Skip to content
OpenAdvisories

Archive

23 September 2009

Vulnerabilities first published on this day (UTC), newest first.

27 results · Clear filters · Feed

  • Unscored —
    CVE-2009-3333 Public exploit

    PHP remote file inclusion vulnerability in koesubmit.php in the koeSubmit (com_koesubmit) component 1.0 for Mambo allow…

  • Unscored —
    CVE-2009-3310 Public exploit

    SQL injection vulnerability in index.php in Zainu 1.0 allows remote attackers to execute arbitrary SQL commands via the…

  • Unscored —
    CVE-2009-3326 Public exploit

    SQL injection vulnerability in index.php in CMScontrol Content Management System 7.x allows remote attackers to execute…

  • Unscored —
    CVE-2009-3312 Public exploit

    PHP remote file inclusion vulnerability in php/init.poll.php in phpPollScript 1.3 and earlier, when register_globals is…

  • Unscored —
    CVE-2009-3324 Public exploit

    PHP remote file inclusion vulnerability in include/prodler.class.php in ProdLer 2.0 and earlier allows remote attackers…

  • Unscored —
    CVE-2009-3315 Public exploit

    SQL injection vulnerability in admin/index.php in NeLogic Nephp Publisher Enterprise 3.5.9 and 4.5 allows remote attack…

  • Unscored —
    CVE-2009-3306 Public exploit

    PHP remote file inclusion vulnerability in include/header.php in ClearSite 4.50 allows remote attackers to execute arbi…

  • Unscored —
    CVE-2009-3322 Public exploit

    The Siemens Gigaset SE361 WLAN router allows remote attackers to cause a denial of service (device reboot) via a flood …

  • Unscored —
    CVE-2009-3307 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in FSphp 0.2.1 allow remote attackers to execute arbitrary PHP code …

  • Unscored —
    CVE-2009-3317 Public exploit

    PHP remote file inclusion vulnerability in pages/pageHeader.php in OpenSiteAdmin 0.9.7 BETA allows remote attackers to …

  • Unscored —
    CVE-2009-3330 Public exploit

    SQL injection vulnerability in index.php in cP Creator 2.7.1, when magic_quotes_gpc is disabled, allows remote attacker…

  • Unscored —
    CVE-2009-3314 Public exploit

    SQL injection vulnerability in ladders.php in Elite Gaming Ladders 3.2 allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2009-3321 Public exploit

    SQL injection vulnerability in SaphpLesson 4.3, when magic_quotes_gpc is disabled, allows remote attackers to execute a…

  • Unscored —
    CVE-2009-3334 Public exploit

    SQL injection vulnerability in the Lhacky! Extensions Cave Joomla! Integrated Newsletters Component (aka JINC or com_ji…

  • Unscored —
    CVE-2009-3311 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in RSSMediaScript allows remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2009-3308 Public exploit

    SQL injection vulnerability in show-cat.php in FanUpdate 2.2.1 allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2009-3318 Public exploit Scanner template

    Directory traversal vulnerability in the Roland Breedveld Album (com_album) component 1.14 for Joomla! allows remote at…

  • Unscored —
    CVE-2009-3309 Public exploit

    SQL injection vulnerability in index.cfm in CF ShopKart 5.4 beta allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2009-3331 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in DDL CMS 1.0 allow remote attackers to execute arbitrary PHP code …

  • Unscored —
    CVE-2009-3323 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in BAnner ROtation System mini (BAROSmini) 0.32.595 allow remote att…

  • Unscored —
    CVE-2009-3325 Public exploit

    SQL injection vulnerability in the Focusplus Developments Survey Manager (com_surveymanager) component 1.5.0 for Joomla…

  • Unscored —
    CVE-2009-3328 Public exploit

    Cross-site scripting (XSS) vulnerability in sign.php in WX-Guestbook 1.1.208 allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2009-3327 Public exploit

    Multiple SQL injection vulnerabilities in WX-Guestbook 1.1.208 allow remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2009-3332 Public exploit

    SQL injection vulnerability in the JBudgetsMagic (com_jbudgetsmagic) component 0.3.2 through 0.4.0 for Joomla! allows r…

  • Unscored —
    CVE-2009-3320 Public exploit

    Cross-site scripting (XSS) vulnerability in scrivi.php in Zenas PaoLink (aka Pao-Link) 1.0 allows remote attackers to i…

  • Unscored —
    CVE-2009-3316 Public exploit

    SQL injection vulnerability in the JReservation (com_jreservation) component 1.0 and 1.5 for Joomla! allows remote atta…

  • Unscored —
    CVE-2009-3313 Public exploit

    Multiple SQL injection vulnerabilities in FMyClone 2.3 allow remote attackers to execute arbitrary SQL commands via the…