270841
|
- |
|
zoph
|
zoph
|
Cross-site scripting (XSS) vulnerability in people.php in Zoph before 0.7.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are …
|
CWE-79
Cross-site Scripting
|
CVE-2009-2343
|
2009-07-9 13:00 |
2009-07-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
270842
|
- |
|
ebay
|
enhanced_picture_uploader_activex_control
|
eBay Enhanced Picture Uploader ActiveX control (EPUWALcontrol.dll) before 1.0.27 allows remote attackers to execute arbitrary commands via the PictureUrls property.
|
CWE-78
OS Command
|
CVE-2008-2475
|
2009-07-9 13:00 |
2009-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
270843
|
- |
|
ebay
|
enhanced_picture_uploader_activex_control
|
Per http://www.kb.cert.org/vuls/id/983731
This update is addressed in version 1.0.27 of the Ebay Enhanced Picture Control software.
|
CWE-78
OS Command
|
CVE-2008-2475
|
2009-07-9 13:00 |
2009-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
270844
|
- |
|
matteo_ricchetti
|
ss5
|
Unspecified vulnerability in Socks Server 5 before 3.7.8-8 has unknown impact and attack vectors.
|
NVD-CWE-noinfo
|
CVE-2009-2368
|
2009-07-9 00:30 |
2009-07-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
270845
|
- |
|
michelle_cox
|
advanced_forum
|
Cross-site scripting (XSS) vulnerability in Advanced Forum 5.x before 5.x-1.1 and 6.x before 6.x-1.1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecifi…
|
CWE-79
Cross-site Scripting
|
CVE-2009-2370
|
2009-07-9 00:30 |
2009-07-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
270846
|
- |
|
michelle_cox
|
advanced_forum
|
Advanced Forum 6.x before 6.x-1.1, a module for Drupal, does not prevent users from modifying user signatures after the associated comment format has been changed to an administrator-controlled input…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2009-2371
|
2009-07-9 00:30 |
2009-07-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
270847
|
- |
|
drupal
|
drupal
|
Cross-site scripting (XSS) vulnerability in the Forum module in Drupal 6.x before 6.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
CWE-79
Cross-site Scripting
|
CVE-2009-2373
|
2009-07-9 00:30 |
2009-07-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
270848
|
- |
|
hans_oesterholt
|
cmme
|
Cross-site scripting (XSS) vulnerability in admin.php (aka the login page) in Content Management Made Easy (CMME) before 1.22 allows remote attackers to inject arbitrary web script or HTML via the us…
|
CWE-79
Cross-site Scripting
|
CVE-2009-2342
|
2009-07-8 13:00 |
2009-07-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
270849
|
- |
|
clansphere
|
clansphere
|
Multiple SQL injection vulnerabilities in ClanSphere before 2009.0.1 allow remote attackers to execute arbitrary SQL commands via unknown parameters to the gbook module and unspecified other componen…
|
CWE-89
SQL Injection
|
CVE-2009-2345
|
2009-07-8 13:00 |
2009-07-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
270850
|
- |
|
php.s3
|
php-i-board
|
Directory traversal vulnerability in PHP-I-BOARD 1.2 and earlier allows remote attackers to read arbitrary files via directory traversal sequences in unspecified vectors, probably related to mail.
|
CWE-22
Path Traversal
|
CVE-2009-2222
|
2009-07-8 00:45 |
2009-06-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|