Archive
24 September 2009
Vulnerabilities first published on this day (UTC), newest first.
21 results · Clear filters · Feed
-
Unscored —CVE-2009-2817 Public exploit
Buffer overflow in Apple iTunes before 9.0.1 allows remote attackers to execute arbitrary code or cause a denial of ser…
-
Unscored —CVE-2009-3367 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in An image gallery 1.0 allow remote attackers to inject arbitrary …
-
Unscored —CVE-2009-3362 Public exploit
PHP remote file inclusion vulnerability in printnews.php3 in SZNews 2.7 allows remote attackers to execute arbitrary PH…
-
Unscored —CVE-2009-3366 Public exploit
Directory traversal vulnerability in navigation.php in An image gallery 1.0 allows remote attackers to list arbitrary d…
-
Unscored —CVE-2009-3335 Public exploit
SQL injection vulnerability in the TurtuShout component 0.11 for Joomla! allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2009-3358 Public exploit
SQL injection vulnerability in profile.php in Tourism Scripts Adult Portal escort listing allows remote attackers to ex…
-
Unscored —CVE-2009-3342 Public exploit
SQL injection vulnerability in frontend/assets/ajax/checkusername.php in the AlphaUserPoints (com_alphauserpoints) comp…
-
Unscored —CVE-2009-3368 Public exploit
Cross-site scripting (XSS) vulnerability in the Hotel Booking Reservation System (aka HBS or com_hbssearch) component f…
-
Unscored —CVE-2009-3365 Public exploit
PHP remote file inclusion vulnerability in add-ons/modules/sysmanager/plugins/install.plugin.php in Aurora CMS 1.0.2 al…
-
Unscored —CVE-2009-3336 Public exploit
SQL injection vulnerability in auction_details.php in PHP Pro Bid allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2009-3361 Public exploit
SQL injection vulnerability in index.php in PHP-IPNMonitor allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2009-3359 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Match Agency BiZ 1.0 allow remote attackers to inject arbitrary …
-
Unscored —CVE-2009-3357 Public exploit
Multiple SQL injection vulnerabilities in the Hotel Booking Reservation System (aka HBS or com_hbssearch) component for…
-
Unscored —CVE-2009-3348 Public exploit
Cross-site scripting (XSS) vulnerability in Datavore Gyro 5.0 allows remote attackers to inject arbitrary web script or…
-
Unscored —CVE-2009-3360 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Datemill 1.0 allow remote attackers to inject arbitrary web scri…
-
Unscored —CVE-2009-3349 Public exploit
SQL injection vulnerability in Datavore Gyro 5.0 allows remote attackers to execute arbitrary SQL commands via the cid …
-
Unscored —CVE-2009-3343 Public exploit
SQL injection vulnerability in details.asp in HotWeb Rentals allows remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2009-3364 Public exploit
Stack-based buffer overflow in FTPShell Client 4.1 RC2 allows remote FTP servers to execute arbitrary code via a long r…
-
Unscored —CVE-2009-3356 Public exploit
SQL injection vulnerability in index.php in Image voting 1.0 allows remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2009-3355 Public exploit
Cross-site scripting (XSS) vulnerability in profile.php in Datetopia Buy Dating Site 1.0 allows remote attackers to inj…
-
Unscored —CVE-2009-3338 Public exploit
Stack-based buffer overflow in EffectMatrix (E.M.) Magic Morph 1.95b allows remote attackers to execute arbitrary code …