Archive
August 2009
Vulnerabilities first published in this month (UTC), newest first.
268 results · Clear filters · Feed
-
Unscored —CVE-2008-7078 Public exploit
Multiple buffer overflows in Rumpus before 6.0.1 allow remote attackers to (1) cause a denial of service (segmentation …
-
Unscored —CVE-2008-7069 Public exploit
All Club CMS (ACCMS) 0.0.2 and earlier stores sensitive information under the web root with insufficient access control…
-
Unscored —CVE-2008-7064 Public exploit
Directory traversal vulnerability in the get_lang function in global.php in Quicksilver Forums 1.4.2 and earlier, as us…
-
Unscored —CVE-2008-7065 Public exploit
Siemens C450 IP and C475 IP VoIP devices allow remote attackers to cause a denial of service (disconnected calls and de…
-
Unscored —CVE-2008-7083 Public exploit
Multiple SQL injection vulnerabilities in ReVou Micro Blogging Twitter clone allow remote attackers to execute arbitrar…
-
Unscored —CVE-2008-7066 Public exploit
OpenForum 0.66 Beta allows remote attackers to bypass authentication and reset passwords of other users via a direct re…
-
Unscored —CVE-2008-7063 Public exploit
Ocean12 FAQ Manager Pro stores sensitive data under the web root with insufficient access control, which allows remote …
-
Unscored —CVE-2008-7075 Public exploit
Multiple SQL injection vulnerabilities in Kalptaru Infotech Ltd. Star Articles 6.0 allow remote attackers to inject arb…
-
Unscored —CVE-2008-7076 Public exploit
Unrestricted file upload vulnerability in user.modify.profile.php in Kalptaru Infotech Ltd. Star Articles 6.0 allows re…
-
Unscored —CVE-2008-7067 Public exploit
PHP remote file inclusion vulnerability in admin/plugins/Online_Users/main.php in PageTree CMS 0.0.2 BETA 0001 allows r…
-
Unscored —CVE-2008-7070 Public exploit
Argument injection vulnerability in the URI handler in KVIrc 3.4.2 Shiny allows remote attackers to execute arbitrary c…
-
Unscored —CVE-2008-7079 Public exploit
Buffer overflow in Nero ShowTime 5.0.15.0 allows remote attackers to cause a denial of service (crash) and possibly exe…
-
Unscored —CVE-2008-7074 Public exploit
Format string vulnerability in MemeCode Software i.Scribe 1.88 through 2.00 before Beta9 allows remote SMTP servers to …
-
Unscored —CVE-2008-7056 Public exploit
BandSite CMS 1.1.4 does not perform access control for adminpanel/phpmydump.php, which allows remote attackers to obtai…
-
Unscored —CVE-2008-7055 Public exploit
module.php in ezContents 2.0.3 allows remote attackers to bypass the directory traversal protection mechanism to includ…
-
Unscored —CVE-2008-7061 Public exploit
The tooltip manager (chrome/views/tooltip_manager.cc) in Google Chrome 0.2.149.29 Build 1798 and possibly other version…
-
Unscored —CVE-2008-7053 Public exploit
LogMeIn Remote Access Utility ActiveX control (RACtrl.dll) allows remote attackers to cause a denial of service (crash)…
-
Unscored —CVE-2008-7054 Public exploit
Multiple directory traversal vulnerabilities in ezContents 2.0.3 allow remote attackers to include and execute arbitrar…
-
Unscored —CVE-2008-7058 Public exploit
Cross-site request forgery (CSRF) vulnerability in BandSite CMS 1.1.4 allows remote attackers to hijack the authenticat…
-
Unscored —CVE-2008-7059 Public exploit
SQL injection vulnerability in index.php in One-News Beta 2 allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2008-7057 Public exploit
Cross-site scripting (XSS) vulnerability in merchandise.php in BandSite CMS 1.1.4 allows remote attackers to inject arb…
-
Unscored —CVE-2009-2953 Public exploit
Mozilla Firefox 3.0.6 through 3.0.13, and 3.5.x, allows remote attackers to cause a denial of service (CPU consumption)…
-
Unscored —CVE-2008-7049 Public exploit
Multiple SQL injection vulnerabilities in login.asp in NatterChat 1.1 and 1.12 allow remote attackers to execute arbitr…
-
Unscored —CVE-2008-7046 Public exploit
AJ Square Free Polling Script (AJPoll) allows remote attackers to bypass authentication and create new polls via a dire…
-
Unscored —CVE-2008-7044 Public exploit
SQL injection vulnerability in admin/include/newpoll.php in AJ Square Free Polling Script (AJPoll) Database version all…
-
Unscored —CVE-2008-7036 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in DevTracker module 3.0 for bcoos 1.1.11 and earlier,…
-
Unscored —CVE-2008-7030 Public exploit
Multiple SQL injection vulnerabilities in Site2Nite Real Estate Web allow remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2008-7040 Public exploit
SQL injection vulnerability in ahah/sf-profile.php in the Yellow Swordfish Simple Forum module for Wordpress allows rem…
-
Unscored —CVE-2008-7032 Public exploit
Web Management Console Cross-site request forgery (CSRF) vulnerability in the web management console in F5 BIG-IP 9.4.3…
-
Unscored —CVE-2008-7033 Public exploit
SQL injection vulnerability in the Simple Shop Galore (com_simpleshop) component for Joomla! allows remote attackers to…
-
Unscored —CVE-2008-7042 Public exploit
PHP remote file inclusion vulnerability in url.php in FreshScripts Fresh Email Script 1.0 through 1.11 allows remote at…
-
Unscored —CVE-2008-7043 Public exploit
Cross-site scripting (XSS) vulnerability in register.php in FreshScripts Fresh Email Script 1.0 through 1.11 allows rem…
-
Unscored —CVE-2008-7051 Public exploit
AJ Square AJ Article allows remote attackers to bypass authentication and access administrator functionality via a dire…
-
Unscored —CVE-2008-7041 Public exploit
AJ Classifieds allows remote attackers to bypass authentication and gain administrator privileges via a direct request …
-
Unscored —CVE-2008-7031 Public exploit
Heap-based buffer overflow in Foxit Remote Access Server (aka WAC Server) 2.0 Build 3503 allows remote attackers to cau…
-
Unscored —CVE-2008-7045 Public exploit
AJ Square Free Polling Script (AJPoll) Database version allows remote attackers to bypass authentication and reset poll…
-
Unscored —CVE-2008-7047 Public exploit
NatterChat 1.1 allows remote attackers to bypass authentication and gain administrator privileges to read or delete roo…
-
Unscored —CVE-2008-7052 Public exploit
Unrestricted file upload vulnerability in profile.php in Pre Projects Pre Real Estate Listings allows remote authentica…
-
Unscored —CVE-2008-7038 Public exploit
SQL injection vulnerability in the My_eGallery module for PHP-Nuke allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2009-2927 Public exploit
SQL injection vulnerability in DetailFile.php in DigitalSpinners DS CMS 1.0 allows remote attackers to execute arbitrar…