Archive
September 2009
Vulnerabilities first published in this month (UTC), newest first.
574 results · Feed
-
Unscored —CVE-2009-3430 Public exploit
SQL injection vulnerability in login.php in Allomani Mobile 2.5 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2009-3419 Public exploit
SQL injection vulnerability in index.php in the Publisher module 2.0 for Miniweb allows remote attackers to execute arb…
-
Unscored —CVE-2009-3421 Public exploit
login.php in Zenas PaoBacheca Guestbook 2.1, when register_globals is enabled, allows remote attackers to bypass authen…
-
Unscored —CVE-2009-3425 Public exploit
Directory traversal vulnerability in includes/inc.thcms_admin_dirtree.php in MaxCMS 3.11.20b allows remote attackers to…
-
Unscored —CVE-2009-3418 Public exploit
Multiple SQL injection vulnerabilities in Plume CMS 1.2.3 allow (1) remote authenticated users to execute arbitrary SQL…
-
Unscored —CVE-2009-3428 Public exploit
Stack-based buffer overflow in Easy Music Player 1.0.0.2 allows remote attackers to execute arbitrary code via a crafte…
-
Unscored —CVE-2009-3423 Public exploit
login.php in Zenas PaoLink 1.0, when register_globals is enabled, allows remote attackers to bypass authentication and …
-
Unscored —CVE-2009-3420 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in the Publisher module 2.0 for Miniweb allow remote a…
-
Unscored —
Stack-based buffer overflow in Pirate Radio Destiny Media Player 1.61 allows remote attackers to execute arbitrary code…
-
Unscored —CVE-2009-3426 Public exploit
PHP remote file inclusion vulnerability in includes/file_manager/special.php in MaxCMS 3.11.20b allows remote attackers…
-
Unscored —CVE-2009-3424 Public exploit
Multiple PHP remote file inclusion vulnerabilities in MaxCMS 3.11.20b, when register_globals is enabled, allow remote a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Kayako SupportSuite 3.50.06 allows remote attackers to inject arbitrary web…
-
Unscored —CVE-2009-3422 Public exploit
login.php in Zenas PaoLiber 1.1, when register_globals is enabled, allows remote attackers to bypass authentication and…
-
Unscored —
Multiple unspecified vulnerabilities in the (1) iscsiadm and (2) iscsitadm programs in Sun Solaris 10, and OpenSolaris …
-
Unscored —CVE-2009-2817 Public exploit
Buffer overflow in Apple iTunes before 9.0.1 allows remote attackers to execute arbitrary code or cause a denial of ser…
-
Unscored —
Unspecified vulnerability in Role-Based Access Control (RBAC) in HP HP-UX B.11.23 and B.11.31 allows local users to byp…
-
Unscored —CVE-2009-3367 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in An image gallery 1.0 allow remote attackers to inject arbitrary …
-
Unscored —CVE-2009-3362 Public exploit
PHP remote file inclusion vulnerability in printnews.php3 in SZNews 2.7 allows remote attackers to execute arbitrary PH…
-
Unscored —CVE-2009-3366 Public exploit
Directory traversal vulnerability in navigation.php in An image gallery 1.0 allows remote attackers to list arbitrary d…
-
Unscored —
Unspecified vulnerability in SAP Crystal Reports Server 2008 on Windows XP allows attackers to cause a denial of servic…
-
Unscored —
Multiple unspecified vulnerabilities in the Subdomain Manager module for Drupal have unknown impact and attack vectors.
-
Unscored —CVE-2009-3335 Public exploit
SQL injection vulnerability in the TurtuShout component 0.11 for Joomla! allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2009-3358 Public exploit
SQL injection vulnerability in profile.php in Tourism Scripts Adult Portal escort listing allows remote attackers to ex…
-
Unscored —CVE-2009-3342 Public exploit
SQL injection vulnerability in frontend/assets/ajax/checkusername.php in the AlphaUserPoints (com_alphauserpoints) comp…
-
Unscored —CVE-2009-3368 Public exploit
Cross-site scripting (XSS) vulnerability in the Hotel Booking Reservation System (aka HBS or com_hbssearch) component f…
-
Unscored —
SQL injection vulnerability in the Freetag (serendipity_event_freetag) plugin before 3.09 for Serendipity (S9Y) allows …
-
Unscored —CVE-2009-3365 Public exploit
PHP remote file inclusion vulnerability in add-ons/modules/sysmanager/plugins/install.plugin.php in Aurora CMS 1.0.2 al…
-
Unscored —CVE-2009-3336 Public exploit
SQL injection vulnerability in auction_details.php in PHP Pro Bid allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2009-3361 Public exploit
SQL injection vulnerability in index.php in PHP-IPNMonitor allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2009-3359 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Match Agency BiZ 1.0 allow remote attackers to inject arbitrary …
-
Unscored —CVE-2009-3357 Public exploit
Multiple SQL injection vulnerabilities in the Hotel Booking Reservation System (aka HBS or com_hbssearch) component for…
-
Unscored —
Unspecified vulnerability in FreeSSHD 1.2.4 allows remote attackers to cause a denial of service via unknown vectors, a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the BUEditor module 5.x before 5.x-1.2 and 6.x before 6.x-1.4, a module for…
-
Unscored —
Unspecified vulnerability in SAP Crystal Reports Server 2008 allows remote attackers to execute arbitrary code via unkn…
-
Unscored —
Unspecified vulnerability in McAfee Email and Web Security Appliance 5.1 VMtrial allows remote attackers to read arbitr…
-
Unscored —CVE-2009-3348 Public exploit
Cross-site scripting (XSS) vulnerability in Datavore Gyro 5.0 allows remote attackers to inject arbitrary web script or…
-
Unscored —CVE-2009-3360 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Datemill 1.0 allow remote attackers to inject arbitrary web scri…
-
Unscored —
Multiple unspecified vulnerabilities in the Rest API module for Drupal have unknown impact and attack vectors.
-
Unscored —CVE-2009-3349 Public exploit
SQL injection vulnerability in Datavore Gyro 5.0 allows remote attackers to execute arbitrary SQL commands via the cid …
-
Unscored —
Multiple unspecified vulnerabilities in the Node2Node module for Drupal have unknown impact and attack vectors.