Archive
December 2009
Vulnerabilities first published in this month (UTC), newest first.
151 results · Clear filters · Feed
-
Unscored —CVE-2009-4523 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Zainu 1.0 allows remote attackers to inject arbitrary web scri…
-
Unscored —CVE-2009-4522 Public exploit
Cross-site scripting (XSS) vulnerability in search.5.html in BloofoxCMS 0.3.5 allows remote attackers to inject arbitra…
-
Unscored —CVE-2009-4512 Public exploit
Directory traversal vulnerability in index.php in Oscailt 3.3, when Use Friendly URL's is disabled, allows remote attac…
-
Unscored —CVE-2009-4531 Public exploit
httpdx 1.4.4 and earlier allows remote attackers to obtain the source code for a web page by appending a . (dot) charac…
-
Unscored —CVE-2009-4521 Public exploit
Cross-site scripting (XSS) vulnerability in birt-viewer/run in Eclipse Business Intelligence and Reporting Tools (BIRT)…
-
Unscored —CVE-2009-4535 Public exploit
Mongoose 2.8.0 and earlier allows remote attackers to obtain the source code for a web page by appending a / (slash) ch…
-
Unscored —
The node_process_command function in Zabbix Server before 1.8 allows remote attackers to execute arbitrary commands via…
-
Unscored —CVE-2009-4499 Public exploit
SQL injection vulnerability in the get_history_lastid function in the nodewatcher component in Zabbix Server before 1.6…
-
Unscored —CVE-2009-4501 Public exploit
The zbx_get_next_field function in libs/zbxcommon/str.c in Zabbix Server before 1.6.8 allows remote attackers to cause …
-
Unscored —
The NET_TCP_LISTEN function in net.c in Zabbix Agent before 1.6.7, when running on FreeBSD or Solaris, allows remote at…
-
Unscored —CVE-2009-4477 Public exploit
SQL injection vulnerability in page.html in Xstate Real Estate 1.0 allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2009-4475 Public exploit
SQL injection vulnerability in the Joomlub (com_joomlub) component for Joomla! allows remote attackers to execute arbit…
-
Unscored —CVE-2009-4470 Public exploit
SQL injection vulnerability in boardrule.php in DVBBS 2.0 allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2009-4471 Public exploit
Multiple PHP remote file inclusion vulnerabilities in FreeSchool 1.1.0 and earlier allow remote attackers to execute ar…
-
Unscored —CVE-2009-4474 Public exploit
SQL injection vulnerability in the Mike de Boer zoom (com_zoom) component 2.0 for Mambo allows remote attackers to exec…
-
Unscored —
Multiple stack-based buffer overflows in the CertDecoder::GetName function in src/asn.cpp in TaoCrypt in yaSSL before 1…
-
Unscored —CVE-2009-4472 Public exploit
Multiple PHP remote file inclusion vulnerabilities in PHPope 1.0.0 and earlier allow remote attackers to execute arbitr…
-
Unscored —CVE-2009-4478 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Xstate Real Estate 1.0 allow remote attackers to inject arbitrar…
-
Unscored —CVE-2009-4469 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in pagenumber.inc.php in phpPowerCards 2.0 allow remote attackers t…
-
Unscored —CVE-2009-4467 Public exploit
misc.php in DeluxeBB 1.3 allows remote attackers to register accounts without a valid email address via a valemail acti…
-
Unscored —CVE-2009-4466 Public exploit
DeluxeBB 1.3 allows remote attackers to obtain sensitive information via a crafted page parameter to misc.php, which re…
-
Unscored —
Stack-based buffer overflow in the NetBiterConfig utility (NetBiterConfig.exe) 1.3.0 for Intellicom NetBiter WebSCADA a…
-
Unscored —CVE-2009-4464 Public exploit
Cross-site scripting (XSS) vulnerability in searchadvance.asp in Active Business Directory 2 allows remote attackers to…
-
Unscored —CVE-2009-4461 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in FlatPress 0.909 allow remote attackers to inject arbitrary web s…
-
Unscored —CVE-2009-4468 Public exploit
Cross-site scripting (XSS) vulnerability in misc.php in DeluxeBB 1.3 allows remote attackers to inject arbitrary web sc…
-
Unscored —CVE-2009-4465 Public exploit
DeluxeBB 1.3 stores sensitive information under the web root with insufficient access control, which allows remote atta…
-
Unscored —CVE-2009-4458 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.5.2 and 2.6.0rc2, and possibly other versions, allow r…
-
Unscored —CVE-2009-4456 Public exploit
SQL injection vulnerability in news_detail.php in Green Desktiny 2.3.1, and possibly earlier versions, allows remote at…
-
Unscored —CVE-2009-4454 Public exploit
vccleaner in VideoCache 1.9.2 allows local users with Squid proxy user privileges to overwrite arbitrary files via a sy…
-
Unscored —CVE-2009-4453 Public exploit
Insecure method vulnerability in SoftCab Sound Converter ActiveX control (sndConverter.ocx) 1.2 allows remote attackers…
-
Unscored —CVE-2009-4450 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in map.php in LiveZilla 3.1.8.3 allow remote attackers to inject ar…
-
Unscored —CVE-2009-4446 Public exploit
Cross-site scripting (XSS) vulnerability in admin.php in phpInstantGallery 1.1 allows remote attackers to inject arbitr…
-
Unscored —CVE-2009-4452 Public exploit
Kaspersky Anti-Virus 5.0 (5.0.712); Antivirus Personal 5.0.x; Anti-Virus 6.0 (6.0.3.837), 7 (7.0.1.325), 2009 (8.0.0.x)…
-
Unscored —CVE-2009-4447 Public exploit
Jax Guestbook 3.5.0 allows remote attackers to bypass authentication and modify administrator settings via a direct req…
-
Unscored —CVE-2009-4451 Public exploit
Unrestricted file upload vulnerability in upper.php in kandalf upper 0.1 allows remote attackers to execute arbitrary c…
-
Unscored —CVE-2009-1798 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities on the Network Management Card (NMC) on American Power Conversion (…
-
Unscored —CVE-2009-4435 Public exploit
Multiple directory traversal vulnerabilities in F3Site 2009 allow remote attackers to include and execute arbitrary loc…
-
Unscored —CVE-2009-4433 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in IDevSpot iSupport 1.8 and earlier allow remote attackers to inje…
-
Unscored —CVE-2009-4431 Public exploit
PHP remote file inclusion vulnerability in cal_popup.php in the Anything Digital Development JCal Pro (aka com_jcalpro …
-
Unscored —CVE-2009-4429 Public exploit
Cross-site scripting (XSS) vulnerability in the Sections module 5.x before 5.x-1.3 and 6.x before 6.x-1.3 for Drupal al…