Public exploit
Multiple open redirect vulnerabilities in TBDev.NET 01-01-08 allow remote attackers to redirect users to arbitrary web …
-
Unscored —CVE-2009-2130 Public exploit
Elvin 1.2.0 allows remote attackers to read the PHP source code of (1) login.ei, (2) jump_bug.ei, or (3) create_account…
-
Unscored —CVE-2009-2123 Public exploit
Multiple SQL injection vulnerabilities in Elvin 1.2.0 allow remote attackers to execute arbitrary SQL commands via the …
-
Unscored —CVE-2009-2131 Public exploit
Cross-site scripting (XSS) vulnerability in 4images 1.7.7 and earlier allows remote authenticated users to inject arbit…
-
Unscored —CVE-2009-2132 Public exploit
Directory traversal vulnerability in global.php in 4images before 1.7.7, when magic_quotes_gpc is disabled, allows remo…
-
Unscored —CVE-2009-2124 Public exploit
Directory traversal vulnerability in page.php in Elvin 1.2.0 allows remote attackers to include and execute arbitrary l…
-
Unscored —CVE-2009-2127 Public exploit
Cross-site scripting (XSS) vulnerability in show_activity.php in Elvin 1.2.0 allows remote attackers to inject arbitrar…