Archive
March 2010
Vulnerabilities first published in this month (UTC), newest first.
513 results · Feed
-
Unscored —CVE-2009-4722 Public exploit
SQL injection vulnerability in the CheckLogin function in includes/functions.php in Limny 1.01, when magic_quotes_gpc i…
-
Unscored —CVE-2009-4723 Public exploit
Directory traversal vulnerability in confirm.php in Netpet CMS 1.9 allows remote attackers to include and execute arbit…
-
Unscored —CVE-2009-4727 Public exploit
SQL injection vulnerability in x/login in JungleScripts Ajax Short Url Script allows remote attackers to execute arbitr…
-
Unscored —
SQL injection vulnerability in photos.php in Model Agency Manager PRO (formerly Modeling Agency Content Management Scri…
-
Unscored —CVE-2009-4730 Public exploit
SQL injection vulnerability in report.php in x10 Adult Media Script 1.7 allows remote attackers to execute arbitrary SQ…
-
Unscored —
SQL injection vulnerability in cgi-bin/gnudip.cgi in GnuDIP 2.1.1 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2009-4733 Public exploit
SQL injection vulnerability in checkuser.php in SimpleLoginSys 0.5, when magic_quotes_gpc is disabled, allows remote at…
-
Unscored —CVE-2009-4734 Public exploit
SQL injection vulnerability in login.php in Allomani Movies Library (Movies & Clips) 2.7.0 allows remote attackers to e…
-
Unscored —CVE-2009-4726 Public exploit
Directory traversal vulnerability in download.php in Quickdev 4 PHP allows remote attackers to read arbitrary files via…
-
Unscored —CVE-2009-4728 Public exploit
SQL injection vulnerability in the administrative interface in Questions Answered 1.3 allows remote attackers to execut…
-
Unscored —CVE-2009-4719 Public exploit
SQL injection vulnerability in index.php in Discloser 0.0.4 rc2 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2009-4725 Public exploit
Directory traversal vulnerability in modules/aljazeera/admin/setup.php in Arab Portal 2.2 and earlier, when register_gl…
-
Unscored —CVE-2009-4735 Public exploit
SQL injection vulnerability in login.php in Allomani Audio & Video Library (Songs & Clips version) 2.7.0 allows remote …
-
Unscored —
Unspecified vulnerability in the Broadcom Integrated NIC Management Firmware 1.x before 1.40.0.0 and 8.x before 8.08 on…
-
Unscored —
Array index error in the hb_ot_layout_build_glyph_classes function in pango/opentype/hb-ot-layout.cc in Pango before 1.…
-
Unscored —
The pa_make_secure_dir function in core-util.c in PulseAudio 0.9.10 and 0.9.19 allows local users to change the ownersh…
-
Unscored —
The xmlrpc extension in PHP 5.3.1 does not properly handle a missing methodName element in the first argument to the xm…
-
Unscored —CVE-2010-0983 Public exploit
PHP remote file inclusion vulnerability in include/mail.inc.php in Rezervi 3.0.2 and earlier, when register_globals is …
-
Unscored —
A certain Red Hat patch for the Linux kernel in Red Hat Enterprise Linux (RHEL) 4 on the ia64 platform allows local use…
-
Unscored —CVE-2010-0981 Public exploit
SQL injection vulnerability in the TPJobs (com_tpjobs) component for Joomla! allows remote attackers to execute arbitra…
-
Unscored —
Buffer overflow in BarnOwl before 1.5.1 allows remote attackers to cause a denial of service (crash) and possibly execu…
-
Unscored —CVE-2010-0984 Public exploit
Acidcat CMS 3.5.3 and earlier stores sensitive information under the web root with insufficient access control, which a…
-
Unscored —CVE-2010-0976 Public exploit
Acidcat CMS 3.5.x does not prevent access to install.asp after installation finishes, which might allow remote attacker…
-
Unscored —
PD PORTAL 4.0 stores sensitive information under the web root with insufficient access control, which allows remote att…
-
Unscored —
The gfs2_lock function in the Linux kernel before 2.6.34-rc1-next-20100312, and the gfs_lock function in the Linux kern…
-
Unscored —
Cross-site scripting (XSS) vulnerability in display.php in Obsession-Design Image-Gallery (ODIG) 1.1 allows remote atta…
-
Unscored —CVE-2010-0978 Public exploit
KMSoft Guestbook (aka GBook) 1.0 stores sensitive information under the web root with insufficient access control, whic…
-
Unscored —
Directory traversal vulnerability in the CARTwebERP (com_cartweberp) component 1.56.75 for Joomla! allows remote attack…
-
Unscored —CVE-2010-0980 Public exploit
SQL injection vulnerability in player.php in Left 4 Dead (L4D) Stats 1.1 allows remote attackers to execute arbitrary S…
-
Unscored —
Directory traversal vulnerability in the Abbreviations Manager (com_abbrev) component 1.1 for Joomla! allows remote att…
-
Unscored —
The nfs_lock function in fs/nfs/file.c in the Linux kernel 2.6.9 does not properly remove POSIX locks on files that are…
-
Unscored —
Jevci Siparis Formu Scripti stores sensitive information under the web root with insufficient access control, which all…
-
Unscored —CVE-2010-0970 Public exploit
SQL injection vulnerability in phpmylogon.php in PhpMyLogon 2 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2010-0974 Public exploit
Multiple SQL injection vulnerabilities in PHPCityPortal allow remote attackers to execute arbitrary SQL commands via th…
-
Unscored —CVE-2010-0968 Public exploit
SQL injection vulnerability in bannershow.php in Geekhelps ADMP 1.01 allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2010-0973 Public exploit
SQL injection vulnerability in index.php in phppool media Domain Verkaus and Auktions Portal allows remote attackers to…
-
Unscored —CVE-2010-0966 Public exploit
PHP remote file inclusion vulnerability in inc/config.php in deV!L`z Clanportal (DZCP) 1.5.2, when register_globals is …
-
Unscored —CVE-2010-0964 Public exploit
SQL injection vulnerability in start.php in Eros Webkatalog allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2010-0971 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.6.4 allow remote authenticated users, with Instructor p…
-
Unscored —CVE-2010-0975 Public exploit
PHP remote file inclusion vulnerability in external.php in PHPCityPortal allows remote attackers to execute arbitrary P…