Archive
July 2009
Vulnerabilities first published in this month (UTC), newest first.
206 results · Clear filters · Feed
-
Unscored —CVE-2009-2344 Public exploit
The web-based management interfaces in Sourcefire Defense Center (DC) and 3D Sensor before 4.8.2 allow remote authentic…
-
Unscored —CVE-2009-2339 Public exploit
SQL injection vulnerability in index.php in Rentventory allows remote attackers to execute arbitrary SQL commands via t…
-
Unscored —CVE-2009-2341 Public exploit
SQL injection vulnerability in albumdetail.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2009-2340 Public exploit
SQL injection vulnerability in admin/index.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2008-6852 Public exploit
SQL injection vulnerability in the Ice Gallery (com_ice) component 0.5 beta 2 for Joomla! allows remote attackers to ex…
-
Unscored —CVE-2008-6849 Public exploit
Unrestricted file upload vulnerability in index.php in phpGreetCards 3.7 allows remote attackers to execute arbitrary P…
-
Unscored —CVE-2008-6848 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in phpGreetCards 3.7 allows remote attackers to inject arbitrary …
-
Unscored —CVE-2008-6853 Public exploit
SQL injection vulnerability in modules/poll/index.php in AIST NetCat 3.0 and 3.12 allows remote attackers to execute ar…
-
Unscored —CVE-2008-6851 Public exploit
SQL injection vulnerability in page.php in PHP Link Directory (phpLD) 3.3, when register_globals is enabled and magic_q…
-
Unscored —CVE-2009-2337 Public exploit
SQL injection vulnerability in includes/module/book/index.inc.php in w3b|cms Gaestebuch Guestbook Module 3.0.0, when ma…
-
Unscored —CVE-2009-2338 Public exploit
Directory traversal vulnerability in includes/startmodules.inc.php in FreeWebshop.org 2.2.9 R2, when register_globals i…
-
Unscored —CVE-2009-2329 Public exploit
KerviNet Forum 1.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) admi…
-
Unscored —CVE-2009-2331 Public exploit
Multiple static code injection vulnerabilities in CMS Chainuk 1.2 and earlier allow remote attackers to inject arbitrar…
-
Unscored —CVE-2009-2333 Public exploit
Multiple directory traversal vulnerabilities in CMS Chainuk 1.2 and earlier allow remote attackers to include and execu…
-
Unscored —CVE-2009-2330 Public exploit
Cross-site scripting (XSS) vulnerability in admin/admin_menu.php in CMS Chainuk 1.2 and earlier allows remote attackers…
-
Unscored —CVE-2009-2332 Public exploit
CMS Chainuk 1.2 and earlier allows remote attackers to obtain sensitive information via (1) a crafted id parameter to i…
-
Unscored —
Multiple directory traversal vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to create executable fi…
-
Unscored —CVE-2009-2326 Public exploit
Multiple SQL injection vulnerabilities in KerviNet Forum 1.1 and earlier allow remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2009-2328 Public exploit
admin/edit_user.php in KerviNet Forum 1.1 and earlier does not require administrative authentication, which allows remo…
-
Unscored —CVE-2009-2327 Public exploit
Cross-site scripting (XSS) vulnerability in add_voting.php in KerviNet Forum 1.1 and earlier allows remote authenticate…
-
Unscored —CVE-2009-2325 Public exploit
Directory traversal vulnerability in index.php in Clicknet CMS 2.1 allows remote attackers to read arbitrary files via …
-
Unscored —CVE-2008-6847 Public exploit
Cross-site scripting (XSS) vulnerability in Employee/emp_login.asp in Pre ASP Job Board allows remote attackers to inje…
-
Unscored —CVE-2008-6843 Public exploit
Directory traversal vulnerability in index.php in Fantastico, as used with cPanel 11.x, allows remote attackers to read…
-
Unscored —CVE-2008-6842 Public exploit
Directory traversal vulnerability in data/modules/blog/module_pages_site.php in Pluck 4.6.1 allows remote attackers to …
-
Unscored —CVE-2008-6844 Public exploit
The registration view (/user/register) in eZ Publish 3.5.6 and earlier, and possibly other versions before 3.9.5, 3.10.…
-
Unscored —CVE-2009-2310 Public exploit
SQL injection vulnerability in include/get_read.php in Extensible-BioLawCom CMS (X-BLC) 0.2.0 and earlier allows remote…
-
Unscored —CVE-2009-2309 Public exploit
SQL injection vulnerability in index.php in Codice CMS 2 allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2009-2311 Public exploit
SQL injection vulnerability in the rGallery plugin 1.2.3 for WoltLab Burning Board (WBB3) allows remote attackers to ex…
-
Unscored —CVE-2009-2313 Public exploit
Directory traversal vulnerability in index.php in Jinzora Media Jukebox 2.8 and earlier allows remote attackers to incl…
-
Unscored —CVE-2009-2307 Public exploit
SQL injection vulnerability in the CWGuestBook module 2.1 and earlier for MAXdev MDPro (aka MD-Pro) allows remote attac…
-
Unscored —CVE-2009-2302 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Aardvark Topsites PHP 5.2.0 and earlier allows remote attacker…
-
Unscored —CVE-2009-2308 Public exploit
Multiple SQL injection vulnerabilities in affiliates.php in the Affiliation (aka Affiliates) module 1.1.0 and earlier f…
-
Unscored —CVE-2009-2306 Public exploit
The ARD-9808 DVR card security camera stores sensitive information under the web root with insufficient access control,…
-
Unscored —CVE-2009-2305 Public exploit
The ARD-9808 DVR card security camera allows remote attackers to cause a denial of service via a long URI composed of /…
-
Unscored —CVE-2008-6840 Public exploit
Multiple PHP remote file inclusion vulnerabilities in V-webmail 1.6.4 allow remote attackers to execute arbitrary PHP c…
-
Unscored —CVE-2008-6841 Public exploit
PHP remote file inclusion vulnerability in the Green Mountain Information Technology and Consulting Database Query (com…
-
Unscored —
Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementatio…
-
Unscored —CVE-2009-2276 Public exploit
SQL injection vulnerability in voteforus.php in the Vote For Us extension 1.0.1 and earlier for PunBB allows remote att…
-
Unscored —CVE-2009-2286 Public exploit
Buffer overflow in compface 1.5.2 and earlier allows user-assisted attackers to cause a denial of service (crash) via a…
-
Unscored —CVE-2009-2289 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Arcade Trade Script 1.0 beta allows remote attackers to inject…