|
292131
|
- |
|
bookelves
|
kipper
|
Cross-site scripting (XSS) vulnerability in default.php in Kipper 2.01 allows remote attackers to inject arbitrary web script or HTML via the charm parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2009-0763
|
2017-09-29 10:34 |
2009-03-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292132
|
- |
|
bookelves
|
kipper
|
Directory traversal vulnerability in index.php in Kipper 2.01 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the configfile parameter.
|
CWE-22
Path Traversal
|
CVE-2009-0765
|
2017-09-29 10:34 |
2009-03-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292133
|
- |
|
bookelves
|
kipper
|
Kipper 2.01 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a file containing credentials via a direct request for job/conf…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2009-0767
|
2017-09-29 10:34 |
2009-03-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292134
|
- |
|
yapbb
|
yapbb
|
SQL injection vulnerability in forumhop.php in YapBB 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the forumID parameter in a next action.
|
CWE-89
SQL Injection
|
CVE-2009-0768
|
2017-09-29 10:34 |
2009-03-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292135
|
- |
|
mozilla
|
firefox seamonkey thunderbird
|
The JavaScript engine in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary co…
|
CWE-399
Resource Management Errors
|
CVE-2009-0773
|
2017-09-29 10:34 |
2009-03-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292136
|
- |
|
mozilla
|
firefox seamonkey thunderbird
|
Double free vulnerability in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to execute arbitrary code via "cloned XUL DOM elements whic…
|
CWE-399
Resource Management Errors
|
CVE-2009-0775
|
2017-09-29 10:34 |
2009-03-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292137
|
- |
|
mozilla
|
firefox seamonkey thunderbird
|
Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 decode invisible characters when they are displayed in the location bar, which causes an incorrect address to be…
|
CWE-20
Improper Input Validation
|
CVE-2009-0777
|
2017-09-29 10:34 |
2009-03-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292138
|
- |
|
tim_hockin
|
acpid
|
ACPI Event Daemon (acpid) before 1.0.10 allows remote attackers to cause a denial of service (CPU consumption and connectivity loss) by opening a large number of UNIX sockets without closing them, wh…
|
CWE-399
Resource Management Errors
|
CVE-2009-0798
|
2017-09-29 10:34 |
2009-04-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292139
|
- |
|
zfeeder
|
zfeeder
|
zFeeder 1.6 allows remote attackers to gain administrative access via a direct request to admin.php.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2009-0807
|
2017-09-29 10:34 |
2009-03-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292140
|
- |
|
xatrix
|
xguestbook
|
SQL injection vulnerability in login.php in xGuestbook 2.0 allows remote attackers to execute arbitrary SQL commands via the user parameter.
|
CWE-89
SQL Injection
|
CVE-2009-0810
|
2017-09-29 10:34 |
2009-03-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|