Archive
December 2009
Vulnerabilities first published in this month (UTC), newest first.
151 results · Clear filters · Feed
-
Unscored —CVE-2009-4424 Public exploit
SQL injection vulnerability in results.php in the Pyrmont plugin 2 for WordPress allows remote attackers to execute arb…
-
Unscored —CVE-2009-4436 Public exploit
Multiple SQL injection vulnerabilities in Active Web Softwares eWebquiz 8 allow remote attackers to execute arbitrary S…
-
Unscored —CVE-2009-4428 Public exploit
SQL injection vulnerability in the JoomPortfolio (com_joomportfolio) component 1.0.0 for Joomla! allows remote attacker…
-
Unscored —CVE-2009-4432 Public exploit
SQL injection vulnerability in index.php in CodeMight VideoCMS 3.1 allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2009-4427 Public exploit
Directory traversal vulnerability in cmd.php in phpLDAPadmin 1.1.0.5 allows remote attackers to include and execute arb…
-
Unscored —CVE-2009-4426 Public exploit
Multiple directory traversal vulnerabilities in Ignition 1.2, when magic_quotes_gpc is disabled, allow remote attackers…
-
Unscored —CVE-2009-4434 Public exploit
Directory traversal vulnerability in index.php in IDevSpot iSupport 1.8 and earlier allows remote attackers to read arb…
-
Unscored —CVE-2009-4437 Public exploit
Multiple SQL injection vulnerabilities in Active Auction House 3.6 allow remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2009-4430 Public exploit
SQL injection vulnerability in index.php in VirtueMart 1.0 allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2009-4423 Public exploit
SQL injection vulnerability in index.php in weenCompany 4.0.0 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2009-4421 Public exploit
Directory traversal vulnerability in languages_cgi.php in Simple PHP Blog 0.5.1 and earlier allows remote authenticated…
-
Unscored —
The loadContentFromCookie function in core/Cookie.php in Piwik before 0.5 does not validate strings obtained from cooki…
-
Unscored —CVE-2009-4413 Public exploit
The httpClientDiscardBody function in client.c in Polipo 0.9.8, 0.9.12, 1.0.4, and possibly other versions, allows remo…
-
Unscored —
Polipo 1.0.4, and possibly other versions, allows remote attackers to cause a denial of service (crash) via a request w…
-
Unscored —CVE-2009-4403 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Rumba XML 1.8 allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2009-4385 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in Scriptsez.net Ez Poll Hoster (EPH) allow remote attackers…
-
Unscored —CVE-2009-4384 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Scriptsez.net Ez Poll Hoster (EPH) allow remote attackers to inj…
-
Unscored —CVE-2009-4381 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in texmedia Million Pixel Script 3 allows remote attackers to inj…
-
Unscored —CVE-2009-4386 Public exploit
SQL injection vulnerability in hotel_tiempolibre_ext.php in Venalsur Booking Centre Booking System for Hotels Group, wh…
-
Unscored —CVE-2009-4382 Public exploit
Cross-site scripting (XSS) vulnerability in module.php in PHPFABER CMS, possibly 1.3.36, allows remote attackers to inj…
-
Unscored —
Unrestricted file upload vulnerability in ofc_upload_image.php in Open Flash Chart v2 Beta 1 through v2 Lug Wyrm Charme…
-
Unscored —CVE-2009-3702 Public exploit
Multiple absolute path traversal vulnerabilities in PHP-Calendar 1.1 allow remote attackers to include and execute arbi…
-
Unscored —CVE-2009-4372 Public exploit
AlienVault Open Source Security Information Management (OSSIM) 2.1.5, and possibly other versions before 2.1.5-4, allow…
-
Unscored —CVE-2009-4365 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in admin.php in ScriptsEz Ez Blog 1.0 allow remote attackers…
-
Unscored —CVE-2009-4364 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in ScriptsEz Ez Blog allows remote attackers to inject arbitrary …
-
Unscored —CVE-2009-4142 Public exploit
The htmlspecialchars function in PHP before 5.2.12 does not properly handle (1) overlong UTF-8 sequences, (2) invalid S…
-
Unscored —CVE-2009-4367 Public exploit
The Staging Webservice ("sitecore modules/staging/service/api.asmx") in Sitecore Staging Module 5.4.0 rev.080625 and ea…
-
Unscored —CVE-2009-4375 Public exploit
SQL injection vulnerability in repository/repository_attachment.php in AlienVault Open Source Security Information Mana…
-
Unscored —CVE-2009-4366 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in ScriptsEz Ez Blog 1.0 allows remote attackers to inject arbitr…
-
Unscored —CVE-2009-3701 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the administration interface in Horde Application Framework befo…
-
Unscored —CVE-2009-4359 Public exploit
Cross-site scripting (XSS) vulnerability in folder.php in the SmartMedia 0.85 Beta module for XOOPS allows remote attac…
-
Unscored —CVE-2009-4360 Public exploit
SQL injection vulnerability in modules/content/index.php in the Content module 0.5 for XOOPS allows remote attackers to…
-
Unscored —CVE-2009-3703 Public exploit
Multiple SQL injection vulnerabilities in the WP-Forum plugin before 2.4 for WordPress allow remote attackers to execut…
-
Unscored —
Stack-based buffer overflow in OmniInet.exe (aka the backup client service daemon) in the Application Recovery Manager …
-
Unscored —CVE-2009-4351 Public exploit
SQL injection vulnerability in ADMIN/loginaction.php in WSCreator 1.1, when magic_quotes_gpc is disabled, allows remote…
-
Unscored —CVE-2009-4349 Public exploit
Cross-site request forgery (CSRF) vulnerability in administration/administrators.php in Link Up Gold 5.0 allows remote …
-
Medium —CVE-2008-7248 Public exploit
Improper Input Validation in actionpack
Ruby on Rails 2.1 before 2.1.3 and 2.2.x before 2.2.2 does not verify tokens for requests with certain content types, which allows remote attackers to bypass cross-site request forgery (CSRF) protection for requests to applications that rely on this protectio…
-
High 7.8
Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before…
KEV Jun 8, 2022 -
Unscored —CVE-2009-4319 Public exploit
PHP remote file inclusion vulnerability in js/bbcodepress/bbcode-form.php in eoCMS 0.9.03 and earlier, when register_gl…
-
Unscored —CVE-2009-4315 Public exploit
Directory traversal vulnerability in admin/ajaxsave.php in Nuggetz CMS 1.0, when magic_quotes_gpc is disabled, allows r…