Skip to content
OpenAdvisories

Archive

27 July 2009

Vulnerabilities first published on this day (UTC), newest first.

26 results · Feed

  • Unscored —
    CVE-2009-2611 Public exploit

    Directory traversal vulnerability in infusions/last_seen_users_panel/last_seen_users_panel.php in MyFusion (aka MyF) 6 …

  • Unscored —
    CVE-2009-2608 Public exploit

    Multiple SQL injection vulnerabilities in PHP Address Book 4.0.x allow remote attackers to execute arbitrary SQL comman…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in DataCheck Solutions LinkPal 1.x allow remote attackers to inject…

  • Unscored —
    CVE-2009-2614 Public exploit

    SQL injection vulnerability in z_admin_login.asp in DataCheck Solutions LinkPal 1.x allows remote attackers to execute …

  • Unscored —
    CVE-2009-2618 Public exploit

    SQL injection vulnerability in the Surveys (aka NS-Polls) module in MDPro (MD-Pro) 1.083.x allows remote attackers to e…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the Links Related module in the Links Package 5.x before 5.x-1.13 and 6.x b…

  • Unscored —
    CVE-2009-2619 Public exploit

    SQL injection vulnerability in login.asp in DataCheck Solutions V-SpacePal allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2009-2607 Public exploit

    SQL injection vulnerability in the com_pinboard component for Joomla! allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2009-2609 Public exploit

    SQL injection vulnerability in the amoCourse (com_amocourse) component for Joomla! allows remote attackers to execute a…

  • Unscored —

    SQL injection vulnerability in login.aspx in ProSMDR allows remote attackers to execute arbitrary SQL commands via the …

  • Unscored —

    SQL injection vulnerability in z_admin_login.asp in DataCheck Solutions SitePal 1.x allows remote attackers to execute …

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in DataCheck Solutions SitePal 1.x allow remote attackers to inject…

  • Unscored —
    CVE-2009-2617 Public exploit

    Stack-based buffer overflow in medialib.dll in BaoFeng Storm 3.9.62 allows remote attackers to execute arbitrary code v…

  • Unscored —

    Directory traversal vulnerability in admin/includes/languages/english.php in Zen Cart 1.3.8a, 1.3.8, and earlier, when …

  • Unscored —

    Directory traversal vulnerability in admin/includes/initsystem.php in Zen Cart 1.3.8 and 1.3.8a, when .htaccess is not …

  • Unscored —
    CVE-2009-2598 Public exploit

    Multiple SQL injection vulnerabilities in Online Grades & Attendance 3.2.6 and earlier allow (1) remote attackers to ex…

  • Unscored —

    Unspecified vulnerability in the Solaris Auditing subsystem in Sun Solaris 9 and 10 and OpenSolaris before snv_121, whe…

  • Unscored —
    CVE-2009-2601 Public exploit

    SQL injection vulnerability in the Joomlaequipment (aka JUser or com_juser) component 2.0.4 for Joomla! allows remote a…

  • Unscored —
    CVE-2009-2606 Public exploit

    ASP Football Pool 2.3 stores sensitive information under the web root with insufficient access control, which allows re…

  • Unscored —
    CVE-2009-2600 Public exploit

    Multiple directory traversal vulnerabilities in view.php in Webboard 2.90 beta and earlier allow remote attackers to re…

  • Unscored —
    CVE-2009-2604 Public exploit

    Multiple SQL injection vulnerabilities in adminlogin.asp in Zen Help Desk 2.1 allow remote attackers to execute arbitra…

  • Unscored —
    CVE-2009-2605 Public exploit

    Multiple SQL injection vulnerabilities in adminquery.php in Traidnt Up 2.0 allow remote attackers to execute arbitrary …

  • Unscored —

    The Sun Java System (SJS) Access Manager Policy Agent module 2.2 for SJS Web Proxy Server 4.0 allows remote attackers t…

  • Unscored —
    CVE-2009-2603 Public exploit

    Multiple SQL injection vulnerabilities in index.php in Escon SupportPortal Pro 3.0 allow remote attackers to execute ar…

  • Unscored —
    CVE-2009-2602 Public exploit

    R2 Newsletter Lite, Pro, and Stats stores sensitive information under the web root with insufficient access control, wh…

  • Unscored —
    CVE-2009-2599 Public exploit

    SQL injection vulnerability in index.php in RadCLASSIFIEDS Gold 2.0 allows remote attackers to execute arbitrary SQL co…