Skip to content
OpenAdvisories

Archive

10 September 2009

Vulnerabilities first published on this day (UTC), newest first.

11 results · Clear filters · Feed

  • Unscored —
    CVE-2009-3076 Public exploit

    Mozilla Firefox before 3.0.14 does not properly implement certain dialogs associated with the (1) pkcs11.addmodule and …

  • Unscored —
    CVE-2009-3155 Public exploit

    Cross-site scripting (XSS) vulnerability in gmap.php in the Almond Classifieds (com_aclassf) component 7.5 for Joomla! …

  • Unscored —
    CVE-2009-3162 Public exploit

    Cross-site scripting (XSS) vulnerability in Multi Website 1.5 allows remote attackers to inject arbitrary web script or…

  • Unscored —
    CVE-2009-3152 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in becommunity/community/index.php in NTSOFT BBS E-Market Professio…

  • Unscored —
    CVE-2009-3148 Public exploit

    Multiple SQL injection vulnerabilities in PortalXP Teacher Edition 1.2 allow remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2009-3158 Public exploit

    admin/files.php in simplePHPWeb 0.2 does not require authentication, which allows remote attackers to perform unspecifi…

  • Unscored —
    CVE-2009-3154 Public exploit

    SQL injection vulnerability in the Almond Classifieds (com_aclassf) component 7.5 for Joomla! allows remote attackers t…

  • Unscored —
    CVE-2009-3149 Public exploit

    Directory traversal vulnerability in _css/js.php in Elgg 1.5, when magic_quotes_gpc is disabled, allows remote attacker…

  • Unscored —
    CVE-2009-3153 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in x10 MP3 Search engine 1.6.5 allow remote attackers to inject arb…

  • Unscored —
    CVE-2009-3151 Public exploit

    Directory traversal vulnerability in actions/downloadFile.php in Ultrize TimeSheet 1.2.2 allows remote attackers to rea…

  • Unscored —
    CVE-2009-3150 Public exploit

    SQL injection vulnerability in index.php in Multi Website 1.5 allows remote attackers to execute arbitrary SQL commands…