258021
|
- |
|
skadate
|
skadate_online_dating_software
|
PHP remote file inclusion vulnerability in index.php in SkaDate Dating allows remote attackers to execute arbitrary PHP code via a URL in the language_id parameter. NOTE: this can also be leveraged …
|
CWE-94
Code Injection
|
CVE-2009-4739
|
2017-09-19 10:30 |
2010-03-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258022
|
- |
|
andrew_charlton
|
my_category_order
|
SQL injection vulnerability in mycategoryorder.php in the My Category Order plugin 2.8 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the parentID parameter i…
|
CWE-89
SQL Injection
|
CVE-2009-4748
|
2017-09-19 10:30 |
2010-03-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258023
|
- |
|
phplivesupport
|
php_live\!
|
Multiple SQL injection vulnerabilities in PHP Live! 3.2.1 and 3.2.2 allow remote attackers to execute arbitrary SQL commands via the x parameter to (1) message_box.php and (2) request.php.
|
CWE-89
SQL Injection
|
CVE-2009-4749
|
2017-09-19 10:30 |
2010-03-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258024
|
- |
|
mercuryaudio
|
audio_player
|
Stack-based buffer overflow in Mercury Audio Player 1.21 allows remote attackers to execute arbitrary code via a long string in a malformed playlist (.m3u) file.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2009-4754
|
2017-09-19 10:30 |
2010-03-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258025
|
- |
|
mercuryaudio
|
audio_player
|
Multiple stack-based buffer overflows in Mercury Audio Player 1.21 allow remote attackers to execute arbitrary code via a long string in a malformed (1) .b4s or (2) .pls playlist file.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2009-4755
|
2017-09-19 10:30 |
2010-03-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258026
|
- |
|
beatport
|
beatport_player
|
Stack-based buffer overflow in TraktorBeatport.exe 1.0.0.283 in Beatport Player 1.0.0.0 allows remote attackers to execute arbitrary code via a long string in a malformed playlist (.m3u) file.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2009-4756
|
2017-09-19 10:30 |
2010-03-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258027
|
- |
|
evils-world
|
ew-musicplayer
|
Stack-based buffer overflow in BrotherSoft EW-MusicPlayer 0.8 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long string in a malfor…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2009-4757
|
2017-09-19 10:30 |
2010-03-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258028
|
- |
|
dicas
|
mpegable_player
|
Stack-based buffer overflow in dicas Mpegable Player 2.12 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long string in a .YUV file.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2009-4758
|
2017-09-19 10:30 |
2010-03-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258029
|
- |
|
joric
|
bmxplay
|
Buffer overflow in BrotherSoft BMXPlay 0.4.4b allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long string in a .BMX file.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2009-4759
|
2017-09-19 10:30 |
2010-03-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
258030
|
- |
|
winn
|
asp_guestbook
|
Winn ASP Guestbook 1.01 Beta stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for data/guest…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2009-4760
|
2017-09-19 10:30 |
2010-03-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|