Archive
September 2009
Vulnerabilities first published in this month (UTC), newest first.
250 results · Clear filters · Feed
-
Unscored —CVE-2009-3173 Public exploit
Unrestricted file upload vulnerability in admin/add_album.php in The Rat CMS Alpha 2 allows remote attackers to execute…
-
Unscored —CVE-2009-3180 Public exploit
Anantasoft Gazelle CMS 1.0 allows remote attackers to conduct a password reset for other users via a modified user para…
-
Unscored —CVE-2009-3174 Public exploit
PHP remote file inclusion vulnerability in fonctions_racine.php in OBOphiX 2.7.0 and earlier allows remote attackers to…
-
Unscored —CVE-2009-3167 Public exploit
Directory traversal vulnerability in index.php in Anantasoft Gazelle CMS 1.0, when magic_quotes_gpc is disabled, allows…
-
Unscored —CVE-2008-7210 Public exploit
directory.php in AJchat 0.10 allows remote attackers to bypass input validation and conduct SQL injection attacks via a…
-
Unscored —CVE-2008-7213 Public exploit
Cross-site scripting (XSS) vulnerability in mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/conne…
-
Unscored —CVE-2008-7209 Public exploit
Unrestricted file upload vulnerability in the add2 action in a_upload.php in OneCMS 2.4, and possibly earlier, allows r…
-
Unscored —CVE-2008-7208 Public exploit
Multiple SQL injection vulnerabilities in OneCMS 2.4, and possibly earlier, allow remote attackers to execute arbitrary…
-
Unscored —CVE-2008-7211 Public exploit
CreativeLabs es1371mp.sys 5.1.3612.0 WDM audio driver, as used in Ensoniq PCI 1371 sound cards and when running on Wind…
-
Unscored —CVE-2008-7216 Public exploit
Peter's Math Anti-Spam Spinoff plugin for WordPress generates audio CAPTCHA clips by concatenating static audio files w…
-
Unscored —CVE-2008-7203 Public exploit
Valve Software Half-Life Counter-Strike 1.6 allows remote attackers to cause a denial of service (crash) via multiple c…
-
Unscored —CVE-2009-3076 Public exploit
Mozilla Firefox before 3.0.14 does not properly implement certain dialogs associated with the (1) pkcs11.addmodule and …
-
Unscored —CVE-2009-3155 Public exploit
Cross-site scripting (XSS) vulnerability in gmap.php in the Almond Classifieds (com_aclassf) component 7.5 for Joomla! …
-
Unscored —CVE-2009-3162 Public exploit
Cross-site scripting (XSS) vulnerability in Multi Website 1.5 allows remote attackers to inject arbitrary web script or…
-
Unscored —CVE-2009-3152 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in becommunity/community/index.php in NTSOFT BBS E-Market Professio…
-
Unscored —CVE-2009-3148 Public exploit
Multiple SQL injection vulnerabilities in PortalXP Teacher Edition 1.2 allow remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2009-3158 Public exploit
admin/files.php in simplePHPWeb 0.2 does not require authentication, which allows remote attackers to perform unspecifi…
-
Unscored —CVE-2009-3154 Public exploit
SQL injection vulnerability in the Almond Classifieds (com_aclassf) component 7.5 for Joomla! allows remote attackers t…
-
Unscored —CVE-2009-3149 Public exploit
Directory traversal vulnerability in _css/js.php in Elgg 1.5, when magic_quotes_gpc is disabled, allows remote attacker…
-
Unscored —CVE-2009-3153 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in x10 MP3 Search engine 1.6.5 allow remote attackers to inject arb…
-
Unscored —CVE-2009-3151 Public exploit
Directory traversal vulnerability in actions/downloadFile.php in Ultrize TimeSheet 1.2.2 allows remote attackers to rea…
-
Unscored —CVE-2009-3150 Public exploit
SQL injection vulnerability in index.php in Multi Website 1.5 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2009-3123 Public exploit
Directory traversal vulnerability in gallery/gallery.php in Wap-Motor before 18.1 allows remote attackers to read arbit…
-
Unscored —CVE-2009-3117 Public exploit
SQL injection vulnerability in category.php in Snow Hall Silurus System 1.0 allows remote attackers to execute arbitrar…
-
Unscored —
SolarWinds TFTP Server 9.2.0.111 and earlier allows remote attackers to cause a denial of service (service stop) via a …
-
Unscored —CVE-2009-3116 Public exploit
SQL injection vulnerability in index.php in Uiga Church Portal allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2009-3124 Public exploit
Directory traversal vulnerability in get_message.cgi in QuarkMail allows remote attackers to read arbitrary files via a…
-
Unscored —CVE-2009-3119 Public exploit
SQL injection vulnerability in screen.php in the Download System mSF (dsmsf) module for PHP-Fusion allows remote attack…
-
Unscored —CVE-2008-7192 Public exploit
Cross-site request forgery (CSRF) vulnerability in index.php in WoltLab Burning Board (wBB) 3.0.1, and possibly other 3…
-
Unscored —
The rad_decode function in FreeRADIUS before 1.1.8 allows remote attackers to cause a denial of service (radiusd crash)…
-
Unscored —CVE-2008-7188 Public exploit
ClipShare 2.6 does not properly restrict access to certain functionality, which allows remote attackers to change the p…
-
Unscored —CVE-2008-7184 Public exploit
Cross-site scripting (XSS) vulnerability in Diigo Toolbar and Diigolet allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2008-7185 Public exploit
GNOME Rhythmbox 0.11.5 allows remote attackers to cause a denial of service (segmentation fault and crash) via a playli…
-
Unscored —
Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Windo…
-
Unscored —CVE-2009-3099 Public exploit
Unspecified vulnerability in HP OpenView Operations Manager 8.1 on Windows Server 2003 SP2 allows remote attackers to h…
-
Unscored —CVE-2008-7178 Public exploit
Directory traversal vulnerability in Uploader module 1.1 for XOOPS allows remote attackers to read arbitrary files via …
-
Unscored —CVE-2008-7179 Public exploit
OTManager CMS 2.4 allows remote attackers to bypass authentication and gain administrator privileges by setting the ADM…
-
Unscored —CVE-2008-7172 Public exploit
Lightweight news portal (LNP) 1.0b does not properly restrict access to administrator functionality, which allows remot…
-
Unscored —CVE-2008-7176 Public exploit
Multiple directory traversal vulnerabilities in Facil CMS 0.1RC allow remote attackers to read arbitrary files via a ..…
-
Unscored —CVE-2008-7167 Public exploit
Unrestricted file upload vulnerability in upload.php in Page Manager 2006-02-04 allows remote attackers to execute arbi…