CVEs published in March 2009
552 vulnerabilities, 91 critical, 2 exploited.
- blueriver sava cmsSQL injection vulnerability in index.cfm in Blue River Interactive Group Sava CMS before 5.0.122...7.5 High
- blueriver sava cmsCross-site scripting (XSS) vulnerability in index.cfm in Blue River Interactive Group Sava CMS...4.3 Medium
- bmforumMultiple cross-site scripting (XSS) vulnerabilities in BMForum 5.6 allow remote attackers to...4.3 Medium
- joomla com mycontentSQL injection vulnerability in the MyContent (com_mycontent) component 1.1.13 for Joomla! allows...7.5 High
- mike leeper com prayercenterSQL injection vulnerability in the PrayerCenter (com_prayercenter) component 1.4.9 and earlier...7.5 High
- kayalang kayaThe CGI framework in Kaya 0.4.0 allows remote attackers to inject arbitrary HTTP headers and...4.3 Medium
- hivemakerSQL injection vulnerability in index.php in Hivemaker Professional 1.0.2 and earlier, when...6.8 Medium
- comicshoutSQL injection vulnerability in news.php in ComicShout 2.8 allows remote attackers to execute...7.5 High
- jun sota ffftpDirectory traversal vulnerability in FFFTP 1.96b allows remote FTP servers to create or overwrite...8.8 High
- i-apps passwikiDirectory traversal vulnerability in passwiki.php in PassWiki 0.9.16 RC3 and earlier allows...5.0 Medium
- psychostatsMultiple SQL injection vulnerabilities in PsychoStats 2.3, 2.3.1, and 2.3.3 allow remote...7.5 High
- socialsitegenerator social site generatorPHP remote file inclusion vulnerability in social_game_play.php in Social Site Generator (SSG) 2...7.5 High
- socialsitegenerator social site generatorSocial Site Generator (SSG) 2.0 allows remote attackers to read arbitrary files via the file...5.0 Medium
- socialsitegenerator social site generatorMultiple SQL injection vulnerabilities in Social Site Generator (SSG) 2.0 allow remote attackers...7.5 High
- torrenttraderSQL injection vulnerability in scrape.php in TorrentTrader before 2008-05-13 allows remote...7.5 High
- greensql greensql-consoleUnspecified vulnerability in GreenSQL-Console before 0.3.5 allows attackers to obtain the ...5.0 Medium
- greensql greensql-consoleMultiple cross-site scripting (XSS) vulnerabilities in GreenSQL-Console before 0.3.5 allow remote...4.3 Medium
- linux kernelThe __secure_computing function in kernel/seccomp.c in the seccomp subsystem in the Linux kernel...3.6 Low
- debian linux, linux kernel, canonical ubuntu linux +9 more +11 moreThe audit_syscall_entry function in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform...3.6 Low
- youngzsoft ccproxyBuffer overflow in YoungZSoft CCProxy 6.5 might allow remote attackers to execute arbitrary code...10.0 High
- aj square auctionSQL injection vulnerability in detail.php in AJ Auction Pro Platinum Skin 2 allows remote...7.5 High
- ticklespace answers moduleCross-site scripting (XSS) vulnerability in the Answers module 5.x-1.x-dev and possibly other 5.x...4.3 Medium
- vignette content managementUnspecified vulnerability in Vignette Content Management 7.3.0.5, 7.3.1, 7.3.1.1, 7.4, and 7.5...7.5 High
- explay cmsExplay CMS 2.1 and earlier allows remote attackers to bypass authentication and gain...7.5 High
- brian wilson ol\'bookmarksDirectory traversal vulnerability in show.php in ol'bookmarks manager 0.7.5 and earlier allows...7.5 High
- brian wilson ol\'bookmarksSQL injection vulnerability in index.php in ol'bookmarks manager 0.7.5 allows remote attackers to...7.5 High
- brian wilson ol\'bookmarksPHP remote file inclusion vulnerability in frame.php in ol'bookmarks manager 0.7.5 allows remote...7.5 High
- brian wilson ol\'bookmarksDirectory traversal vulnerability in frame.php in ol'bookmarks manager 0.7.5 allows remote...7.5 High
- datalifecms datalife engineCross-site scripting (XSS) vulnerability in admin.php in DataLife Engine (DLE) 7.2 allows remote...4.3 Medium
- greatclone hotscripts cloneSQL injection vulnerability in showcategory.php in Hotscripts Clone allows remote attackers to...7.5 High
- extrosoft thymeCross-site scripting (XSS) vulnerability in add_calendars.php in eXtrovert Software Thyme 1.3...4.3 Medium
- openratPHP remote file inclusion vulnerability in themes/default/include/html/insert.inc.php in OpenRat...7.5 High
- muskatli sofi webguiPHP remote file inclusion vulnerability in hu/modules/reg-new/modstart.php in Sofi WebGui 0.6.3...7.5 High
- jetik jetik-webSQL injection vulnerability in sayfa.php in JETIK-WEB allows remote attackers to execute...7.5 High
- myplugins gen msnHeap-based buffer overflow in gen_msn.dll in the gen_msn plugin 0.31 for Winamp 5.541 allows...9.3 High
- ausimods e-cartSQL injection vulnerability in items.php in the E-Cart module 1.3 for PHP-Fusion allows remote...7.5 High
- php-fusion members cv moduleSQL injection vulnerability in members.php in the Members CV (job) module 1.0 for PHP-Fusion,...6.0 Medium
- andrew freed quotebookCross-site scripting (XSS) vulnerability in QuoteBook allows remote attackers to inject arbitrary...4.3 Medium
- andrew freed quotebookMultiple SQL injection vulnerabilities in QuoteBook allow remote attackers to execute arbitrary...7.5 High
- freedville quotebookQuoteBook stores quotes.inc under the web root with insufficient access control, which allows...5.0 Medium
- freedville pollhelperPollHelper stores poll.inc under the web root with insufficient access control, which allows...5.0 Medium
- freedville bloghelperBlogHelper stores common_db.inc under the web root with insufficient access control, which allows...5.0 Medium
- refbaseCross-site scripting (XSS) vulnerability in refbase before 0.9.5 allows remote attackers to...4.3 Medium
- dnnsoftware dotnetnukeUnspecified vulnerability in DotNetNuke 4.5.2 through 4.9 allows remote attackers to "add...6.4 Medium
- mozilla firefoxMozilla Firefox 2.0.0.20 and earlier allows remote attackers to cause a denial of service ...5.0 Medium
- php.brickhost phpscheduleitMultiple eval injection vulnerabilities in phpScheduleIt before 1.2.11 allow remote attackers to...7.5 High
- mysqlsql/item_xmlfunc.cc in MySQL 5.1 before 5.1.32 and 6.0 before 6.0.10 allows remote authenticated...4.0 Medium
- drupal taxonomy theme moduleCross-site scripting (XSS) vulnerability in the taxonomy_theme_admin_table_builder function ...3.5 Low
- drupal protected node moduleCross-site scripting (XSS) vulnerability in the Protected Node module 5.x before 5.x-1.4 and 6.x...3.5 Low
- blogsaCross-site scripting (XSS) vulnerability in Widgets.aspx in Blogsa 1.0 Beta 3 and earlier allows...4.3 Medium
- Show moreLoading…