268051
|
- |
|
adbnewssender
|
adbnewssender
|
Directory traversal vulnerability in maillinglist/admin/change_config.php in ADbNewsSender before 1.5.6 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the …
|
CWE-22
Path Traversal
|
CVE-2009-2449
|
2009-07-14 13:00 |
2009-07-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268052
|
- |
|
phponlinedatingsoftware
|
myphpdating
|
SQL injection vulnerability in page.php in Online Dating Software MyPHPDating 1.0 allows remote attackers to execute arbitrary SQL commands via the page_id parameter.
|
CWE-89
SQL Injection
|
CVE-2009-2436
|
2009-07-13 23:30 |
2009-07-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268053
|
- |
|
rentventory
|
rentventory
|
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Rentventory 1.0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) username (aka Login) and (2) password p…
|
CWE-79
Cross-site Scripting
|
CVE-2009-2437
|
2009-07-13 23:30 |
2009-07-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268054
|
- |
|
clansphere
|
clansphere
|
Cross-site scripting (XSS) vulnerability in index.php in the search module in ClanSphere 2009.0 and 2009.0.2 allows remote attackers to inject arbitrary web script or HTML via the text parameter in a…
|
CWE-79
Cross-site Scripting
|
CVE-2009-2438
|
2009-07-13 23:30 |
2009-07-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268055
|
- |
|
jnmsolutions
|
guestbook
|
Cross-site scripting (XSS) vulnerability in index.php in JNM Guestbook 3.0 allows remote attackers to inject arbitrary web script or HTML via the page parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2009-2440
|
2009-07-13 23:30 |
2009-07-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268056
|
- |
|
linea21
|
linea21
|
Cross-site scripting (XSS) vulnerability in public/index.php in Linea21 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the search parameter in a resultats-recherche action.
|
CWE-79
Cross-site Scripting
|
CVE-2009-2442
|
2009-07-13 23:30 |
2009-07-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268057
|
- |
|
awingsoft
|
awakening_winds3d_viewer_plugin
|
Insecure method vulnerability in Awingsoft Awakening Winds3D Viewer plugin 3.5.0.0, 3.0.0.5, and possibly other versions allows remote attackers to force the download and execution of arbitrary files…
|
CWE-20
Improper Input Validation
|
CVE-2009-2386
|
2009-07-13 13:00 |
2009-07-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268058
|
- |
|
ebayclonescript
|
ebay_clone
|
SQL injection vulnerability in category.php in Ebay Clone 2009 allows remote attackers to execute arbitrary SQL commands via the cate_id parameter in a list action.
|
CWE-89
SQL Injection
|
CVE-2009-2423
|
2009-07-13 13:00 |
2009-07-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268059
|
- |
|
jobbr
|
jobbr
|
SQL injection vulnerability in co-profile.php in Jobbr 2.2.7 allows remote attackers to execute arbitrary SQL commands via the emp_id parameter.
|
CWE-89
SQL Injection
|
CVE-2009-2427
|
2009-07-13 13:00 |
2009-07-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268060
|
- |
|
tauschregal.de
|
tausch_ticket_script
|
Multiple SQL injection vulnerabilities in Tausch Ticket Script 3 allow remote attackers to execute arbitrary SQL commands via the (1) userid parameter to suchauftraege_user.php and the (2) descr para…
|
CWE-89
SQL Injection
|
CVE-2009-2428
|
2009-07-13 13:00 |
2009-07-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|