Skip to content
OpenAdvisories

Archive

28 December 2009

Vulnerabilities first published on this day (UTC), newest first.

14 results · Clear filters · Feed

  • Unscored —
    CVE-2009-1798 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities on the Network Management Card (NMC) on American Power Conversion (…

  • Unscored —
    CVE-2009-4435 Public exploit

    Multiple directory traversal vulnerabilities in F3Site 2009 allow remote attackers to include and execute arbitrary loc…

  • Unscored —
    CVE-2009-4433 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in IDevSpot iSupport 1.8 and earlier allow remote attackers to inje…

  • Unscored —
    CVE-2009-4431 Public exploit

    PHP remote file inclusion vulnerability in cal_popup.php in the Anything Digital Development JCal Pro (aka com_jcalpro …

  • Unscored —
    CVE-2009-4429 Public exploit

    Cross-site scripting (XSS) vulnerability in the Sections module 5.x before 5.x-1.3 and 6.x before 6.x-1.3 for Drupal al…

  • Unscored —
    CVE-2009-4424 Public exploit

    SQL injection vulnerability in results.php in the Pyrmont plugin 2 for WordPress allows remote attackers to execute arb…

  • Unscored —
    CVE-2009-4436 Public exploit

    Multiple SQL injection vulnerabilities in Active Web Softwares eWebquiz 8 allow remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2009-4428 Public exploit

    SQL injection vulnerability in the JoomPortfolio (com_joomportfolio) component 1.0.0 for Joomla! allows remote attacker…

  • Unscored —
    CVE-2009-4432 Public exploit

    SQL injection vulnerability in index.php in CodeMight VideoCMS 3.1 allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2009-4427 Public exploit

    Directory traversal vulnerability in cmd.php in phpLDAPadmin 1.1.0.5 allows remote attackers to include and execute arb…

  • Unscored —
    CVE-2009-4426 Public exploit

    Multiple directory traversal vulnerabilities in Ignition 1.2, when magic_quotes_gpc is disabled, allow remote attackers…

  • Unscored —
    CVE-2009-4434 Public exploit

    Directory traversal vulnerability in index.php in IDevSpot iSupport 1.8 and earlier allows remote attackers to read arb…

  • Unscored —
    CVE-2009-4437 Public exploit

    Multiple SQL injection vulnerabilities in Active Auction House 3.6 allow remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2009-4430 Public exploit

    SQL injection vulnerability in index.php in VirtueMart 1.0 allows remote attackers to execute arbitrary SQL commands vi…