CVEs published in March 2009
552 vulnerabilities, 91 critical, 2 exploited.
- yabsoft advanced image hosting scriptSQL injection vulnerability in gallery_list.php in YABSoft Advanced Image Hosting (AIH) Script 2...7.5 High
- prestashopMultiple cross-site scripting (XSS) vulnerabilities in PrestaShop 1.1.0.3 allow remote attackers...4.3 Medium
- prochatrooms pro chat roomsDirectory traversal vulnerability in Pro Chat Rooms 3.0.2 allows remote authenticated users to...4.6 Medium
- prochatrooms pro chat roomsCross-site scripting (XSS) vulnerability in profiles/index.php in Pro Chat Rooms 3.0.2 allows...4.3 Medium
- codetoad asp shopping cart scriptCross-site scripting (XSS) vulnerability in CodeToad ASP Shopping Cart Script allows remote...4.3 Medium
- solarwinds serv-u file serverDirectory traversal vulnerability in the FTP server in Rhino Software Serv-U File Server 7.0.0.1...7.8 High
- wordpress muCross-site scripting (XSS) vulnerability in the choose_primary_blog function in wp-includes/wpmu...4.3 Medium
- poppeeper pop peeperStack-based buffer overflow in POP Peeper 3.4.0.0 and earlier allows remote POP3 servers to...9.3 High
- edisys ezip wizardStack-based buffer overflow in ediSys eZip Wizard 3.0 allows remote attackers to execute...9.3 High
- opencartSQL injection vulnerability in OpenCart 1.1.8 allows remote attackers to execute arbitrary SQL...7.5 High
- kimwebsites kim websitesMultiple SQL injection vulnerabilities in login.php in Kim Websites 1.0 allow remote attackers to...7.5 High
- beerwin phplinkadminPHP remote file inclusion vulnerability in linkadmin.php in Beerwin PHPLinkAdmin 1.0 allows...7.5 High
- beerwin phplinkadminMultiple SQL injection vulnerabilities in Beerwin PHPLinkAdmin 1.0 allow remote attackers to...7.5 High
- phpcomasySQL injection vulnerability in index.php in phpComasy 0.9.1 allows remote attackers to execute...7.5 High
- gomlab gom encoderHeap-based buffer overflow in the Preview/ Set Segment function in Gretech GOMlab GOM Encoder 1.0...9.3 High
- gimp, mozilla firefox, sun openjdk +1 more +3 moreMultiple stack-based buffer overflows in the ReadSetOfCurves function in LittleCMS (aka lcms or...9.3 High
- gimp, mozilla firefox, sun openjdk +1 more +3 moreMultiple integer overflows in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in...9.3 High
- argyllcms cms, ghostscript +1 moreicc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in...9.3 High
- ghostscript, argyllcms +1 moreMultiple integer overflows in icc.c in the International Color Consortium (ICC) Format library ...9.3 High
- gimp, mozilla firefox, oracle openjdk +1 more +3 moreMemory leak in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta,...4.3 Medium
- apachefriends xamppsecurity/xamppsecurity.php in XAMPP 1.6.8 performs an extract operation on the SERVER superglobal...5.5 Medium
- apachefriends xamppCross-site request forgery (CSRF) vulnerability in security/xamppsecurity.php in XAMPP 1.6.8...6.8 Medium
- tp neostrada livebox adsl routerThe Neostrada Livebox ADSL Router allows remote attackers to cause a denial of service (network...7.8 High
- visagesoft expert pdf editorxInsecure method vulnerability in the VSPDFEditorX.VSPDFEdit ActiveX control in VSPDFEditorX.ocx 1...8.8 High
- zirkon box yappa-ngCross-site scripting (XSS) vulnerability in index.php in Fritz Berger yet another php photo album...4.3 Medium
- robs-projects asp user engine.netASP User Engine.NET stores sensitive information under the web root with insufficient access...5.0 Medium
- easy-news easy content management publishingEasy Content Management Publishing stores sensitive information under the web root with...5.0 Medium
- tizag countdown creatorUnrestricted file upload vulnerability in process.php in Tizag Countdown Creator 3 allows remote...6.8 Medium
- futomi access analyzer cgiCross-site scripting (XSS) vulnerability in futomi's CGI Cafe Access Analyzer CGI Standard...4.3 Medium
- phpprobid php pro bidPHP remote file inclusion vulnerability in includes/class_image.php in PHP Pro Bid 6.05, when...6.8 Medium
- phpfoxCross-site request forgery (CSRF) vulnerability in account/settings/account/index.php in phpFoX 1...6.8 Medium
- fahlstad fmoblog pluginSQL injection vulnerability in fmoblog.php in the fMoblog plugin 2.1 for WordPress allows remote...7.5 High
- solarwinds serv-u file serverThe FTP server in Serv-U 7.0.0.1 through 7.4.0.1 allows remote authenticated users to cause a...4.0 Medium
- yabsoft mega file hosting scriptPHP remote file inclusion vulnerability in cross.php in YABSoft Mega File Hosting 1.2 allows...7.5 High
- ismail fahmi ganesha digital librarySQL injection vulnerability in functions/browse.php in Ganesha Digital Library (GDL) 4.0 and 4.2...7.5 High
- xlinesoft phprunnerUserView_list.php in PHPRunner 4.2, and possibly earlier, stores passwords in cleartext in the...7.5 High
- xlinesoft phprunnerMultiple SQL injection vulnerabilities in PHPRunner 4.2, and possibly earlier, allow remote...7.5 High
- adobe acrobat reader, reader and acrobat +1 moreStack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and...8.8 High
- denis moinel phpgkitPHP remote file inclusion vulnerability in connexion.php in PHPGKit 0.9 allows remote attackers...7.5 High
- flysforum flaberfunction/update_xml.php in FLABER 1.1 and earlier allows remote attackers to overwrite arbitrary...7.5 High
- huseyin bora abaci com myalbumSQL injection vulnerability in MyAlbum component (com_myalbum) 1.0 for Joomla! allows remote...7.5 High
- futomi mp form mail cgiUnspecified vulnerability in Futomi's CGI Cafe MP Form Mail CGI eCommerce 1.3.0 and earlier, and...7.5 High
- hp digital senders, edgeline printers, 8100c digital sender +151 more +153 moreThe HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders...7.6 High
- hp digital senders, edgeline printers, 8100c digital sender +151 more +153 moreMultiple cross-site request forgery (CSRF) vulnerabilities in the HP Embedded Web Server (EWS) on...5.1 Medium
- symantec pcanywhereFormat string vulnerability in Symantec pcAnywhere before 12.5 SP1 allows local users to read and...4.6 Medium
- softcomplex php image gallerySQL injection vulnerability in index.php in SoftComplex PHP Image Gallery 1.0 allows remote...7.5 High
- digiappz digiaffiliateMultiple SQL injection vulnerabilities in login.asp in Digiappz DigiAffiliate 1.4 and earlier...7.5 High
- shatm sharedlogPHP remote file inclusion vulnerability in slideshow_uploadvideo.content.php in SharedLog, when...6.8 Medium
- softcomplex php image gallerySQL injection vulnerability in index.php in SoftComplex PHP Image Gallery allows remote attackers...7.5 High
- mole-group taxi calc dist scriptSQL injection vulnerability in login.php in Mole Group Taxi Map Script (aka Taxi Calc Dist Script...7.5 High
- Show moreLoading…