Skip to content

CVEs published in February 2009

686 vulnerabilities, 76 critical, 1 exploited.

netartmedia jobs portalMultiple SQL injection vulnerabilities in NetArtMedia Jobs Portal 1.3 allow remote attackers to...CVE-2008-6030Public exploit7.5 HighFebruary 3, 2009
buzzywallSQL injection vulnerability in search.php in BuzzyWall 1.3.1 and earlier, when magic_quotes_gpc...CVE-2008-6029Public exploit6.8 MediumFebruary 3, 2009
university of queensland fezSQL injection vulnerability in list.php in University of Queensland Library Fez 1.3 and 2.0 RC1...CVE-2008-6028Public exploit7.5 HighFebruary 3, 2009
iss-oberlausitz bluepage cmsMultiple cross-site scripting (XSS) vulnerabilities in index.php in BLUEPAGE CMS 2.5 and earlier...CVE-2008-60274.3 MediumFebruary 3, 2009
bluecube cmsSQL injection vulnerability in tienda.php in BlueCUBE CMS allows remote attackers to execute...CVE-2008-6026Public exploit7.5 HighFebruary 3, 2009
openelecDirectory traversal vulnerability in scr/form.php in openElec 3.01 and earlier allows remote...CVE-2008-6025Public exploit6.8 MediumFebruary 3, 2009
sony ericsson k530i, k610i, k618i +6 more +8 moreThe Sony Ericsson W910i, W660i, K618i, K610i, Z610i, K810i, K660i, W880i, and K530i phones allow...CVE-2009-03967.8 HighFebruary 3, 2009
netartmedia car portalSQL injection vulnerability in the login feature in NetArt Media Car Portal 1.0 allows remote...CVE-2009-0395Public exploit7.5 HighFebruary 3, 2009
ple cms cmsSQL injection vulnerability in login.php in Pre Lecture Exercises (PLEs) CMS 1.0 beta 4.2 allows...CVE-2009-0394Public exploit7.5 HighFebruary 3, 2009
motorola cpei300Cross-site scripting (XSS) vulnerability in sysconf.cgi in Motorola Wimax modem CPEi300 allows...CVE-2009-0393Public exploit3.5 LowFebruary 3, 2009
motorola cpei300Directory traversal vulnerability in sysconf.cgi in Motorola Wimax modem CPEi300 allows remote...CVE-2009-0392Public exploit6.8 MediumFebruary 3, 2009
ibm websphere application serverUnspecified vulnerability in IBM WebSphere Application Server (WAS) 6.0.1 on z/OS allows...CVE-2009-03917.8 HighFebruary 2, 2009
enomaly elastic computing platformArgument injection vulnerability in Enomaly Elastic Computing Platform (ECP), formerly Enomalism,...CVE-2009-0390Public exploit7.2 HighFebruary 2, 2009
novell groupwiseMultiple cross-site scripting (XSS) vulnerabilities in Novell GroupWise WebAccess 6.5x, 7.0, 7.01...CVE-2009-02734.3 MediumFebruary 2, 2009
novell groupwiseCross-site request forgery (CSRF) vulnerability in Novell GroupWise WebAccess 6.5x, 7.0, 7.01, 7...CVE-2009-02726.8 MediumFebruary 2, 2009
enomaly elastic computing platformEnomaly Elastic Computing Platform (ECP), formerly Enomalism, before 2.1.1 allows local users to...CVE-2008-49906.9 MediumFebruary 2, 2009
eztools-software web on windows activexMultiple insecure method vulnerabilities in the Web On Windows (WOW) ActiveX control in WOW...CVE-2009-0389Public exploit9.3 HighFebruary 2, 2009
sun opensolaris, solaris +1 moreUnspecified vulnerability in the NFSv4 client module in the kernel on Sun Solaris 10 and...CVE-2008-60245.4 MediumFebruary 2, 2009
xnovaPHP remote file inclusion vulnerability in includes/todofleetcontrol.php in a newer version of...CVE-2008-6023Public exploit7.5 HighFebruary 2, 2009
xnovaPHP remote file inclusion vulnerability in includes/todofleetcontrol.php in an older version of...CVE-2008-6022Public exploit7.5 HighFebruary 2, 2009
attachmate reflection for secure itMultiple unspecified vulnerabilities in Attachmate Reflection for Secure IT UNIX Client and...CVE-2008-602110.0 HighFebruary 2, 2009
drupal viewsSQL injection vulnerability in the Views module 6.x before 6.x-2.2 for Drupal allows remote...CVE-2008-60207.5 HighFebruary 2, 2009
do-cmsSQL injection vulnerability in index.php in EACOMM DO-CMS 3.0 allows remote attackers to execute...CVE-2008-6019Public exploit7.5 HighFebruary 2, 2009
myphpsiteDirectory traversal vulnerability in index.php in MyPHPSite, when magic_quotes_gpc is disabled,...CVE-2008-6018Public exploit6.8 MediumFebruary 2, 2009
i-rater basicSQL injection vulnerability in messages.php in I-Rater Basic allows remote attackers to execute...CVE-2008-6017Public exploit7.5 HighFebruary 2, 2009
gstreamer good plug-ins, plug-ins +1 moreArray index error in the qtdemux_parse_samples function in gst/qtdemux/qtdemux.c in GStreamer...CVE-2009-03879.3 HighFebruary 2, 2009
gstreamer good plug-insHeap-based buffer overflow in the qtdemux_parse_samples function in gst/qtdemux/qtdemux.c in...CVE-2009-03869.3 HighFebruary 2, 2009
ffmpeg, canonical ubuntu linux, debian linux +1 more +3 moreInteger signedness error in the fourxm_read_header function in libavformat/4xm.c in FFmpeg before...CVE-2009-0385Fix available9.3 HighFebruary 2, 2009
adam tomecek ownrsSQL injection vulnerability in autor.php in OwnRS CMS 1.2 allows remote attackers to execute...CVE-2009-0384Public exploit6.8 MediumFebruary 2, 2009
mzbservices max.blogdelete.php in Max.Blog 1.0.6 does not properly restrict access, which allows remote attackers to...CVE-2009-0383Public exploit6.4 MediumFebruary 2, 2009
drupal internationalizationUnspecified vulnerability in Internationalization (i18n) Translation 5.x before 5.x-2.5, a module...CVE-2009-03824.3 MediumFebruary 2, 2009
bazaarbuilder ecommerce shopping cartSQL injection vulnerability in the BazaarBuilder Ecommerce Shopping Cart (com_prod) 5.0 component...CVE-2009-0381Public exploit7.5 HighFebruary 2, 2009
sigsiu.net sobi2** DISPUTED ** SQL injection vulnerability in the Sigsiu Online Business Index 2 (SOBI2,...CVE-2009-0380Public exploitDisputed7.5 HighFebruary 2, 2009
joomla com pcchessSQL injection vulnerability in the Prince Clan Chess Club (com_pcchess) component for Joomla!...CVE-2009-0379Public exploit7.5 HighFebruary 2, 2009
joomla com beamospetitionCross-site scripting (XSS) vulnerability in index.php in the beamospetition (com_beamospetition)...CVE-2009-0378Public exploit4.3 MediumFebruary 2, 2009
joomla com beamospetitionSQL injection vulnerability in the beamospetition (com_beamospetition) 1.0.12 component for...CVE-2009-0377Public exploit7.5 HighFebruary 2, 2009