Archive
September 2009
Vulnerabilities first published in this month (UTC), newest first.
250 results · Clear filters · Feed
-
Unscored —CVE-2009-3422 Public exploit
login.php in Zenas PaoLiber 1.1, when register_globals is enabled, allows remote attackers to bypass authentication and…
-
Unscored —CVE-2009-2817 Public exploit
Buffer overflow in Apple iTunes before 9.0.1 allows remote attackers to execute arbitrary code or cause a denial of ser…
-
Unscored —CVE-2009-3367 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in An image gallery 1.0 allow remote attackers to inject arbitrary …
-
Unscored —CVE-2009-3362 Public exploit
PHP remote file inclusion vulnerability in printnews.php3 in SZNews 2.7 allows remote attackers to execute arbitrary PH…
-
Unscored —CVE-2009-3366 Public exploit
Directory traversal vulnerability in navigation.php in An image gallery 1.0 allows remote attackers to list arbitrary d…
-
Unscored —CVE-2009-3335 Public exploit
SQL injection vulnerability in the TurtuShout component 0.11 for Joomla! allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2009-3358 Public exploit
SQL injection vulnerability in profile.php in Tourism Scripts Adult Portal escort listing allows remote attackers to ex…
-
Unscored —CVE-2009-3342 Public exploit
SQL injection vulnerability in frontend/assets/ajax/checkusername.php in the AlphaUserPoints (com_alphauserpoints) comp…
-
Unscored —CVE-2009-3368 Public exploit
Cross-site scripting (XSS) vulnerability in the Hotel Booking Reservation System (aka HBS or com_hbssearch) component f…
-
Unscored —CVE-2009-3365 Public exploit
PHP remote file inclusion vulnerability in add-ons/modules/sysmanager/plugins/install.plugin.php in Aurora CMS 1.0.2 al…
-
Unscored —CVE-2009-3336 Public exploit
SQL injection vulnerability in auction_details.php in PHP Pro Bid allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2009-3361 Public exploit
SQL injection vulnerability in index.php in PHP-IPNMonitor allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2009-3359 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Match Agency BiZ 1.0 allow remote attackers to inject arbitrary …
-
Unscored —CVE-2009-3357 Public exploit
Multiple SQL injection vulnerabilities in the Hotel Booking Reservation System (aka HBS or com_hbssearch) component for…
-
Unscored —CVE-2009-3348 Public exploit
Cross-site scripting (XSS) vulnerability in Datavore Gyro 5.0 allows remote attackers to inject arbitrary web script or…
-
Unscored —CVE-2009-3360 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Datemill 1.0 allow remote attackers to inject arbitrary web scri…
-
Unscored —CVE-2009-3349 Public exploit
SQL injection vulnerability in Datavore Gyro 5.0 allows remote attackers to execute arbitrary SQL commands via the cid …
-
Unscored —CVE-2009-3343 Public exploit
SQL injection vulnerability in details.asp in HotWeb Rentals allows remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2009-3364 Public exploit
Stack-based buffer overflow in FTPShell Client 4.1 RC2 allows remote FTP servers to execute arbitrary code via a long r…
-
Unscored —CVE-2009-3356 Public exploit
SQL injection vulnerability in index.php in Image voting 1.0 allows remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2009-3355 Public exploit
Cross-site scripting (XSS) vulnerability in profile.php in Datetopia Buy Dating Site 1.0 allows remote attackers to inj…
-
Unscored —CVE-2009-3338 Public exploit
Stack-based buffer overflow in EffectMatrix (E.M.) Magic Morph 1.95b allows remote attackers to execute arbitrary code …
-
Unscored —CVE-2009-3333 Public exploit
PHP remote file inclusion vulnerability in koesubmit.php in the koeSubmit (com_koesubmit) component 1.0 for Mambo allow…
-
Unscored —CVE-2009-3310 Public exploit
SQL injection vulnerability in index.php in Zainu 1.0 allows remote attackers to execute arbitrary SQL commands via the…
-
Unscored —CVE-2009-3326 Public exploit
SQL injection vulnerability in index.php in CMScontrol Content Management System 7.x allows remote attackers to execute…
-
Unscored —CVE-2009-3312 Public exploit
PHP remote file inclusion vulnerability in php/init.poll.php in phpPollScript 1.3 and earlier, when register_globals is…
-
Unscored —CVE-2009-3324 Public exploit
PHP remote file inclusion vulnerability in include/prodler.class.php in ProdLer 2.0 and earlier allows remote attackers…
-
Unscored —CVE-2009-3315 Public exploit
SQL injection vulnerability in admin/index.php in NeLogic Nephp Publisher Enterprise 3.5.9 and 4.5 allows remote attack…
-
Unscored —CVE-2009-3306 Public exploit
PHP remote file inclusion vulnerability in include/header.php in ClearSite 4.50 allows remote attackers to execute arbi…
-
Unscored —CVE-2009-3322 Public exploit
The Siemens Gigaset SE361 WLAN router allows remote attackers to cause a denial of service (device reboot) via a flood …
-
Unscored —CVE-2009-3307 Public exploit
Multiple PHP remote file inclusion vulnerabilities in FSphp 0.2.1 allow remote attackers to execute arbitrary PHP code …
-
Unscored —CVE-2009-3317 Public exploit
PHP remote file inclusion vulnerability in pages/pageHeader.php in OpenSiteAdmin 0.9.7 BETA allows remote attackers to …
-
Unscored —CVE-2009-3330 Public exploit
SQL injection vulnerability in index.php in cP Creator 2.7.1, when magic_quotes_gpc is disabled, allows remote attacker…
-
Unscored —CVE-2009-3314 Public exploit
SQL injection vulnerability in ladders.php in Elite Gaming Ladders 3.2 allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2009-3321 Public exploit
SQL injection vulnerability in SaphpLesson 4.3, when magic_quotes_gpc is disabled, allows remote attackers to execute a…
-
Unscored —CVE-2009-3334 Public exploit
SQL injection vulnerability in the Lhacky! Extensions Cave Joomla! Integrated Newsletters Component (aka JINC or com_ji…
-
Unscored —CVE-2009-3311 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in RSSMediaScript allows remote attackers to inject arbitrary web…
-
Unscored —CVE-2009-3308 Public exploit
SQL injection vulnerability in show-cat.php in FanUpdate 2.2.1 allows remote attackers to execute arbitrary SQL command…
-
Unscored —
Directory traversal vulnerability in the Roland Breedveld Album (com_album) component 1.14 for Joomla! allows remote at…
-
Unscored —CVE-2009-3309 Public exploit
SQL injection vulnerability in index.cfm in CF ShopKart 5.4 beta allows remote attackers to execute arbitrary SQL comma…