257651
|
- |
|
mrcgiguy
|
the_ticket_system
|
admin.php in MRCGIGUY The Ticket System 2.0 does not properly restrict access, which allows remote attackers to (1) obtain sensitive configuration information via the editconfig action or (2) change …
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2009-2080
|
2017-09-29 10:34 |
2009-06-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257652
|
- |
|
phpwebthings
|
phpwebthings
|
Directory traversal vulnerability in help.php in phpWebThings 1.5.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the module pa…
|
CWE-22
Path Traversal
|
CVE-2009-2081
|
2017-09-29 10:34 |
2009-06-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257653
|
- |
|
mundi_king
|
mundi_mail
|
PHP remote file inclusion vulnerability in template/simpledefault/admin/_masterlayout.php in Mundi Mail 0.8.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code …
|
CWE-94
Code Injection
|
CVE-2009-2095
|
2017-09-29 10:34 |
2009-06-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257654
|
- |
|
david_degner
|
phpcollegeexchange
|
SQL injection vulnerability in house/listing_view.php in phpCollegeExchange 0.1.5c allows remote attackers to execute arbitrary SQL commands via the itemnr parameter.
|
CWE-89
SQL Injection
|
CVE-2009-2096
|
2017-09-29 10:34 |
2009-06-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257655
|
- |
|
micheal_glazer
|
phportal
|
SQL injection vulnerability in topicler.php in phPortal 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
|
CWE-89
SQL Injection
|
CVE-2009-2098
|
2017-09-29 10:34 |
2009-06-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257656
|
- |
|
ijoomla
|
com_rssfeeder
|
SQL injection vulnerability in the iJoomla RSS Feeder (com_ijoomla_rss) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in an xml action to index…
|
CWE-89
SQL Injection
|
CVE-2009-2099
|
2017-09-29 10:34 |
2009-06-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257657
|
- |
|
joomlapraise
|
com_projectfork
|
Directory traversal vulnerability in the JoomlaPraise Projectfork (com_projectfork) component 2.0.10 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in t…
|
CWE-22
Path Traversal
|
CVE-2009-2100
|
2017-09-29 10:34 |
2009-06-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257658
|
- |
|
castro_xl
|
torrentvolve
|
Directory traversal vulnerability in archive.php in TorrentVolve 1.4, when register_globals is enabled, allows remote attackers to delete arbitrary files via a .. (dot dot) in the deleteTorrent param…
|
CWE-22
Path Traversal
|
CVE-2009-2101
|
2017-09-29 10:34 |
2009-06-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257659
|
- |
|
com_jumi
|
com_jumi
|
SQL injection vulnerability in the Jumi (com_jumi) component 2.0.3 and possibly other versions for Joomla allows remote attackers to execute arbitrary SQL commands via the fileid parameter to index.p…
|
CWE-89
SQL Injection
|
CVE-2009-2102
|
2017-09-29 10:34 |
2009-06-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257660
|
- |
|
jnmsolutions
|
db_top_sites
|
Multiple directory traversal vulnerabilities in DB Top Sites 1.0, when magic_quotes_gpc is disabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the u pa…
|
CWE-22
Path Traversal
|
CVE-2009-2110
|
2017-09-29 10:34 |
2009-06-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|