Skip to content
OpenAdvisories

Archive

2 July 2009

Vulnerabilities first published on this day (UTC), newest first.

13 results · Clear filters · Feed

  • Unscored —
    CVE-2008-6847 Public exploit

    Cross-site scripting (XSS) vulnerability in Employee/emp_login.asp in Pre ASP Job Board allows remote attackers to inje…

  • Unscored —
    CVE-2008-6843 Public exploit

    Directory traversal vulnerability in index.php in Fantastico, as used with cPanel 11.x, allows remote attackers to read…

  • Unscored —
    CVE-2008-6842 Public exploit

    Directory traversal vulnerability in data/modules/blog/module_pages_site.php in Pluck 4.6.1 allows remote attackers to …

  • Unscored —
    CVE-2008-6844 Public exploit

    The registration view (/user/register) in eZ Publish 3.5.6 and earlier, and possibly other versions before 3.9.5, 3.10.…

  • Unscored —
    CVE-2009-2310 Public exploit

    SQL injection vulnerability in include/get_read.php in Extensible-BioLawCom CMS (X-BLC) 0.2.0 and earlier allows remote…

  • Unscored —
    CVE-2009-2309 Public exploit

    SQL injection vulnerability in index.php in Codice CMS 2 allows remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2009-2311 Public exploit

    SQL injection vulnerability in the rGallery plugin 1.2.3 for WoltLab Burning Board (WBB3) allows remote attackers to ex…

  • Unscored —
    CVE-2009-2313 Public exploit

    Directory traversal vulnerability in index.php in Jinzora Media Jukebox 2.8 and earlier allows remote attackers to incl…

  • Unscored —
    CVE-2009-2307 Public exploit

    SQL injection vulnerability in the CWGuestBook module 2.1 and earlier for MAXdev MDPro (aka MD-Pro) allows remote attac…

  • Unscored —
    CVE-2009-2302 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Aardvark Topsites PHP 5.2.0 and earlier allows remote attacker…

  • Unscored —
    CVE-2009-2308 Public exploit

    Multiple SQL injection vulnerabilities in affiliates.php in the Affiliation (aka Affiliates) module 1.1.0 and earlier f…

  • Unscored —
    CVE-2009-2306 Public exploit

    The ARD-9808 DVR card security camera stores sensitive information under the web root with insufficient access control,…

  • Unscored —
    CVE-2009-2305 Public exploit

    The ARD-9808 DVR card security camera allows remote attackers to cause a denial of service via a long URI composed of /…