CVEs published in March 2009
552 vulnerabilities, 91 critical, 2 exploited.
- curl, curl libcurl +1 moreThe redirect implementation in curl and libcurl 5.11 through 7.19.3, when CURLOPT_FOLLOWLOCATION...6.8 Medium
- sixapart movable typeUnspecified vulnerability in Movable Type Pro and Community Solution 4.x before 4.24 has unknown...10.0 High
- yawsYaws before 1.80 allows remote attackers to cause a denial of service (memory consumption and...5.0 Medium
- tombstone smnewsSQL injection vulnerability in login.php in the smNews example script for txtSQL 2.2 Final allows...7.5 High
- opensc-project openscOpenSC before 0.11.7 allows physically proximate attackers to bypass intended PIN requirements...2.1 Low
- optipng project optipng, opensuse, suse linux enterprise +2 moreUse-after-free vulnerability in the GIFReadNextExtension function in lib/pngxtern/gif/gifread.c...7.8 High
- 1scripts z1exchangeSQL injection vulnerability in showads.php in Z1Exchange allows remote attackers to execute...7.5 High
- nexusjnr jbookSQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL...7.5 High
- ocean12tech membership manager proSQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote...7.5 High
- aliensoftcorp rae media contact managementSQL injection vulnerability in asadmin/default.asp in Rae Media Contact Management Software SOHO,...7.5 High
- 4u2ges rapid classifiedRapid Classified 3.1 and 3.15 stores sensitive information under the web root with insufficient...5.0 Medium
- activewebsoftwares quick tree view .netQuick Tree View .NET 3.1 stores sensitive information under the web root with insufficient access...5.0 Medium
- 1scripts z1exchangeCross-site scripting (XSS) vulnerability in showads.php in Z1Exchange 1.0 allows remote attackers...4.3 Medium
- w3matter revsenseCross-site scripting (XSS) vulnerability in index.php in W3matter RevSense 1.0 allows remote...4.3 Medium
- drupal comment mailMultiple cross-site request forgery (CSRF) vulnerabilities in Comment Mail 5.x before 5.x-1.1, a...6.8 Medium
- drupal stormSQL injection vulnerability in SpeedTech Organization and Resource Manager (Storm) 5.x before 5.x...6.0 Medium
- aspportalASP Portal 3.2.5 stores sensitive information under the web root with insufficient access control...5.0 Medium
- bcoosSQL injection vulnerability in modules/adresses/viewcat.php in bcoos 1.0.13, and possibly earlier...4.6 Medium
- activewebsoftwares active web helpdeskSQL injection vulnerability in default.aspx in Active Web Helpdesk 2.0 allows remote attackers to...7.5 High
- mxmania gallery mxSQL injection vulnerability in pics_pre.asp in Gallery MX 2.0.0 allows remote attackers to...7.5 High
- mxmania calendar mx professionalSQL injection vulnerability in calendar_Eventupdate.asp in Calendar Mx Professional 2.0.0 allows...7.5 High
- phpbb-seo multi seo phpbbPHP remote file inclusion vulnerability in include/global.php in Multi SEO phpBB 1.1.0 allows...7.5 High
- nexusjnr jbookSQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL...7.5 High
- nexusjnr jbookJBook stores sensitive information under the web root with insufficient access control, which...5.0 Medium
- codefixer mailinglistproCodefixerSoftware MailingListPro Free Edition stores sensitive information under the web root...5.0 Medium
- nagiosUnspecified vulnerability in Nagios before 3.0.6 has unspecified impact and remote attack vectors...5.0 Medium
- ocean12tech faq manager proSQL injection vulnerability in default.asp in Ocean12 FAQ Manager Pro 1.0 allows remote attackers...7.5 High
- ocean12tech membership manager proSQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote...7.5 High
- ocean12tech contact manager proCross-site scripting (XSS) vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02...4.3 Medium
- ocean12tech contact manager proSQL injection vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows remote...7.5 High
- chipmunk scripts guestbookSQL injection vulnerability in index.php in Chipmunk Guestbook 1.4m allows remote attackers to...7.5 High
- socialgroupie social groupieUnrestricted file upload vulnerability in Photos/create_album.php in Social Groupie allows remote...8.5 High
- adserversolutions affiliate software javaSQL injection vulnerability in logon.jsp in Ad Server Solutions Affiliate Software Java 4.0...7.5 High
- adserversolutions ad management softwareSQL injection vulnerability in logon.jsp in Ad Server Solutions Ad Management Software Java...7.5 High
- adserversolutions banner exchange softwareSQL injection vulnerability in logon_process.jsp in Ad Server Solutions Banner Exchange Solution...7.5 High
- capilano designworksStack-based buffer overflow in DesignWorks Professional 4.3.1 and 5.0.7 allows remote attackers...9.3 High
- ezonelink multiple membership scriptSQL injection vulnerability in sitepage.php in Multiple Membership Script 2.5 allows remote...7.5 High
- insun podcast feedcmsDirectory traversal vulnerability in index.php in InSun Feed CMS 1.7.3 19Beta allows remote...6.8 Medium
- impresscmsCross-site scripting (XSS) vulnerability in the userranks feature in modules/system/admin.php in...4.3 Medium
- phpf1 max\'s guestbookCross-site scripting (XSS) vulnerability in index.php in Max's Guestbook allows remote attackers...4.3 Medium
- socialgroupie social groupieSQL injection vulnerability in group_index.php in Social Groupie allows remote attackers to...7.5 High
- donnafontenot mycal personal events calendarMyCal Personal Events Calendar stores sensitive information under the web root with insufficient...5.0 Medium
- donnafontenot evcal events calendarevCal Events Calendar stores sensitive information under the web root with insufficient access...5.0 Medium
- thenetguys aspired2protectThe Net Guys ASPired2Protect stores sensitive information under the web root with insufficient...5.0 Medium
- thenetguys aspired2pollThe Net Guys ASPired2poll stores sensitive information under the web root with insufficient...5.0 Medium
- asp-cmsSQL injection vulnerability in index.asp in ASP-CMS 1.0 allows remote attackers to execute...7.5 High
- xpoze proSQL injection vulnerability in home.html in Xpoze Pro 4.10 allows remote attackers to execute...7.5 High
- turnkeyforms local classifiedsCross-site scripting (XSS) vulnerability in listtest.php in TurnkeyForms Local Classifieds allows...4.3 Medium
- turnkeyforms local classifiedsSQL injection vulnerability in listtest.php in TurnkeyForms Local Classifieds allows remote...7.5 High
- turnkeyforms business survey proSQL injection vulnerability in survey_results_text.php in TurnkeyForms Business Survey Pro 1.0...7.5 High
- Show moreLoading…