Skip to content
OpenAdvisories

Archive

August 2009

Vulnerabilities first published in this month (UTC), newest first.

268 results · Clear filters · Feed

  • Unscored —
    CVE-2008-6943 Public exploit

    Unrestricted file upload vulnerability in ScriptsFeed Recipes Listing Portal allows remote authenticated users to execu…

  • Unscored —
    CVE-2008-6948 Public exploit

    Unrestricted file upload vulnerability in Collabtive 0.4.8 allows remote authenticated users to execute arbitrary code …

  • Unscored —
    CVE-2008-6958 Public exploit

    wap/index.php in Crossday Discuz! Board 6.x and 7.x allows remote authenticated users to execute arbitrary PHP code via…

  • Unscored —
    CVE-2008-6960 Public exploit

    download.php in X10media x10 Automatic Mp3 Search Engine Script 1.5.5 through 1.6 allows remote attackers to read arbit…

  • Unscored —
    CVE-2008-6940 Public exploit

    TurnkeyForms Web Hosting Directory stores sensitive information under the web root with insufficient access control, wh…

  • Unscored —
    CVE-2008-6959 Public exploit

    Insecure method vulnerability in the Chilkat Socket ActiveX control (ChilkatSocket.ChilkatSocket.1) in ChilkatSocket.dl…

  • Unscored —
    CVE-2008-6957 Public exploit

    member.php in Crossday Discuz! Board allows remote attackers to reset passwords of arbitrary users via crafted (1) lost…

  • Unscored —
    CVE-2008-6952 Public exploit

    SQL injection vulnerability in Rss.php in MauryCMS 0.53.2 and earlier allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2008-6955 Public exploit

    mxCamArchive 2.2 stores sensitive information under the web root with insufficient access control, which allows remote …

  • Unscored —
    CVE-2008-6941 Public exploit

    SQL injection vulnerability in the login functionality in TurnkeyForms Web Hosting Directory allows remote attackers to…

  • Unscored —
    CVE-2008-6953 Public exploit

    Buffer overflow in oovoo.exe in ooVoo 1.7.1.35, and possibly other versions before 1.7.1.59, allows remote attackers to…

  • Unscored —
    CVE-2008-6942 Public exploit

    Unrestricted file upload vulnerability in ScriptsFeed Realtor Classifieds System (aka Real Estate Classifieds) allows r…

  • Unscored —
    CVE-2008-6944 Public exploit

    Unrestricted file upload vulnerability in ScriptsFeed Auto Classifieds allows remote authenticated users to execute arb…

  • Unscored —
    CVE-2008-6947 Public exploit

    Collabtive 0.4.8 allows remote attackers to bypass authentication and create new users, including administrators, via u…

  • Unscored —
    CVE-2008-6935 Public exploit

    Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments, ove…

  • Unscored —
    CVE-2008-6936 Public exploit

    Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments, ove…

  • Unscored —
    CVE-2008-6932 Public exploit

    Unrestricted file upload vulnerability in submit_file.php in AlstraSoft SendIt Pro allows remote attackers to execute a…

  • Unscored —
    CVE-2008-6938 Public exploit EPSS 26%

    Pi3Web 2.0.3 before PL2, when installed on Windows as a desktop application and without using the Pi3Web/Conf/Intenet.p…

  • Unscored —
    CVE-2008-6929 Public exploit

    Unrestricted file upload vulnerability in PHPStore Auto Classifieds allows remote authenticated users to execute arbitr…

  • Unscored —
    CVE-2008-6933 Public exploit

    Directory traversal vulnerability in index.php in MiniGal b13 (aka MG2) allows remote attackers to read the source code…

  • Unscored —
    CVE-2008-6930 Public exploit

    Unrestricted file upload vulnerability in PHPStore Real Estate allows remote authenticated users to execute arbitrary c…

  • Unscored —
    CVE-2008-6928 Public exploit

    Unrestricted file upload vulnerability in PHPStore Complete Classifieds allows remote authenticated users to execute ar…

  • Unscored —
    CVE-2008-6934 Public exploit

    Static code injection vulnerability in Sanus|artificium (aka Sanusart) Free simple guestbook PHP script, when downloade…

  • Unscored —
    CVE-2008-6937 Public exploit

    Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments, ove…

  • Unscored —
    CVE-2008-6931 Public exploit

    Unrestricted file upload vulnerability in PHPStore Job Search (aka PHPCareers) allows remote authenticated users to exe…

  • Unscored —
    CVE-2009-0687 Public exploit

    The pf_test_rule function in OpenBSD Packet Filter (PF), as used in OpenBSD 4.2 through 4.5, NetBSD 5.0 before RC3, Mir…

  • Unscored —
    CVE-2009-2735 Public exploit

    SQL injection vulnerability in admin.php in sun-jester OpenNews 1.0, when magic_quotes_gpc is disabled, allows remote a…

  • Unscored —
    CVE-2009-2704 Public exploit

    CA SiteMinder allows remote attackers to bypass cross-site scripting (XSS) protections for J2EE applications via a requ…

  • Unscored —
    CVE-2009-2705 Public exploit

    CA SiteMinder allows remote attackers to bypass cross-site scripting (XSS) protections for J2EE applications via a requ…

  • Unscored —
    CVE-2009-2736 Public exploit

    Static code injection vulnerability in admin.php in sun-jester OpenNews 1.0 allows remote authenticated administrators …

  • Unscored —
    CVE-2009-2727 Public exploit EPSS 27%

    Stack-based buffer overflow in the _tt_internal_realpath function in the ToolTalk library (libtt.a) in IBM AIX 5.2.0, 5…

  • Unscored —
    CVE-2008-6924 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in register.php in eSyndiCat Directory 2.2 allow remote attackers t…

  • Unscored —
    CVE-2008-6927 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in autoinstall4imagesgalleryupgrade.php in the Fantastico De Luxe M…

  • Unscored —
    CVE-2008-6926 Public exploit

    Directory traversal vulnerability in autoinstall4imagesgalleryupgrade.php in the Fantastico De Luxe Module for cPanel a…

  • Unscored —
    CVE-2008-6922 Public exploit

    Multiple stack-based buffer overflows in CMailCOM.dll in CMailServer 5.4.6 allow remote attackers to execute arbitrary …

  • Unscored —
    CVE-2008-6923 Public exploit

    SQL injection vulnerability in the content component (com_content) 1.0.0 for Joomla! allows remote attackers to execute…

  • Unscored —
    CVE-2008-6920 Public exploit

    Unrestricted file upload vulnerability in auth.php in phpEmployment 1.8 allows remote attackers to execute arbitrary co…

  • Unscored —
    CVE-2008-6918 Public exploit

    Unrestricted file upload vulnerability in admin/galeria.php in ThePortal2 2.2 allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2008-6919 Public exploit

    profileedit.php TaskDriver 1.3 and earlier allows remote attackers to bypass authentication and gain administrative acc…

  • Unscored —
    CVE-2008-6921 Public exploit

    Unrestricted file upload vulnerability in index.php in phpAdBoard 1.8 allows remote attackers to execute arbitrary code…