Archive
June 2009
Vulnerabilities first published in this month (UTC), newest first.
450 results · Feed
-
Unscored —CVE-2009-2173 Public exploit
The LAN game feature in Carom3D 5.06 allows remote authenticated users to cause a denial of service (application hang) …
-
Unscored —CVE-2009-2182 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Campsite 3.3.0 RC1 allow remote attackers to execute arbitrary PH…
-
Unscored —
Mahara 1.1 before 1.1.5 does not apply permission checks when saving a view that contains artefacts, which allows remot…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.0 before 1.0.12 and 1.1 before 1.1.5 allow remote attac…
-
Unscored —CVE-2009-2169 Public exploit
Insecure method vulnerability in the PDFVIEWER.PDFViewerCtrl.1 ActiveX control (pdfviewer.ocx) in Edraw PDF Viewer Comp…
-
Unscored —CVE-2008-6833 Public exploit
Directory traversal vulnerability in commsrss.php in fuzzylime (cms) before 3.01b allows remote attackers to include an…
-
Unscored —CVE-2008-6834 Public exploit
Multiple directory traversal vulnerabilities in fuzzylime (cms) 3.01 and 3.01a allow remote attackers to include and ex…
-
Unscored —CVE-2009-2166 Public exploit
Absolute path traversal vulnerability in cvs.php in OCS Inventory NG before 1.02.1 on Unix allows remote attackers to r…
-
Unscored —CVE-2009-2163 Public exploit
Cross-site scripting (XSS) vulnerability in login/default.aspx in Sitecore CMS before 6.0.2 Update-1 090507 allows remo…
-
Unscored —CVE-2009-2164 Public exploit
Multiple SQL injection vulnerabilities in Kjtechforce mailman beta1, when magic_quotes_gpc is disabled, allow remote at…
-
Critical 9.8
cpanel/login.php in EgyPlus 7ammel (aka 7ml) 1.0.1 and earlier sends a redirect to the web browser but does not exit wh…
-
Unscored —
SerendipityNZ (aka SimpleBoxes) Serene Bach 2.20R and earlier, and 3.00 beta023 and earlier 3.x versions, uses a predic…
-
Unscored —CVE-2009-2167 Public exploit
Multiple SQL injection vulnerabilities in cpanel/login.php in EgyPlus 7ammel (aka 7ml) 1.0.1 and earlier, when magic_qu…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the XOOPS MANIAC PukiWikiMod module 1.6.6.2 and earlier for XOOPS allows re…
-
Unscored —CVE-2009-2157 Public exploit
Multiple SQL injection vulnerabilities in TorrentTrader Classic 1.09 allow remote authenticated users to execute arbitr…
-
Unscored —CVE-2009-2161 Public exploit
Directory traversal vulnerability in backend/admin-functions.php in TorrentTrader Classic 1.09, when used on a case-ins…
-
Unscored —
Cross-site scripting (XSS) vulnerability in report/ReportViewAction.do in WebNMS Free Edition 5 allows remote attackers…
-
Unscored —CVE-2009-2159 Public exploit
backup-database.php in TorrentTrader Classic 1.09 does not require administrative authentication, which allows remote a…
-
Unscored —CVE-2009-2160 Public exploit
TorrentTrader Classic 1.09 allows remote attackers to (1) obtain configuration information via a direct request to phpi…
-
Unscored —CVE-2009-2158 Public exploit
account-recover.php in TorrentTrader Classic 1.09 chooses random passwords from an insufficiently large set, which make…
-
Unscored —CVE-2009-2156 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in TorrentTrader Classic 1.09 allow remote authenticated users to i…
-
Unscored —
SQL injection vulnerability in the FireStats plugin before 1.6.2-stable for WordPress allows remote attackers to execut…
-
Unscored —CVE-2009-2147 Public exploit
SQL injection vulnerability in fdown.php in phpWebThings 1.5.2 and earlier allows remote attackers to execute arbitrary…
-
Unscored —CVE-2009-2142 Public exploit
Multiple SQL injection vulnerabilities in admin/index.asp in Zip Store Chat 4.0 and 5.0 allow remote attackers to execu…
-
Unscored —CVE-2009-2141 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in TBDev.NET 01-01-08 allow remote attackers to inject arbitrary we…
-
Unscored —CVE-2009-2151 Public exploit
Directory traversal vulnerability in index.php in AdaptWeb 0.9.2 allows remote attackers to read arbitrary files via a …
-
Unscored —
Unrestricted file upload vulnerability in the Compose Email feature in the Emails module in Sugar Community Edition (ak…
-
Unscored —CVE-2009-2145 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in transLucid 1.75 allow remote attackers to inject arbitrary web s…
-
Unscored —CVE-2009-2152 Public exploit
SQL injection vulnerability in a_index.php in AdaptWeb 0.9.2 allows remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2009-2153 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Impleo Music Collection 2.0 allows remote attackers to inject …
-
Unscored —CVE-2009-2154 Public exploit
SQL injection vulnerability in admin/login.php in Impleo Music Collection 2.0, when magic_quotes_gpc is disabled, allow…
-
Unscored —CVE-2009-2150 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in Campus Virtual-LMS allow (1) remote attackers to hijack t…
-
Unscored —
PHP remote file inclusion vulnerability in firestats-wordpress.php in the FireStats plugin before 1.6.2-stable for Word…
-
Unscored —CVE-2009-2149 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Campus Virtual-LMS allow remote attackers to inject arbitrary we…
-
Unscored —CVE-2009-2148 Public exploit
SQL injection vulnerability in news/index.php in Campus Virtual-LMS allows remote attackers to execute arbitrary SQL co…
-
Unscored —
Unspecified vulnerability in the TCP/IP networking stack in Sun Solaris 10, and OpenSolaris snv_01 through snv_82 and s…
-
Unscored —CVE-2009-2134 Public exploit
pivot/tb.php in Pivot 1.40.4 and 1.40.7 allows remote attackers to obtain sensitive information via an invalid url para…
-
Unscored —CVE-2009-2138 Public exploit
Multiple open redirect vulnerabilities in TBDev.NET 01-01-08 allow remote attackers to redirect users to arbitrary web …
-
Unscored —
Memory leak in the Ultra-SPARC T2 crypto provider device driver (aka n2cp) in Sun Solaris 10, and OpenSolaris snv_54 th…
-
Unscored —
Multiple race conditions in the Solaris Event Port API in Sun Solaris 10 and OpenSolaris before snv_107 allow local use…