Archive
January 2010
Vulnerabilities first published in this month (UTC), newest first.
319 results · Feed
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Artist avenue (com_artistavenue) component for Joomla! and Mambo allows…
-
Unscored —CVE-2009-4585 Public exploit
UranyumSoft Listing Service stores sensitive information under the web root with insufficient access control, which all…
-
Unscored —CVE-2009-4581 Public exploit
Directory traversal vulnerability in modules/admincp.php in RoseOnlineCMS 3 B1 and earlier, when magic_quotes_gpc is di…
-
Unscored —CVE-2009-4578 Public exploit
Cross-site scripting (XSS) vulnerability in the Facileforms (com_facileforms) component for Joomla! and Mambo allows re…
-
Unscored —CVE-2009-4567 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in editprofile.php in Viscacha 0.8 Gold allow remote authenticated …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Webmin before 1.500 and Usermin before 1.430 allows remote attackers to inj…
-
Unscored —
Cross-site scripting (XSS) vulnerability in PhpShop 0.8.1 allows remote attackers to inject arbitrary web script or HTM…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in PhpShop 0.8.1 allows remote attackers to hijack the authentication o…
-
Unscored —CVE-2009-4569 Public exploit
SQL injection vulnerability in elkagroup Image Gallery allows remote attackers to execute arbitrary SQL commands via th…
-
Unscored —CVE-2009-4571 Public exploit
Multiple SQL injection vulnerabilities in index.php in PhpShop 0.8.1 allow remote attackers to execute arbitrary SQL co…
-
Unscored —
Unspecified vulnerability in the management console in the S2 Security Linear eMerge Access Control System 2.5.x allows…
-
Unscored —
sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name (CN) field of an X.509 certificate, w…
-
Unscored —CVE-2009-4566 Public exploit
SQL injection vulnerability in index.php in Zenphoto 1.2.5 allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2009-4561 Public exploit
Multiple SQL injection vulnerabilities in Admin/index.php in WebLeague 2.2.0, when magic_quotes_gpc is disabled, allow …
-
Unscored —CVE-2009-4556 Public exploit
Quick Heal AntiVirus Plus 2009 10.00 SP1 and Quick Heal Total Security 2009 10.00 SP1 use weak permissions (Everyone: F…
-
Unscored —CVE-2009-4554 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Snitz Forums 2000 3.4.07 allow remote attackers to inject arbitr…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Image Assist module 5.x-1.x before 5.x-1.8, 5.x-2.x before 2.0-alpha4, …
-
Unscored —CVE-2009-4563 Public exploit
Cross-site request forgery (CSRF) vulnerability in zp-core/admin-options.php in Zenphoto 1.2.5 allows remote attackers …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Submitted By module 6.x before 6.x-1.3 for Drupal allows remote authent…
-
Unscored —CVE-2009-4560 Public exploit
SQL injection vulnerability in profile.php in WebLeague 2.2.0 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —
The Image Assist module 5.x-1.x before 5.x-1.8, 5.x-2.x before 2.0-alpha4, 6.x-1.x before 6.x-1.1, 6.x-2.x before 2.0-a…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in AgoraCart 5.2.005 and 5.2.006 and AgoraCart GOLD 5.5.005 …
-
Unscored —CVE-2009-4562 Public exploit
Cross-site scripting (XSS) vulnerability in zp-core/admin.php in Zenphoto 1.2.5 allows remote attackers to inject arbit…
-
Unscored —CVE-2009-4564 Public exploit
SQL injection vulnerability in index.php in Zenphoto 1.2.5, when the ZenPage plugin is enabled, allows remote attackers…
-
Unscored —CVE-2009-4546 Public exploit
globepersonnel_login.asp in Logoshows BBS 2.0 allows remote attackers to bypass authentication and gain administrative …
-
Unscored —CVE-2009-4542 Public exploit
Cross-site scripting (XSS) vulnerability in newticket.php in IsolSoft Support Center 2.5 allows remote attackers to inj…
-
Unscored —CVE-2009-4551 Public exploit
SQL injection vulnerability in the Survey Pro module for Miniweb 2.0 allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2009-4550 Public exploit
SQL injection vulnerability in the Kunena Forum (com_kunena) component 1.5.3 and 1.5.4 for Joomla! allows remote attack…
-
Unscored —CVE-2009-4543 Public exploit
PHP remote file inclusion vulnerability in index.php in Cromosoft Technologies Facil Helpdesk 2.3 Lite allows remote at…
-
Unscored —CVE-2009-4548 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in ViArt Helpdesk 3.x allow remote attackers to inject arbitrary we…
-
Unscored —CVE-2009-4540 Public exploit
SQL injection vulnerability in page.php in Mini CMS 1.0.1 allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2009-4541 Public exploit
Multiple PHP remote file inclusion vulnerabilities in IsolSoft Support Center 2.5 allow remote attackers to execute arb…
-
Unscored —CVE-2009-4552 Public exploit
Cross-site scripting (XSS) vulnerability in the Survey Pro module for Miniweb 2.0 allows remote attackers to inject arb…
-
Unscored —
Cross-site scripting (XSS) vulnerability in main.php in SQLiteManager 1.2.0 allows remote attackers to inject arbitrary…
-
Unscored —CVE-2009-4545 Public exploit
Logoshows BBS 2.0 stores sensitive information under the web root with insufficient access control, which allows remote…
-
Unscored —CVE-2009-4544 Public exploit
Cross-site scripting (XSS) vulnerability in kbase/kbase.php in Cromosoft Technologies Facil Helpdesk 2.3 Lite allows re…
-
Unscored —CVE-2009-4547 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in ViArt CMS 3.x allow remote attackers to inject arbitrary web scr…
-
Unscored —CVE-2009-4553 Public exploit
Stack-based buffer overflow in iRehearse allows remote attackers to cause a denial of service (application crash) or po…
-
Unscored —CVE-2009-4549 Public exploit
Stack-based buffer overflow in A2 Media Player Pro 2.51 allows remote attackers to execute arbitrary code via a long st…