Archive
24 August 2009
Vulnerabilities first published on this day (UTC), newest first.
40 results · Feed
-
Unscored —CVE-2008-7056 Public exploit
BandSite CMS 1.1.4 does not perform access control for adminpanel/phpmydump.php, which allows remote attackers to obtai…
-
Unscored —CVE-2008-7055 Public exploit
module.php in ezContents 2.0.3 allows remote attackers to bypass the directory traversal protection mechanism to includ…
-
Unscored —CVE-2008-7061 Public exploit
The tooltip manager (chrome/views/tooltip_manager.cc) in Google Chrome 0.2.149.29 Build 1798 and possibly other version…
-
Unscored —CVE-2008-7053 Public exploit
LogMeIn Remote Access Utility ActiveX control (RACtrl.dll) allows remote attackers to cause a denial of service (crash)…
-
Unscored —CVE-2008-7054 Public exploit
Multiple directory traversal vulnerabilities in ezContents 2.0.3 allow remote attackers to include and execute arbitrar…
-
Unscored —CVE-2008-7058 Public exploit
Cross-site request forgery (CSRF) vulnerability in BandSite CMS 1.1.4 allows remote attackers to hijack the authenticat…
-
Unscored —CVE-2008-7059 Public exploit
SQL injection vulnerability in index.php in One-News Beta 2 allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in One-News Beta 2 allow remote attackers to inject arbitrary HTML …
-
Unscored —CVE-2008-7057 Public exploit
Cross-site scripting (XSS) vulnerability in merchandise.php in BandSite CMS 1.1.4 allows remote attackers to inject arb…
-
Unscored —CVE-2009-2954 EPSS 13%
Microsoft Internet Explorer 6.0.2900.2180 and earlier allows remote attackers to cause a denial of service (CPU consump…
-
Unscored —CVE-2009-2953 Public exploit
Mozilla Firefox 3.0.6 through 3.0.13, and 3.5.x, allows remote attackers to cause a denial of service (CPU consumption)…
-
Unscored —
Unspecified vulnerability in the pollwakeup function in Sun Solaris 10, and OpenSolaris before snv_51, allows local use…
-
Unscored —
Phenotype CMS before 2.9 does not use a random salt value for password encryption, which makes it easier for context-de…
-
Unscored —
The (1) Net.Commerce and (2) Net.Data components in IBM WebSphere Commerce Suite store sensitive information under the …
-
Unscored —
Google Chrome 1.0.154.48 and earlier allows remote attackers to cause a denial of service (CPU consumption and applicat…
-
Unscored —CVE-2008-7049 Public exploit
Multiple SQL injection vulnerabilities in login.asp in NatterChat 1.1 and 1.12 allow remote attackers to execute arbitr…
-
Unscored —
Unrestricted file upload vulnerability in usercp.php in AlilG Application AliBoard Beta allows remote authenticated use…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in NatterChat 1.12 allow remote attackers to inject arbitrary web s…
-
Unscored —
PHP remote file inclusion vulnerability in kernel/smarty/Smarty.class.php in PHPEcho CMS 2.0 rc3 allows remote attacker…
-
Unscored —CVE-2008-7046 Public exploit
AJ Square Free Polling Script (AJPoll) allows remote attackers to bypass authentication and create new polls via a dire…
-
Unscored —
The Sidebar gadget in ITN News Gadget (aka ITN Hub Gadget) 1.06 for Windows Vista, and possibly other versions before 1…
-
Unscored —CVE-2008-7044 Public exploit
SQL injection vulnerability in admin/include/newpoll.php in AJ Square Free Polling Script (AJPoll) Database version all…
-
Unscored —CVE-2008-7036 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in DevTracker module 3.0 for bcoos 1.1.11 and earlier,…
-
Unscored —CVE-2008-7030 Public exploit
Multiple SQL injection vulnerabilities in Site2Nite Real Estate Web allow remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2008-7040 Public exploit
SQL injection vulnerability in ahah/sf-profile.php in the Yellow Swordfish Simple Forum module for Wordpress allows rem…
-
Unscored —CVE-2008-7032 Public exploit
Web Management Console Cross-site request forgery (CSRF) vulnerability in the web management console in F5 BIG-IP 9.4.3…
-
Unscored —CVE-2008-7033 Public exploit
SQL injection vulnerability in the Simple Shop Galore (com_simpleshop) component for Joomla! allows remote attackers to…
-
Unscored —
Cross-site scripting (XSS) vulnerability in admin/comments.php in Gelato CMS 0.95 allows remote attackers to inject arb…
-
Unscored —CVE-2008-7042 Public exploit
PHP remote file inclusion vulnerability in url.php in FreshScripts Fresh Email Script 1.0 through 1.11 allows remote at…
-
Unscored —
Cross-site scripting (XSS) vulnerability in an unspecified component in Simple Machines phpRaider 1.0.7 allows remote a…
-
Unscored —CVE-2008-7043 Public exploit
Cross-site scripting (XSS) vulnerability in register.php in FreshScripts Fresh Email Script 1.0 through 1.11 allows rem…
-
Unscored —CVE-2008-7051 Public exploit
AJ Square AJ Article allows remote attackers to bypass authentication and access administrator functionality via a dire…
-
Unscored —
The password_check function in auth/auth_phpbb3.php in WoW Raid Manager 3.5.1 before Patch 1, when using PHPBB3 authent…
-
Unscored —CVE-2008-7041 Public exploit
AJ Classifieds allows remote attackers to bypass authentication and gain administrator privileges via a direct request …
-
Unscored —CVE-2008-7031 Public exploit
Heap-based buffer overflow in Foxit Remote Access Server (aka WAC Server) 2.0 Build 3503 allows remote attackers to cau…
-
Unscored —CVE-2008-7045 Public exploit
AJ Square Free Polling Script (AJPoll) Database version allows remote attackers to bypass authentication and reset poll…
-
Unscored —CVE-2008-7047 Public exploit
NatterChat 1.1 allows remote attackers to bypass authentication and gain administrator privileges to read or delete roo…
-
Unscored —CVE-2008-7052 Public exploit
Unrestricted file upload vulnerability in profile.php in Pre Projects Pre Real Estate Listings allows remote authentica…
-
Unscored —CVE-2008-7038 Public exploit
SQL injection vulnerability in the My_eGallery module for PHP-Nuke allows remote attackers to execute arbitrary SQL com…
-
Unscored —
TikiWiki 1.6.1 allows remote attackers to bypass authentication by entering a valid username with an arbitrary password…