Archive
September 2009
Vulnerabilities first published in this month (UTC), newest first.
574 results · Feed
-
Unscored —
Buffer overflow on the Linksys WRT54GL wireless router allows remote attackers to execute arbitrary code via unspecifie…
-
Unscored —
Multiple unspecified vulnerabilities in the quota_by_role (Quota by role) module for Drupal have unknown impact and att…
-
Unscored —
CgiUserConfigEdit in BackupPC 3.1.0, when SSH keys and Rsync are in use in a multi-user environment, does not restrict …
-
Unscored —CVE-2009-3343 Public exploit
SQL injection vulnerability in details.asp in HotWeb Rentals allows remote attackers to execute arbitrary SQL commands …
-
Unscored —
Buffer overflow on the D-Link DIR-400 wireless router allows remote attackers to execute arbitrary code via unspecified…
-
Unscored —CVE-2009-3364 Public exploit
Stack-based buffer overflow in FTPShell Client 4.1 RC2 allows remote FTP servers to execute arbitrary code via a long r…
-
Unscored —CVE-2009-3356 Public exploit
SQL injection vulnerability in index.php in Image voting 1.0 allows remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2009-3355 Public exploit
Cross-site scripting (XSS) vulnerability in profile.php in Datetopia Buy Dating Site 1.0 allows remote attackers to inj…
-
Unscored —CVE-2009-3338 Public exploit
Stack-based buffer overflow in EffectMatrix (E.M.) Magic Morph 1.95b allows remote attackers to execute arbitrary code …
-
Unscored —
Multiple unspecified vulnerabilities in the Node Browser module for Drupal have unknown impact and attack vectors.
-
Unscored —
Heap-based buffer overflow in SAP Crystal Reports Server 2008 has unknown impact and attack vectors, as demonstrated by…
-
Unscored —
Unspecified vulnerability in the Remote Management Interface (RMI) for MSL Tape Libraries and 1/8 G2 Tape Autoloaders i…
-
Unscored —CVE-2009-3333 Public exploit
PHP remote file inclusion vulnerability in koesubmit.php in the koeSubmit (com_koesubmit) component 1.0 for Mambo allow…
-
Unscored —CVE-2009-3310 Public exploit
SQL injection vulnerability in index.php in Zainu 1.0 allows remote attackers to execute arbitrary SQL commands via the…
-
Unscored —CVE-2009-3326 Public exploit
SQL injection vulnerability in index.php in CMScontrol Content Management System 7.x allows remote attackers to execute…
-
Unscored —CVE-2009-3312 Public exploit
PHP remote file inclusion vulnerability in php/init.poll.php in phpPollScript 1.3 and earlier, when register_globals is…
-
Unscored —CVE-2009-3324 Public exploit
PHP remote file inclusion vulnerability in include/prodler.class.php in ProdLer 2.0 and earlier allows remote attackers…
-
Unscored —CVE-2009-3315 Public exploit
SQL injection vulnerability in admin/index.php in NeLogic Nephp Publisher Enterprise 3.5.9 and 4.5 allows remote attack…
-
Unscored —CVE-2009-3306 Public exploit
PHP remote file inclusion vulnerability in include/header.php in ClearSite 4.50 allows remote attackers to execute arbi…
-
Unscored —CVE-2009-3322 Public exploit
The Siemens Gigaset SE361 WLAN router allows remote attackers to cause a denial of service (device reboot) via a flood …
-
Unscored —CVE-2009-3307 Public exploit
Multiple PHP remote file inclusion vulnerabilities in FSphp 0.2.1 allow remote attackers to execute arbitrary PHP code …
-
Unscored —CVE-2009-3317 Public exploit
PHP remote file inclusion vulnerability in pages/pageHeader.php in OpenSiteAdmin 0.9.7 BETA allows remote attackers to …
-
Unscored —CVE-2009-3330 Public exploit
SQL injection vulnerability in index.php in cP Creator 2.7.1, when magic_quotes_gpc is disabled, allows remote attacker…
-
Unscored —CVE-2009-3314 Public exploit
SQL injection vulnerability in ladders.php in Elite Gaming Ladders 3.2 allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2009-3321 Public exploit
SQL injection vulnerability in SaphpLesson 4.3, when magic_quotes_gpc is disabled, allows remote attackers to execute a…
-
Unscored —CVE-2009-3334 Public exploit
SQL injection vulnerability in the Lhacky! Extensions Cave Joomla! Integrated Newsletters Component (aka JINC or com_ji…
-
Unscored —CVE-2009-3311 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in RSSMediaScript allows remote attackers to inject arbitrary web…
-
Unscored —CVE-2009-3308 Public exploit
SQL injection vulnerability in show-cat.php in FanUpdate 2.2.1 allows remote attackers to execute arbitrary SQL command…
-
Unscored —
Directory traversal vulnerability in the Roland Breedveld Album (com_album) component 1.14 for Joomla! allows remote at…
-
Unscored —CVE-2009-3309 Public exploit
SQL injection vulnerability in index.cfm in CF ShopKart 5.4 beta allows remote attackers to execute arbitrary SQL comma…
-
Unscored —
SQL injection vulnerability in poems.php in DCI-Designs Dawaween 1.03 allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2009-3331 Public exploit
Multiple PHP remote file inclusion vulnerabilities in DDL CMS 1.0 allow remote attackers to execute arbitrary PHP code …
-
Unscored —CVE-2009-3323 Public exploit
Multiple PHP remote file inclusion vulnerabilities in BAnner ROtation System mini (BAROSmini) 0.32.595 allow remote att…
-
Unscored —CVE-2009-3325 Public exploit
SQL injection vulnerability in the Focusplus Developments Survey Manager (com_surveymanager) component 1.5.0 for Joomla…
-
Unscored —CVE-2009-3328 Public exploit
Cross-site scripting (XSS) vulnerability in sign.php in WX-Guestbook 1.1.208 allows remote attackers to inject arbitrar…
-
Unscored —CVE-2009-3327 Public exploit
Multiple SQL injection vulnerabilities in WX-Guestbook 1.1.208 allow remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2009-3332 Public exploit
SQL injection vulnerability in the JBudgetsMagic (com_jbudgetsmagic) component 0.3.2 through 0.4.0 for Joomla! allows r…
-
Unscored —CVE-2009-3320 Public exploit
Cross-site scripting (XSS) vulnerability in scrivi.php in Zenas PaoLink (aka Pao-Link) 1.0 allows remote attackers to i…
-
Unscored —CVE-2009-3316 Public exploit
SQL injection vulnerability in the JReservation (com_jreservation) component 1.0 and 1.5 for Joomla! allows remote atta…
-
Unscored —
Stack-based buffer overflow in Winplot 1.25.0.1 allows user-assisted remote attackers to execute arbitrary code via a c…