|
292431
|
- |
|
mozilla
|
firefox
|
Mozilla Firefox 3.0.5 and earlier 3.0.x versions, when designMode is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a certain (a) r…
|
CWE-399
Resource Management Errors
|
CVE-2009-0071
|
2017-09-29 10:33 |
2009-01-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292432
|
- |
|
playsms
|
playsms
|
Multiple PHP remote file inclusion vulnerabilities in playSMS 0.9.3 allow remote attackers to execute arbitrary PHP code via a URL in the (1) apps_path[plug] parameter to plugin/gateway/gnokii/init.p…
|
CWE-94
Code Injection
|
CVE-2009-0103
|
2017-09-29 10:33 |
2009-01-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292433
|
- |
|
se-ed
|
ezpack
|
SQL injection vulnerability in index.php in EZpack 4.2b2 allows remote attackers to execute arbitrary SQL commands via the qType parameter in a webboard prog action.
|
CWE-89
SQL Injection
|
CVE-2009-0104
|
2017-09-29 10:33 |
2009-01-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292434
|
- |
|
se-ed
|
ezpack
|
Cross-site scripting (XSS) vulnerability in index.php in EZpack 4.2b2 allows remote attackers to inject arbitrary web script or HTML via the mdfd parameter in a prog action.
|
CWE-79
Cross-site Scripting
|
CVE-2009-0105
|
2017-09-29 10:33 |
2009-01-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292435
|
- |
|
phpauctions
|
phpauctions
|
PHPAuctions (aka PHPAuctionSystem) allows remote attackers to bypass authentication and gain administrative access via modified (1) PHPAUCTION_RM_ID, (2) PHPAUCTION_RM_NAME, (3) PHPAUCTION_RM_USERNAM…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2009-0108
|
2017-09-29 10:33 |
2009-01-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292436
|
- |
|
riotpix
|
riotpix
|
SQL injection vulnerability in index.php in RiotPix 0.61 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: some of these details are obtained fr…
|
CWE-89
SQL Injection
|
CVE-2009-0109
|
2017-09-29 10:33 |
2009-01-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292437
|
- |
|
riotpix
|
riotpix
|
SQL injection vulnerability in read.php in RiotPix 0.61 and earlier allows remote attackers to execute arbitrary SQL commands via the forumid parameter.
|
CWE-89
SQL Injection
|
CVE-2009-0110
|
2017-09-29 10:33 |
2009-01-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292438
|
- |
|
goople_cms
|
goople_cms
|
SQL injection vulnerability in frontpage.php in Goople CMS 1.8.2 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter.
|
CWE-89
SQL Injection
|
CVE-2009-0111
|
2017-09-29 10:33 |
2009-01-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292439
|
- |
|
joomla
|
xstandard
|
Directory traversal vulnerability in attachmentlibrary.php in the XStandard component for Joomla! 1.5.8 and earlier allows remote attackers to list arbitrary directories via a .. (dot dot) in the X_C…
|
CWE-22
Path Traversal
|
CVE-2009-0113
|
2017-09-29 10:33 |
2009-01-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292440
|
- |
|
adobe
|
air flash_player flash_player_for_linux flex
|
Unspecified vulnerability in the Settings Manager in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87, and possibly other versions, allows remote attackers to trick a user into visi…
|
NVD-CWE-Other
|
CVE-2009-0114
|
2017-09-29 10:33 |
2009-02-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|