Archive
August 2009
Vulnerabilities first published in this month (UTC), newest first.
268 results · Clear filters · Feed
-
Unscored —CVE-2009-2788 Public exploit
Multiple SQL injection vulnerabilities in Mobilelib GOLD 3 allow remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2009-2779 Public exploit
SQL injection vulnerability in index.php in AJ Matrix DNA allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2009-2783 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 2.3.3 allow remote attackers to inject arbitrary web scrip…
-
Unscored —CVE-2009-2780 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in 68 Classifieds 4.1 allow remote attackers to inject arbitrary we…
-
Unscored —CVE-2009-2791 Public exploit
PHP remote file inclusion vulnerability in pda_projects.php in WebDynamite ProjectButler 1.5.0 allows remote attackers …
-
Unscored —CVE-2009-2790 Public exploit
SQL injection vulnerability in cat_products.php in SoftBiz Dating Script allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2009-2782 Public exploit
SQL injection vulnerability in the JFusion (com_jfusion) component for Joomla! allows remote attackers to execute arbit…
-
Unscored —CVE-2009-2784 Public exploit
Multiple directory traversal vulnerabilities in dit.cms 1.3, when register_globals is enabled, allow remote attackers t…
-
Unscored —CVE-2009-2792 Public exploit
Directory traversal vulnerability in plugings/pagecontent.php in Really Simple CMS (RSCMS) 0.3a allows remote attackers…
-
Unscored —CVE-2009-2770 Public exploit
PowerUpload 2.4 allows remote attackers to bypass authentication and gain administrative access via a MIME encoded valu…
-
Unscored —CVE-2009-2776 Public exploit
SQL injection vulnerability in showresult.asp in Smart ASP Survey allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2009-2774 Public exploit
SQL injection vulnerability in paidbanner.php in PHP Paid 4 Mail Script allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2009-2773 Public exploit
PHP remote file inclusion vulnerability in home.php in PHP Paid 4 Mail Script allows remote attackers to execute arbitr…
-
Unscored —CVE-2009-2777 Public exploit
SQL injection vulnerability in visitor/view.php in GarageSales Script allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2009-2778 Public exploit
Cross-site scripting (XSS) vulnerability in visitor/view.php in GarageSales Script allows remote attackers to inject ar…
-
Unscored —CVE-2009-2772 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in PG Roommate Finder Solution allow remote attackers to inject arb…
-
Unscored —CVE-2009-2769 Public exploit
PHP remote file inclusion vulnerability in include/timesheet.php in Ultrize TimeSheet 1.2.2, when register_globals is e…
-
Unscored —CVE-2009-2775 Public exploit
SQL injection vulnerability in linkout.php in PHPArcadeScript (PHP Arcade Script) 4.0 allows remote attackers to execut…
-
Unscored —CVE-2008-6974 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in apply.cgi in DD-WRT 24 sp1 and earlier allow remote attac…
-
Unscored —CVE-2008-6975 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in apply.cgi in DD-WRT 24 sp2 allow remote attackers to hija…
-
Unscored —CVE-2009-2767 Public exploit
The init_posix_timers function in kernel/posix-timers.c in the Linux kernel before 2.6.31-rc6 allows local users to cau…
-
Unscored —
The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for sock…
-
Unscored —
httpd.c in httpd in the management GUI in DD-WRT 24 sp1, and other versions before build 12533, allows remote attackers…
-
Unscored —CVE-2009-2766 Public exploit
httpd.c in httpd in the management GUI in DD-WRT 24 sp1 does not require administrative authentication for programs und…
-
Unscored —
Microsoft Internet Explorer 8.0.7100.0 on Windows 7 RC on the x64 platform allows remote attackers to cause a denial of…
-
Unscored —CVE-2008-6964 Public exploit
SQL injection vulnerability in the login page in X7 Chat 2.0.5 allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2008-6971 Public exploit
The password reset functionality in Simple Machines Forum (SMF) 1.0.x before 1.0.14, 1.1.x before 1.1.6, and 2.0 before…
-
Unscored —CVE-2008-6968 Public exploit
Multiple SQL injection vulnerabilities in submit.php in Pligg CMS 9.9.5 allow remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2008-6970 Public exploit
SQL injection vulnerability in dosearch.inc.php in UBB.threads 7.3.1 and earlier allows remote attackers to execute arb…
-
Unscored —CVE-2008-6963 Public exploit
admin.php in TurnkeyForms Text Link Sales allows remote attackers to bypass authentication and gain administrative priv…
-
Unscored —CVE-2008-6966 Public exploit
AJ Square AJ Auction Pro Platinum Skin #1 sends a redirect but does not exit when it is called directly, which allows r…
-
Unscored —CVE-2008-6965 Public exploit
AJ Square AJ Auction OOPD, Pro Platinum Skin #1, Pro Platinum Skin #2, and Web 2.0 send a redirect but do not exit when…
-
Unscored —
wp-login.php in WordPress 2.8.3 and earlier allows remote attackers to force a password reset for the first user in the…
-
Unscored —
Buffer overflow in WebKit in Apple Safari before 4.0.3 allows remote attackers to execute arbitrary code or cause a den…
-
Unscored —
Buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2000 Web Components SP3…
-
Unscored —CVE-2008-6950 Public exploit
Multiple SQL injection vulnerabilities in login.asp in Bankoi WebHosting Control Panel 1.20 allow remote attackers to e…
-
Unscored —CVE-2008-6956 Public exploit
Static code injection vulnerability in admin/admin.php in mxCamArchive 2.2 allows remote authenticated administrators t…
-
Unscored —CVE-2008-6939 Public exploit
TurnkeyForms Web Hosting Directory allows remote attackers to bypass authentication and (1) gain administrative privile…
-
Unscored —CVE-2008-6949 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in Collabtive 0.4.8 allow remote attackers to hijack the aut…
-
Unscored —CVE-2008-6946 Public exploit
Cross-site scripting (XSS) vulnerability in manageproject.php in Collabtive 0.4.8 allows user-assisted remote attackers…