Archive
27 November 2009
Vulnerabilities first published on this day (UTC), newest first.
11 results · Clear filters · Feed
-
Unscored —CVE-2009-4091 Public exploit
comments.php in Simplog 0.9.3.2, and possibly earlier, does not properly restrict access, which allows remote attackers…
-
Unscored —CVE-2009-4094 Public exploit
PHP remote file inclusion vulnerability in class/php/d4m_ajax_pagenav.php in the D4J eZine (com_ezine) component 2.1 fo…
-
Unscored —CVE-2009-4093 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in comments.php in Simplog 0.9.3.2, and possibly earlier, allow rem…
-
Unscored —CVE-2009-4082 Public exploit
PHP remote file inclusion vulnerability in forums/Forum_Include/index.php in Outreach Project Tool (OPT) 1.2.7 and earl…
-
Unscored —CVE-2009-4085 Public exploit
PHP remote file inclusion vulnerability in assets/plugins/mp3_id/mp3_id.php in PHP Traverser 0.8.0 allows remote attack…
-
Unscored —CVE-2009-4092 Public exploit
Cross-site request forgery (CSRF) vulnerability in user.php in Simplog 0.9.3.2, and possibly earlier, allows remote att…
-
Unscored —CVE-2009-4088 Public exploit
Multiple directory traversal vulnerabilities in telepark.wiki 2.4.23 and earlier allow remote attackers to read arbitra…
-
Unscored —CVE-2009-4089 Public exploit
telepark.wiki 2.4.23 and earlier allows remote attackers to bypass authorization and (1) delete arbitrary pages via a m…
-
Unscored —CVE-2009-4086 Public exploit
CRLF injection vulnerability in Xerver HTTP Server 4.31 and 4.32 allows remote attackers to inject arbitrary HTTP heade…
-
Unscored —CVE-2009-4032 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.7e allow remote attackers to inject arbitrary web scri…
-
Unscored —
The proc_open function in ext/standard/proc_open.c in PHP before 5.2.11 and 5.3.x before 5.3.1 does not enforce the (1)…