CVEs published in February 2009
686 vulnerabilities, 76 critical, 1 exploited.
- rakhisoftware shopping cartSQL injection vulnerability in product.php in RakhiSoftware Price Comparison Script (aka Shopping...7.5 High
- drupal user karma moduleMultiple SQL injection vulnerabilities in the User Karma module 5.x before 5.x-1.13 and 6.x...6.5 Medium
- drupal user karma moduleCross-site scripting (XSS) vulnerability in the User Karma module 5.x before 5.x-1.13 and 6.x...4.3 Medium
- mjcreation familyprojectMultiple SQL injection vulnerabilities in index.php in FamilyProject 2.0 allow remote attackers...6.8 Medium
- craftsilicon banking\@homeSQL injection vulnerability in Login.asp in Craft Silicon Banking@Home 2.1 and earlier allows...7.5 High
- frankmancuso bluebirdSQL injection vulnerability in login.php in BlueBird Prelease allows remote attackers to execute...7.5 High
- frankmancuso mynewsSQL injection vulnerability in login.php in MyNews 0.10 allows remote attackers to execute...7.5 High
- frankmancuso auth phpSQL injection vulnerability in login.php in Auth Php 1.0 allows remote attackers to execute...7.5 High
- mediawikiMultiple cross-site scripting (XSS) vulnerabilities in the web-based installer (config/index.php)...2.6 Low
- simon brown pebbleCross-site scripting (XSS) vulnerability in Pebble before 2.3.2 allows remote attackers to inject...4.3 Medium
- papooDirectory traversal vulnerability in lib/classes/message_class.php in Papoo CMS 3.6, when...5.1 Medium
- nokia pc suiteHeap-based buffer overflow in MultimediaPlayer.exe 6.86.240.7 in Nokia PC Suite 6.86.9.3 allows...9.3 High
- magentocommerc magentoMultiple cross-site scripting (XSS) vulnerabilities in Magento 1.2.0 and 1.2.1.1 allow remote...4.3 Medium
- insightinformatics liberoCross-site scripting (XSS) vulnerability in Libero 5.3 SP5, and possibly other versions before 5...4.3 Medium
- ibm websphere application serverUnspecified vulnerability in IBM WebSphere Application Server (WAS) 5.1 and 6.0.2 before 6.0.2.33...6.2 Medium
- ibm txseriesThe CICS listener in IBM TXSeries for Multiplatforms 6.2 GA waits for a forcepurge...9.0 High
- microsoft excel, excel viewer, office +2 more +4 moreMicrosoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1; Excel Viewer 2003 Gold and SP3...9.3 High
- myktoolsDirectory traversal vulnerability in configuration_script.php in MyKtools 3.0 allows remote...6.0 Medium
- miticdjd apollSQL injection vulnerability in admin/index.php in Dragan Mitic Apoll 0.7 beta and 0.7.5 allows...7.5 High
- tbmnet tbmnetcmsDirectory traversal vulnerability in index.php in TBmnetCMS 1.0, when magic_quotes_gpc is...6.8 Medium
- miticdjd apollSQL injection vulnerability in admin/index.php in Dragan Mitic Apoll 0.7 beta and 0.7.5 allows...7.5 High
- jooviliJoovili 3.1.4 allows remote attackers to bypass authentication and gain privileges as other users...7.5 High
- sadi samami multi languages webshop onlineSQL injection vulnerability in detail.php in WEBBDOMAIN Multi Languages WebShop Online 1.02...7.5 High
- sadi samami multi languages webshop onlineCross-site scripting (XSS) vulnerability in detail.php in Multi Languages WebShop Online 1.02...4.3 Medium
- appstate phpwebsiteSQL injection vulnerability in links.php in Appalachian State University phpWebSite allows remote...7.5 High
- lingx downloadcenterDownloadcenter 2.1 stores common.h under the web root with insufficient access control, which...5.0 Medium
- freearcadescript free arcade scriptDirectory traversal vulnerability in pages/play.php in Free Arcade Script 1.0 allows remote...9.3 High
- gigcalendar com gigcalendarMultiple SQL injection vulnerabilities in the GigCalendar (com_gigcal) component 1.0 for Mambo...6.8 Medium
- lingx page engine cmsMultiple directory traversal vulnerabilities in Page Engine CMS 2.0 Basic and Pro allow remote...6.8 Medium
- maxdev my egallerySQL injection vulnerability in the My_eGallery module for MAXdev MDPro (MD-Pro) and Postnuke...7.5 High
- tony iha kazungu taifajobsSQL injection vulnerability in jobdetails.php in taifajobs 1.0 and earlier allows remote...7.5 High
- gigcalendar com gigcalendarSQL injection vulnerability in the GigCalendar (com_gigcal) component 1.0 for Mambo and Joomla!...7.5 High
- potato-scripts potato newsDirectory traversal vulnerability in admin.php in Potato News 1.0.0 allows remote attackers to...7.5 High
- cyberfolioDirectory traversal vulnerability in portfolio/css.php in Cyberfolio 7.12.2 and earlier allows...6.8 Medium
- e-topbiz slide popupsSQL injection vulnerability in admin/admin.php in E-topbiz Slide Popups 1.0 allows remote...7.5 High
- infireal saturncmsSQL injection vulnerability in lib/user/t_user.php in SaturnCMS allows remote attackers to...7.5 High
- infireal saturncmsSQL injection vulnerability in lib/url/meta_url.php in SaturnCMS allows remote attackers to...7.5 High
- e-topbiz admanagerSQL injection vulnerability in view.php in E-topbiz AdManager 4 allows remote attackers to...7.5 High
- ultrastatsSQL injection vulnerability in index.php in Ultrastats 0.2.144 and 0.3.11 allows remote attackers...7.5 High
- quadcomm q-shopCross-site scripting (XSS) vulnerability in search.asp in QuadComm Q-Shop 3.0, and possibly...4.3 Medium
- quadcomm q-shopSQL injection vulnerability in users.asp in QuadComm Q-Shop 3.0, and possibly earlier, allows...7.5 High
- openaspSQL injection vulnerability in default.asp in Openasp 3.0 and earlier allows remote attackers to...7.5 High
- vbulletinSQL injection vulnerability in admincp/admincalendar.php in vBulletin 3.7.3.pl1 allows remote...6.5 Medium
- vbulletinMultiple SQL injection vulnerabilities in vBulletin 3.7.4 allow remote authenticated...6.5 Medium
- jadu galaxiesSQL injection vulnerability in scripts/documents.php in Jadu Galaxies allows remote attackers to...7.5 High
- pluck-cms pluckDirectory traversal vulnerability in data/inc/lib/pcltar.lib.php in Pluck 4.5.3, when...6.8 Medium
- smcfancontrolStack-based buffer overflow in the smc program in smcFanControl 2.1.2 allows local users to...7.2 High
- scripts phpfanPHP remote file inclusion vulnerability in includes/init.php in phpFan 3.3.4 allows remote...6.8 Medium
- ibm websphere mqUnspecified vulnerability in the queue manager in IBM WebSphere MQ (WMQ) 5.3, 6.0 before 6.0.2.6,...7.2 High
- hp mercury quality center, testdirector +1 moreHP Mercury Quality Center (QC) 9.2 and earlier, and possibly TestDirector, relies on cached...7.6 High
- Show moreLoading…