Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2009
February

CVEs published in February 2009

686 vulnerabilities, 76 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

ex-designs world recipeMultiple cross-site scripting (XSS) vulnerabilities in World Recipe 2.11 allow remote attackers...CVE-2008-60564.3 MediumFebruary 4, 2009
preprojects pre classified listingsPreProjects Pre Classified Listings stores pclasp.mdb under the web root with insufficient access...CVE-2008-60555.0 MediumFebruary 4, 2009
preprojects.com pre courier and cargo businessPreProjects Pre Courier and Cargo Business stores dbcourior.mdb under the web root with...CVE-2008-60545.0 MediumFebruary 4, 2009
preprojects pre resume submitterPreProjects Pre Resume Submitter stores onlineresume.mdb under the web root with insufficient...CVE-2008-60535.0 MediumFebruary 4, 2009
preprojects pre e-learning portalPreProjects Pre E-Learning Portal stores db_elearning.mdb under the web root with insufficient...CVE-2008-60525.0 MediumFebruary 4, 2009
metalinks metacartMetaCart Free stores metacart.mdb under the web root with insufficient access control, which...CVE-2008-60515.0 MediumFebruary 4, 2009
ircmaxell tech articleSQL injection vulnerability in the Tech Articles (com_tech_article) 1.0 component for Joomla!...CVE-2008-6050Public exploit7.5 HighFebruary 4, 2009
tangocmsMultiple cross-site request forgery (CSRF) vulnerabilities in TangoCMS before 2.2.0 allow remote...CVE-2008-60486.0 MediumFebruary 4, 2009
adbnewssenderCross-site scripting (XSS) vulnerability in ADbNewsSender before 1.5.2 allows remote attackers to...CVE-2008-60474.3 MediumFebruary 4, 2009
adbnewssender project adbnewssenderSQL injection vulnerability in ADbNewsSender before 1.5.2 allows remote attackers to execute...CVE-2008-60467.5 HighFebruary 4, 2009
standards based linux instrumentation sblim-sfcbThe SSL certificate setup program (genSslCert.sh) in Standards Based Linux Instrumentation for...CVE-2009-04166.9 MediumFebruary 3, 2009
monkey trickleUntrusted search path vulnerability in trickle 1.07 allows local users to execute arbitrary code...CVE-2009-0415Fix available3.7 LowFebruary 3, 2009
torUnspecified vulnerability in Tor before 0.2.0.33 has unspecified impact and remote attack vectors...CVE-2009-0414Fix available10.0 HighFebruary 3, 2009
roundcube webmailCross-site scripting (XSS) vulnerability in RoundCube Webmail (roundcubemail) 0.2 stable allows...CVE-2009-0413Fix available4.3 MediumFebruary 3, 2009
interspire shopping cartThe ProcessLogin function in class.auth.php in Interspire Shopping Cart (ISC) 4.0.1 Ultimate...CVE-2009-04127.5 HighFebruary 3, 2009
google chromeGoogle Chrome before 1.0.154.46 does not properly restrict access from web pages to the (1) Set...CVE-2009-04115.0 MediumFebruary 3, 2009
novell groupwiseOff-by-one error in the SMTP daemon in GroupWise Internet Agent (GWIA) in Novell GroupWise 6.5x,...CVE-2009-0410Public exploit10.0 HighFebruary 3, 2009
mzbservices max.blogSQL injection vulnerability in offline_auth.php in Max.Blog 1.0.6 and earlier, when...CVE-2009-0409Public exploit6.8 MediumFebruary 3, 2009
oscommerceCross-site request forgery (CSRF) vulnerability in osCommerce 2.2 RC 2a allows remote attackers...CVE-2009-04086.0 MediumFebruary 3, 2009
humayun shabbir php-cms projectSQL injection vulnerability in admin/login.php in PHP-CMS Project 1 allows remote attackers to...CVE-2009-0407Public exploit7.5 HighFebruary 3, 2009
community cms cmsSQL injection vulnerability in index.php in Community CMS 0.4 and earlier allows remote attackers...CVE-2009-0406Public exploit7.5 HighFebruary 3, 2009
smartsitecmsSQL injection vulnerability in articles.php in smartSite CMS 1.0 allows remote attackers to...CVE-2009-0405Public exploit7.5 HighFebruary 3, 2009
bioinformatics htmlawedMultiple cross-site scripting (XSS) vulnerabilities in Bioinformatics htmLawed 1.1.3 and 1.1.4...CVE-2009-04044.3 MediumFebruary 3, 2009
chipmunk scripts bloggerSQL injection vulnerability in admin/authenticate.php in Chipmunk Blogger Script allows remote...CVE-2009-0403Public exploit7.5 HighFebruary 3, 2009
gplhost domain technologie controlSQL injection vulnerability in client/new_account.php in Domain Technologie Control (DTC) before...CVE-2009-04027.5 HighFebruary 3, 2009
ephpscripts e-php cmsSQL injection vulnerability in browsecats.php in E-Php CMS allows remote attackers to execute...CVE-2009-04017.5 HighFebruary 3, 2009
socialengineSQL injection vulnerability in blog.php in SocialEngine 3.06 trial allows remote attackers to...CVE-2009-0400Public exploit6.8 MediumFebruary 3, 2009
chipmunk scripts bloggerChipmunk Blogger Script allows remote attackers to gain administrator privileges via a direct...CVE-2009-0399Public exploit7.5 HighFebruary 3, 2009
google chromeCross-domain vulnerability in the V8 JavaScript engine in Google Chrome before 1.0.154.46 allows...CVE-2009-02765.0 MediumFebruary 3, 2009
novell groupwiseUnspecified vulnerability in WebAccess in Novell GroupWise 6.5, 7.0, 7.01, 7.02x, 7.03, 7.03HP1a,...CVE-2009-02745.0 MediumFebruary 3, 2009
free download manager download managerMultiple buffer overflows in the torrent parsing implementation in Free Download Manager (FDM) 2...CVE-2009-0184Public exploitEPSS 27.8%9.3 HighFebruary 3, 2009
free download manager download managerStack-based buffer overflow in Remote Control Server in Free Download Manager (FDM) 2.5 Build 758...CVE-2009-0183Public exploitEPSS 66.5%10.0 HighFebruary 3, 2009
vmware esx, esxi +1 moreUnspecified vulnerability in VMware ESXi 3.5 before ESXe350-200901401-I-SG and ESX 3.5 before...CVE-2008-49144.7 MediumFebruary 3, 2009
gstreamer plug-insArray index error in the gst_qtp_trak_handler function in gst/qtdemux/qtdemux.c in GStreamer Plug...CVE-2009-0398Fix available9.3 HighFebruary 3, 2009
gstreamer good plug-ins, plug-ins +1 moreHeap-based buffer overflow in the qtdemux_parse_samples function in gst/qtdemux/qtdemux.c in...CVE-2009-0397Fix available9.3 HighFebruary 3, 2009
xt-commerceSession fixation vulnerability in shopping_cart.php in xt:Commerce 3.0.4 and earlier allows...CVE-2008-6045Public exploit6.8 MediumFebruary 3, 2009
xt-commerceCross-site scripting (XSS) vulnerability in advanced_search_result.php in xt:Commerce 3.0.4 and...CVE-2008-6044Public exploit4.3 MediumFebruary 3, 2009
phpprobid php pro bidMultiple SQL injection vulnerabilities in PHP Pro Bid (PPB) 6.04 allow remote attackers to...CVE-2008-6043Public exploit7.5 HighFebruary 3, 2009
netartmedia real estate portalSQL injection vulnerability in the re_search module in NetArtMedia Real Estate Portal 2.0 allows...CVE-2008-6042Public exploit7.5 HighFebruary 3, 2009
dataspadeMultiple cross-site scripting (XSS) vulnerabilities in Index.asp in Dataspade 1.0 allow remote...CVE-2008-60414.3 MediumFebruary 3, 2009
agares media arcadem proSQL injection vulnerability in index.php in Arcadem Pro 2.700 through 2.802 allows remote...CVE-2008-60407.5 HighFebruary 3, 2009
iss-oberlausitz bluepage cmsSession fixation vulnerability in BLUEPAGE CMS 2.5 and earlier allows remote attackers to hijack...CVE-2008-6039Public exploit6.8 MediumFebruary 3, 2009
mapcalSQL injection vulnerability in index.php in MapCal 0.1 allows remote attackers to execute...CVE-2008-6038Public exploit7.5 HighFebruary 3, 2009
availscript article scriptSQL injection vulnerability in view.php in AvailScript Article Script allows remote attackers to...CVE-2008-6037Public exploit7.5 HighFebruary 3, 2009
basebuilderPHP remote file inclusion vulnerability in main.inc.php in BaseBuilder 2.0.1 and earlier allows...CVE-2008-6036Public exploit7.5 HighFebruary 3, 2009
achievoCross-site scripting (XSS) vulnerability in dispatch.php in Achievo 1.3.2-STABLE allows remote...CVE-2008-60354.3 MediumFebruary 3, 2009
achievoCross-site scripting (XSS) vulnerability in dispatch.php in Achievo 1.3.2 allows remote attackers...CVE-2008-6034Public exploit4.3 MediumFebruary 3, 2009
wsn links linksSQL injection vulnerability in comments.php in WSN Links 2.20 allows remote attackers to execute...CVE-2008-6033Public exploit7.5 HighFebruary 3, 2009
wsn linksSQL injection vulnerability in comments.php in WSN Links Free 4.0.34P allows remote attackers to...CVE-2008-6032Public exploit7.5 HighFebruary 3, 2009
wsn links linksSQL injection vulnerability in vote.php in WSN Links 2.22 and 2.23 allows remote attackers to...CVE-2008-6031Public exploit7.5 HighFebruary 3, 2009
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open