CVEs published in April 2009
567 vulnerabilities, 92 critical, 1 exploited.
- dirk bartley nweb2faxMultiple directory traversal vulnerabilities in nweb2fax 0.2.7 and earlier allow remote attackers...5.0 Medium
- marc melvin a\+ php scripts news management systemA+ PHP Scripts News Management System (NMS) allows remote attackers to bypass authentication and...7.5 High
- kronos webtaMultiple cross-site scripting (XSS) vulnerabilities in Kronos webTA allow remote attackers to...4.3 Medium
- anantasoft ananta cmschange.php in Ananta CMS 1.0b5, with magic_quotes_gpc disabled, allows remote attackers to gain...6.8 Medium
- yarck sh-newsaction.php in SH-News 3.0 allows remote attackers to bypass authentication and gain administrator...7.5 High
- phpauctionsSQL injection vulnerability in profile.php in PHPAuctions.info PHPAuctions (aka PHPAuctionSystem)...7.5 High
- linux kernelInteger overflow in rose_sendmsg (sys/net/af_rose.c) in the Linux kernel 2.6.24.4, and other...5.0 Medium
- stanislas rolland sr feuser registerFrontend User Registration extension for TYPO3 does not properly verify access rights4.0 Medium
- alikonweb com bookjoomlasSQL injection vulnerability in sub_commententry.php in the BookJoomlas (com_bookjoomlas)...7.5 High
- fortinet forticlientFormat string vulnerability in Fortinet FortiClient 3.0.614, and possibly earlier, allows local...7.2 High
- webhelpdesk web help deskMultiple cross-site scripting (XSS) vulnerabilities in Web Help Desk 9.1.22 (evaluation version)...4.3 Medium
- ezbsystems ultraisoMultiple stack-based buffer overflows in UltraISO 9.3.3.2685 and earlier allow remote attackers...9.3 High
- insanevisions adaptbbSQL injection vulnerability in inc/bb/topic.php in Insane Visions AdaptBB 1.0, when...6.8 Medium
- rd-media com rdautosSQL injection vulnerability in the RD-Autos (com_rdautos) component 1.5.7 for Joomla! allows...7.5 High
- magic iso maker iso makerHeap-based buffer overflow in Magic ISO Maker 5.5 build 0274 allows remote attackers to cause a...9.0 High
- flexcmsSQL injection vulnerability in FlexCMS 2.5 allows remote attackers to execute arbitrary SQL...7.5 High
- apache mod perlCross-site scripting (XSS) vulnerability in Status.pm in Apache::Status and Apache2::Status in...2.6 Low
- avg anti-virusAVG Anti-Virus for Linux 7.5.51, and possibly earlier, allows remote attackers to cause a denial...4.3 Medium
- bitdefender antivirusMultiple integer overflows in the scanning engine in Bitdefender for Linux 7.60825 and earlier...5.0 Medium
- ozerov bigdumpUnrestricted file upload vulnerability in bigdump.php in Alexey Ozerov BigDump 0.29b allows...6.8 Medium
- simple machines forumDirectory traversal vulnerability in index.php in Simple Machines Forum (SMF) 1.0 before 1.0.15...5.5 Medium
- simple machines forumDirectory traversal vulnerability in index.php in Simple Machines Forum (SMF) 1.0 before 1.0.15...4.0 Medium
- simple machines forumCross-site request forgery (CSRF) vulnerability in index.php in Simple Machines Forum (SMF) 1.0...6.8 Medium
- openautoclassifieds open auto classifiedsMultiple SQL injection vulnerabilities in Open Auto Classifieds 1.4.3b allow remote attackers to...7.5 High
- comscripts gedcom to myslMultiple cross-site scripting (XSS) vulnerabilities in GEDCOM_TO_MYSQL 2 allow remote attackers...4.3 Medium
- structum infobiz serverCross-site scripting (XSS) vulnerability in search_results.php in InfoBiz Server allows remote...4.3 Medium
- wh-com com webhostingSQL injection vulnerability in webhosting.php in the Webhosting Component (com_webhosting) module...7.5 High
- insanevisions onecmsSQL injection vulnerability in asd.php in OneCMS 2.5 allows remote attackers to execute arbitrary...7.5 High
- oxyproject oxyboxStatic code injection vulnerability in edithistory.php in OxYProject OxYBox 0.85 allows remote...10.0 High
- mywebland minibloggiedel.php in miniBloggie 1.0 allows remote attackers to delete arbitrary posts via a direct request...5.0 Medium
- ktools photostoreSQL injection vulnerability in manager/image_details_editor.php in Ktools PhotoStore 2.5, 2.9.8,...7.5 High
- ktools photostoreSQL injection vulnerability in crumbs.php in Ktools PhotoStore 3.4.3 and 3.5.2 allows remote...7.5 High
- ktools photostoreSQL injection vulnerability in gallery.php in Ktools PhotoStore 3.4.3 allows remote attackers to...7.5 High
- coronamatrix phpaddressbookCross-site scripting (XSS) vulnerability in index.php in CoronaMatrix phpAddressBook 2.0 allows...4.3 Medium
- opencosmo visualsentinelCross-site scripting (XSS) vulnerability in Opencosmo VisualSentinel 0.7 allows remote attackers...4.3 Medium
- dnnsoftware dotnetnukeCross-site scripting (XSS) vulnerability in Default.aspx in DotNetNuke 4.8.3 and earlier allows...4.3 Medium
- lokicmsLokiCMS 0.3.4 and possibly earlier versions does not properly restrict access to administrative...5.0 Medium
- dotcontent fluentcmsSQL injection vulnerability in view.php in DotContent FluentCMS 4.x allows remote attackers to...7.5 High
- aspindir shader tvMultiple SQL injection vulnerabilities in Shader TV (Beta) allow remote authenticated...6.5 Medium
- aspindir batmanportalMultiple SQL injection vulnerabilities in BatmanPorTaL allow remote attackers to execute...7.5 High
- ajaxplorerCross-site request forgery (CSRF) vulnerability in admin.php in AjaXplorer 2.3.3 and 2.3.4 allows...6.8 Medium
- versalsoft http file upload activex controlInsecure method vulnerability in the Versalsoft HTTP Image Uploader ActiveX control ...8.8 High
- libraryvideocompany safari montageMultiple cross-site scripting (XSS) vulnerabilities in forgotPW.php in Library Video Company...4.3 Medium
- geody daggerPHP remote file inclusion vulnerability in skins/default.php in Geody Labs Dagger - The Cutting...6.8 Medium
- geody daggerPHP remote file inclusion vulnerability in skins/default.php in Geody Labs Dagger - The Cutting...6.8 Medium
- beaussier roomphplanningSQL injection vulnerability in RoomPHPlanning 1.5 allows remote attackers to execute arbitrary...7.5 High
- beaussier roomphplanningSQL injection vulnerability in RoomPHPlanning 1.5 allows remote attackers to execute arbitrary...7.5 High
- mercuryboardSQL injection vulnerability in func/login.php in MercuryBoard 1.1.5 and earlier allows remote...7.5 High
- blogphpMultiple cross-site scripting (XSS) vulnerabilities in index.php in BlogPHP 2.0 allow remote...4.3 Medium
- typo3 wt galleryDirectory traversal vulnerability in the wt_gallery extension 2.5.0 and earlier for TYPO3 allows...7.8 High
- Show moreLoading…