Archive
24 August 2009
Vulnerabilities first published on this day (UTC), newest first.
26 results · Clear filters · Feed
-
Unscored —CVE-2008-7056 Public exploit
BandSite CMS 1.1.4 does not perform access control for adminpanel/phpmydump.php, which allows remote attackers to obtai…
-
Unscored —CVE-2008-7055 Public exploit
module.php in ezContents 2.0.3 allows remote attackers to bypass the directory traversal protection mechanism to includ…
-
Unscored —CVE-2008-7061 Public exploit
The tooltip manager (chrome/views/tooltip_manager.cc) in Google Chrome 0.2.149.29 Build 1798 and possibly other version…
-
Unscored —CVE-2008-7053 Public exploit
LogMeIn Remote Access Utility ActiveX control (RACtrl.dll) allows remote attackers to cause a denial of service (crash)…
-
Unscored —CVE-2008-7054 Public exploit
Multiple directory traversal vulnerabilities in ezContents 2.0.3 allow remote attackers to include and execute arbitrar…
-
Unscored —CVE-2008-7058 Public exploit
Cross-site request forgery (CSRF) vulnerability in BandSite CMS 1.1.4 allows remote attackers to hijack the authenticat…
-
Unscored —CVE-2008-7059 Public exploit
SQL injection vulnerability in index.php in One-News Beta 2 allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2008-7057 Public exploit
Cross-site scripting (XSS) vulnerability in merchandise.php in BandSite CMS 1.1.4 allows remote attackers to inject arb…
-
Unscored —CVE-2009-2953 Public exploit
Mozilla Firefox 3.0.6 through 3.0.13, and 3.5.x, allows remote attackers to cause a denial of service (CPU consumption)…
-
Unscored —CVE-2008-7049 Public exploit
Multiple SQL injection vulnerabilities in login.asp in NatterChat 1.1 and 1.12 allow remote attackers to execute arbitr…
-
Unscored —CVE-2008-7046 Public exploit
AJ Square Free Polling Script (AJPoll) allows remote attackers to bypass authentication and create new polls via a dire…
-
Unscored —CVE-2008-7044 Public exploit
SQL injection vulnerability in admin/include/newpoll.php in AJ Square Free Polling Script (AJPoll) Database version all…
-
Unscored —CVE-2008-7036 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in DevTracker module 3.0 for bcoos 1.1.11 and earlier,…
-
Unscored —CVE-2008-7030 Public exploit
Multiple SQL injection vulnerabilities in Site2Nite Real Estate Web allow remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2008-7040 Public exploit
SQL injection vulnerability in ahah/sf-profile.php in the Yellow Swordfish Simple Forum module for Wordpress allows rem…
-
Unscored —CVE-2008-7032 Public exploit
Web Management Console Cross-site request forgery (CSRF) vulnerability in the web management console in F5 BIG-IP 9.4.3…
-
Unscored —CVE-2008-7033 Public exploit
SQL injection vulnerability in the Simple Shop Galore (com_simpleshop) component for Joomla! allows remote attackers to…
-
Unscored —CVE-2008-7042 Public exploit
PHP remote file inclusion vulnerability in url.php in FreshScripts Fresh Email Script 1.0 through 1.11 allows remote at…
-
Unscored —CVE-2008-7043 Public exploit
Cross-site scripting (XSS) vulnerability in register.php in FreshScripts Fresh Email Script 1.0 through 1.11 allows rem…
-
Unscored —CVE-2008-7051 Public exploit
AJ Square AJ Article allows remote attackers to bypass authentication and access administrator functionality via a dire…
-
Unscored —CVE-2008-7041 Public exploit
AJ Classifieds allows remote attackers to bypass authentication and gain administrator privileges via a direct request …
-
Unscored —CVE-2008-7031 Public exploit
Heap-based buffer overflow in Foxit Remote Access Server (aka WAC Server) 2.0 Build 3503 allows remote attackers to cau…
-
Unscored —CVE-2008-7045 Public exploit
AJ Square Free Polling Script (AJPoll) Database version allows remote attackers to bypass authentication and reset poll…
-
Unscored —CVE-2008-7047 Public exploit
NatterChat 1.1 allows remote attackers to bypass authentication and gain administrator privileges to read or delete roo…
-
Unscored —CVE-2008-7052 Public exploit
Unrestricted file upload vulnerability in profile.php in Pre Projects Pre Real Estate Listings allows remote authentica…
-
Unscored —CVE-2008-7038 Public exploit
SQL injection vulnerability in the My_eGallery module for PHP-Nuke allows remote attackers to execute arbitrary SQL com…