Skip to content
OpenAdvisories

Archive

8 October 2009

Vulnerabilities first published on this day (UTC), newest first.

10 results · Clear filters · Feed

  • Unscored —
    CVE-2009-3599 Public exploit

    Cross-site scripting (XSS) vulnerability in single_winner1.php in HUBScript 1.0 allows remote attackers to inject arbit…

  • Unscored —
    CVE-2009-3592 Public exploit

    Cross-site scripting (XSS) vulnerability in customer/home.php in Qualiteam X-Cart allows remote attackers to inject arb…

  • Unscored —
    CVE-2009-3593 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Freelancers 1.0 allow remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2009-3596 Public exploit

    JoxTechnology Ajox Poll does not properly restrict access to admin/managepoll.php, which allows remote attackers to byp…

  • Unscored —
    CVE-2009-3597 Public exploit

    Digitaldesign CMS 0.1 stores sensitive information under the web root with insufficient access control, which allows re…

  • Unscored —
    CVE-2009-3595 Public exploit

    SQL injection vulnerability in results.php in VS PANEL 7.5.5 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2009-3601 Public exploit

    Cross-site scripting (XSS) vulnerability in demo_page.php in Scriptsez Ultimate Poll allows remote attackers to inject …

  • Unscored —
    CVE-2009-3598 Public exploit

    Cross-site scripting (XSS) vulnerability in survey_result.php in eCardMAX FormXP 2007 allows remote attackers to inject…

  • Unscored —
    CVE-2009-3591 Public exploit EPSS 53%

    Dopewars 1.5.12 allows remote attackers to cause a denial of service (segmentation fault) via a REQUESTJET message with…

  • Unscored —
    CVE-2009-3590 Public exploit

    SQL injection vulnerability in showcat.php in VS PANEL 7.3.6 allows remote attackers to execute arbitrary SQL commands …