258361
|
- |
|
afterlogic
|
webmail_pro
|
Multiple cross-site scripting (XSS) vulnerabilities in history-storage.aspx in AfterLogic WebMail Pro 4.7.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Hist…
|
CWE-79
Cross-site Scripting
|
CVE-2009-4743
|
2017-08-17 10:31 |
2010-03-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258362
|
- |
|
oicgroup
|
exponent_cms
|
Cross-site scripting (XSS) vulnerability in the Contact module in Exponent CMS 0.97-GA20090213 allows remote attackers to inject arbitrary web script or HTML via the email parameter. NOTE: the prove…
|
CWE-79
Cross-site Scripting
|
CVE-2009-4744
|
2017-08-17 10:31 |
2010-03-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258363
|
- |
|
phppower
|
top_paidmailer
|
PHP remote file inclusion vulnerability in home.php in Top Paidmailer allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.
|
CWE-94
Code Injection
|
CVE-2009-4750
|
2017-08-17 10:31 |
2010-03-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258364
|
- |
|
phppower
|
swinger_club_portal
|
SQL injection vulnerability in anzeiger/start.php in Swinger Club Portal allows remote attackers to execute arbitrary SQL commands via the id parameter in a rubrik action.
|
CWE-89
SQL Injection
|
CVE-2009-4751
|
2017-08-17 10:31 |
2010-03-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258365
|
- |
|
phppower
|
swinger_club_portal
|
PHP remote file inclusion vulnerability in anzeiger/start.php in Swinger Club Portal allows remote attackers to execute arbitrary PHP code via a URL in the go parameter.
|
CWE-94
Code Injection
|
CVE-2009-4752
|
2017-08-17 10:31 |
2010-03-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258366
|
- |
|
phpmyvisites
|
phpmyvisites
|
Unspecified vulnerability in the ClickHeat plugin, as used in phpMyVisites before 2.4, has unknown impact and attack vectors. NOTE: due to lack of details from the vendor, it is not clear whether th…
|
NVD-CWE-noinfo
|
CVE-2009-4763
|
2017-08-17 10:31 |
2010-03-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258367
|
- |
|
plohni
|
shoutbox
|
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Plohni Shoutbox 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) input_name and (2) input_text paramet…
|
CWE-79
Cross-site Scripting
|
CVE-2009-4767
|
2017-08-17 10:31 |
2010-04-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258368
|
- |
|
blizzard
|
warcraft_3_the_frozen_throne
|
Unspecified vulnerability in the JASS script interpreter in Warcraft III: The Frozen Throne 1.24b and earlier allows user-assisted remote attackers to execute arbitrary code via a crafted custom map.…
|
CWE-94
Code Injection
|
CVE-2009-4768
|
2017-08-17 10:31 |
2010-04-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258369
|
- |
|
ubercart
|
ubercart
|
The PayPal Website Payments Standard functionality in the Ubercart module 5.x before 5.x-1.9 and 6.x before 6.x-2.1 for Drupal does not properly validate orders, which allows remote attackers to trig…
|
CWE-20
Improper Input Validation
|
CVE-2009-4771
|
2017-08-17 10:31 |
2010-04-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258370
|
- |
|
ubercart
|
ubercart
|
Unspecified vulnerability in the PayPal Website Payments Standard functionality in the Ubercart module 5.x before 5.x-1.9 and 6.x before 6.x-2.1 for Drupal, when a custom checkout completion message …
|
NVD-CWE-noinfo
|
CVE-2009-4772
|
2017-08-17 10:31 |
2010-04-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|