Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2009
February

CVEs published in February 2009

686 vulnerabilities, 76 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

comdev web bloggerSQL injection vulnerability in Comdev Web Blogger 4.1.3 and earlier allows remote attackers to...CVE-2008-6250Public exploit6.8 MediumFebruary 23, 2009
gwm galatolo webmanagerSQL injection vulnerability in plugins/users/index.php in Galatolo WebManager 1.3a and earlier...CVE-2008-6249Public exploit7.5 HighFebruary 23, 2009
galatolo webmanagerCross-site scripting (XSS) vulnerability in all.php in Galatolo WebManager 1.3a and earlier...CVE-2008-6248Public exploit4.3 MediumFebruary 23, 2009
scripts-for-sites ez top sitesSQL injection vulnerability in topsite.php in Scripts For Sites (SFS) EZ Top Sites allows remote...CVE-2008-6247Public exploit7.5 HighFebruary 23, 2009
scripts-for-sites ez webringSQL injection vulnerability in category.php in Scripts For Sites (SFS) EZ Webring allows remote...CVE-2008-6246Public exploit7.5 HighFebruary 23, 2009
scripts-for-sites ez biz proSQL injection vulnerability in track.php in Scripts For Sites (SFS) EZ BIZ PRO allows remote...CVE-2008-6245Public exploit7.5 HighFebruary 23, 2009
scripts-for-sites ez gaming cheatsSQL injection vulnerability in view_reviews.php in Scripts for Sites (SFS) EZ Gaming Cheats...CVE-2008-6244Public exploit7.5 HighFebruary 23, 2009
scripts for sites ez hotscripts-likesiteSQL injection vulnerability in showcategory.php in Scripts For Sites (SFS) Hotscripts-like Site...CVE-2008-6243Public exploit7.5 HighFebruary 23, 2009
scripts-for-sites ez e-storeSQL injection vulnerability in SearchResults.php in Scripts For Sites (SFS) EZ e-store allows...CVE-2008-6242Public exploit7.5 HighFebruary 23, 2009
vlad alexa mancini phpfootballfilter.php in PHPFootball 1.6 and earlier allows remote attackers to retrieve password hashes via...CVE-2009-0711Public exploit5.0 MediumFebruary 23, 2009
vlad alexa mancini phpfootballMultiple cross-site scripting (XSS) vulnerabilities in PHPFootball 1.6 allow remote attackers to...CVE-2009-0710Public exploit4.3 MediumFebruary 23, 2009
vlad alexa mancini phpfootballSQL injection vulnerability in login.php in PHPFootball 1.6 allows remote attackers to execute...CVE-2009-0709Public exploit7.5 HighFebruary 23, 2009
semanticscuttleMultiple cross-site request forgery (CSRF) vulnerabilities in SemanticScuttle before 0.91 allow...CVE-2009-07086.8 MediumFebruary 23, 2009
powerscripts powerclanSQL injection vulnerability in admin/index.php in PowerClan 1.14a allows remote attackers to...CVE-2009-0707Public exploit7.5 HighFebruary 23, 2009
simple-review com simple reviewSQL injection vulnerability in the Simple Review (com_simple_review) component 1.3.5 for Joomla!...CVE-2009-07067.5 HighFebruary 23, 2009
powerscripts powernewsSQL injection vulnerability in news.php in PowerScripts PowerNews 2.5.4, when magic_quotes_gpc is...CVE-2009-0705Public exploit6.8 MediumFebruary 23, 2009
webmastersite wsn guestSQL injection vulnerability in search.php in WSN Guest 1.23 allows remote attackers to execute...CVE-2009-0704Public exploit7.5 HighFebruary 23, 2009
aspthai.net webboardSQL injection vulnerability in bview.asp in ASPThai.Net Webboard 6.0 allows remote attackers to...CVE-2009-0703Public exploit7.5 HighFebruary 23, 2009
phoca com phocadocumentationSQL injection vulnerability in the Phoca Documentation (com_phocadocumentation) component for...CVE-2009-0702Public exploit7.5 HighFebruary 23, 2009
cybershade cybershadecmsMultiple PHP remote file inclusion vulnerabilities in index.php in Cybershade CMS 0.2b, when...CVE-2009-0701Public exploit6.8 MediumFebruary 23, 2009
plunet business managerPlunet BusinessManager 4.1 and earlier allows remote authenticated users to bypass access...CVE-2009-0700Public exploit4.0 MediumFebruary 23, 2009
plunet business managerCross-site scripting (XSS) vulnerability in pagesUTF8/auftrag_allgemeinauftrag.jsp in Plunet...CVE-2009-0699Public exploit3.5 LowFebruary 23, 2009
xine xine-libInteger overflow in the 4xm demuxer (demuxers/demux_4xm.c) in xine-lib 1.1.16.1 allows remote...CVE-2009-06987.5 HighFebruary 23, 2009
china-on-site flexphpsiteMultiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPSite 0.0.1 and 0.0.7,...CVE-2008-6241Public exploit6.8 MediumFebruary 23, 2009
openedit digital asset managementCross-site scripting (XSS) vulnerability in data/views/index.html in OpenEdit Digital Asset...CVE-2008-62404.3 MediumFebruary 23, 2009
openedit digital asset managementCross-site request forgery (CSRF) vulnerability in OpenEdit Digital Asset Management (DAM) before...CVE-2008-62396.8 MediumFebruary 23, 2009
openedit digital asset managementCross-site scripting (XSS) vulnerability in archive/savedqueries/savequeryfinish.html in OpenEdit...CVE-2008-62384.3 MediumFebruary 23, 2009
scripts-for-sites hotscripts-like siteSQL injection vulnerability in software-description.php in Scripts For Sites (SFS) Hotscripts...CVE-2008-6237Public exploit7.5 HighFebruary 23, 2009
netgear ssl312cgi-bin/welcome/VPN_only in the web interface in Netgear SSL312 allows remote attackers to cause...CVE-2009-0680Public exploit7.8 HighFebruary 22, 2009
ravenphpscripts ravennukeCross-site scripting (XSS) vulnerability in the Your Account module in RavenNuke 2.30 allows...CVE-2009-06794.3 MediumFebruary 22, 2009
ravenphpscripts ravennukeimages/captcha.php in RavenNuke 2.30 allows remote attackers to obtain sensitive information via...CVE-2009-0678Public exploit5.0 MediumFebruary 22, 2009
ravenphpscripts ravennukeavatarlist.php in the Your Account module, reached through modules.php, in Raven Web Services...CVE-2009-0677Public exploit6.5 MediumFebruary 22, 2009
linux kernelThe sock_getsockopt function in net/core/sock.c in the Linux kernel before 2.6.28.6 does not...CVE-2009-0676Public exploit2.1 LowFebruary 22, 2009
linux kernelThe skfp_ioctl function in drivers/net/skfp/skfddi.c in the Linux kernel before 2.6.28.6 permits...CVE-2009-06752.1 LowFebruary 22, 2009
ravenphpscripts ravennukeimages/captcha.php in Raven Web Services RavenNuke 2.30, when register_globals and display_errors...CVE-2009-0674Public exploit6.0 MediumFebruary 22, 2009
ravenphpscripts ravennukeEval injection vulnerability in the Custom Fields feature in the Your Account module in Raven Web...CVE-2009-0673Public exploit6.5 MediumFebruary 22, 2009
ravenphpscripts ravennukeSQL injection vulnerability in the Resend_Email module in Raven Web Services RavenNuke 2.30...CVE-2009-0672Public exploit6.5 MediumFebruary 22, 2009
ibm websphere partner gatewayIBM WebSphere Partner Gateway (WPG) 6.0.0 through 6.0.0.7 does not properly handle failures of...CVE-2009-04406.5 MediumFebruary 22, 2009
libpng, apple iphone os, mac os x +6 more +8 moreThe PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in...CVE-2009-0040Fix available6.8 MediumFebruary 22, 2009
cafuego simple document management systemSQL injection vulnerability in login.php in Simple Document Management System (SDMS) 1.1.5 and 1...CVE-2008-6236Public exploit7.5 HighFebruary 21, 2009
vimThe Netrw plugin (netrw.vim) in Vim 7.0 and 7.1 allows user-assisted attackers to execute...CVE-2008-6235Fix available9.3 HighFebruary 21, 2009
vimThe Netrw plugin 125 in netrw.vim in Vim 7.2a.10 allows user-assisted attackers to execute...CVE-2008-3076Public exploitFix available9.3 HighFebruary 21, 2009
vim, vim zipplugin.vim +1 moreThe shellescape function in Vim 7.0 through 7.2, including 7.2a.10, allows user-assisted...CVE-2008-3075Fix available9.3 HighFebruary 21, 2009
vim tar.vim, vim +1 moreThe shellescape function in Vim 7.0 through 7.2, including 7.2a.10, allows user-assisted...CVE-2008-3074Fix available9.3 HighFebruary 21, 2009
joomla com musicaSQL injection vulnerability in the com_musica module in Joomla! and Mambo allows remote attackers...CVE-2008-6234Public exploit7.5 HighFebruary 21, 2009
fivedollarscripts drinksSQL injection vulnerability in index.php in Five Dollar Scripts Drinks script allows remote...CVE-2008-6233Public exploit7.5 HighFebruary 20, 2009
preprojects pre shopping mallPre Shopping Mall allows remote attackers to bypass authentication and gain administrative access...CVE-2008-6232Public exploit7.5 HighFebruary 20, 2009
preprojects pre classified listingsPre Classified Listing PHP allows remote attackers to bypass authentication and gain...CVE-2008-6231Public exploit7.5 HighFebruary 20, 2009
preprojects pre podcast portalSQL injection vulnerability in Tour.php in Pre Projects Pre Podcast Portal allows remote...CVE-2008-6230Public exploit7.5 HighFebruary 20, 2009
drupal content construction kitCross-site scripting (XSS) vulnerability in the administrative interface in Drupal Content...CVE-2008-62293.5 LowFebruary 20, 2009
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open