CVEs published in July 2009
443 vulnerabilities, 77 critical, 2 exploited.
- php-sugarDirectory traversal vulnerability in test/index.php in PHP-Sugar 0.80 allows remote attackers to...5.0 Medium
- audioarticledirectory audio article directoryDirectory traversal vulnerability in download.php in Audio Article Directory allows remote...5.0 Medium
- dutchmonkey dm albumPHP remote file inclusion vulnerability in template/album.php in DM Albums 1.9.2, as used...9.3 High
- joomlaworks com k2SQL injection vulnerability in the K2 (com_k2) component 1.0.1 Beta and earlier for Joomla!...7.5 High
- smspagesSQL injection vulnerability in cat.php in SMSPages 1.0 in Mr.Saphp Arabic Script Mobile (aka...7.5 High
- virtuenetz virtue online test generatoradmin/index.php in Virtuenetz Virtue Online Test Generator does not require administrative...6.5 Medium
- virtuenetz virtue online test generatorSQL injection vulnerability in text.php in Virtuenetz Virtue Online Test Generator allows remote...7.5 High
- virtuenetz virtue online test generatorCross-site scripting (XSS) vulnerability in text.php in Virtuenetz Virtue Online Test Generator...4.3 Medium
- f-cimag-in com bookflipSQL injection vulnerability in the BookFlip (com_bookflip) component 2.1 for Joomla! allows...7.5 High
- usolved newsolvedMultiple SQL injection vulnerabilities in newsscript.php in USOLVED NEWSolved 1.1.6, when...6.8 Medium
- shalwan opialSQL injection vulnerability in admin/index.php in Opial 1.0 allows remote attackers to execute...6.8 Medium
- sun opensolarisUnspecified vulnerability in the proc filesystem in Sun OpenSolaris snv_49 through snv_109 allows...4.9 Medium
- fustrate member awardsSQL injection vulnerability in the awardsMembers function in Sources/Profile.php in the Member...7.5 High
- mathi peampBuffer overflow in amp.exe in Brothersoft PEamp 1.02b allows user-assisted remote attackers to...9.3 High
- blogtrafficexchange related-sitesSQL injection vulnerability in BTE_RW_webajax.php in the Related Sites plugin 2.1 for WordPress...7.5 High
- jay-jayx0r phpmyblockcheckeradmin.php in phpMyBlockchecker 1.0.0055 allows remote attackers to bypass authentication and gain...9.8 Critical
- gizmo5 gizmoGizmo 3.1.0.79 on Linux does not verify a server's SSL certificate, which allows remote servers...5.0 Medium
- 4homepages 4imagesCross-site scripting (XSS) vulnerability in includes/functions.php in 4images 1.7 through 1.7.7...4.3 Medium
- bigace cmsDirectory traversal vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote...6.8 Medium
- jtr jax formmailerPHP remote file inclusion vulnerability in formmailer.admin.inc.php in Jax FormMailer 3.0.0...7.5 High
- avax-software avax vector activexBuffer overflow in the Avax Vector ActiveX control in avPreview.ocx in AVAX-software Avax Vector...4.3 Medium
- tangocmsCross-site scripting (XSS) vulnerability in the Html::textarea function in application/libraries...4.3 Medium
- photo-dvd-maker photo dvd makerStack-based buffer overflow in Photo DVD Maker 8.02, and possibly earlier versions, allows remote...9.3 High
- drupalDrupal 5.x before 5.19 and 6.x before 6.13 does not properly sanitize failed login attempts for...4.3 Medium
- drupalCross-site scripting (XSS) vulnerability in the Forum module in Drupal 6.x before 6.13 allows...4.3 Medium
- drupalDrupal 6.x before 6.13 does not prevent users from modifying user signatures after the associated...6.5 Medium
- michelle cox advanced forumAdvanced Forum 6.x before 6.x-1.1, a module for Drupal, does not prevent users from modifying...6.5 Medium
- michelle cox advanced forumCross-site scripting (XSS) vulnerability in Advanced Forum 5.x before 5.x-1.1 and 6.x before 6.x...4.3 Medium
- wxwidgetsInteger overflow in the wxImage::Create function in src/common/image.cpp in wxWidgets 2.8.10...6.8 Medium
- matteo ricchetti ss5Unspecified vulnerability in Socks Server 5 before 3.7.8-8 has unknown impact and attack vectors.10.0 High
- iomega storcenter pro firmwarecgi-bin/makecgi-pro in Iomega StorCenter Pro generates predictable session IDs, which allows...9.8 Critical
- datachecknh forumpal, forumpal fe +1 moreSQL injection vulnerability in login.asp in DataCheck Solutions ForumPal FE 1.1 and ForumPal 1.5...7.5 High
- datachecknh gallerypal feSQL injection vulnerability in login.asp in DataCheck Solutions GalleryPal FE 1.5 allows remote...7.5 High
- mp3-natorStack-based buffer overflow in Mp3-Nator 2.0 allows remote attackers to execute arbitrary code...9.3 High
- yukudr audioplusStack-based buffer overflow in KUDRSOFT AudioPLUS 2.00.215 allows remote attackers to execute...9.3 High
- yukudr audioplusStack-based buffer overflow in KUDRSOFT AudioPLUS 2.0.0.215 allows remote attackers to execute...9.3 High
- enhancesoft osticketSQL injection vulnerability in include/class.staff.php in osTicket before 1.6 RC5 allows remote...7.5 High
- horde passwdCross-site scripting (XSS) vulnerability in passwd/main.php in the Passwd module before 3.1.1 for...4.3 Medium
- yasinkaplan tekradiusMultiple SQL injection vulnerabilities in TekRADIUS 3.0 allow context-dependent attackers to...7.5 High
- yasinkaplan tekradiusTekRADIUS 3.0 uses BUILTIN\Users:R permissions for the TekRADIUS.ini file, which allows local...4.6 Medium
- yasinkaplan tekradiusThe default configuration of TekRADIUS 3.0 uses the sa account to communicate with Microsoft SQL...10.0 High
- dan cahill nulllogic groupwareMultiple stack-based buffer overflows in the pgsqlQuery function in NullLogic Groupware 1.2.7,...9.3 High
- dan cahill nulllogic groupwareThe forum module in NullLogic Groupware 1.2.7 allows remote authenticated users to cause a denial...4.0 Medium
- nulllogic groupwareSQL injection vulnerability in the auth_checkpass function in the login page in NullLogic...7.5 High
- eacceleratorencoder.php in eAccelerator allows remote attackers to execute arbitrary code by copying a local...6.8 Medium
- google chromeGoogle Chrome 1.0.154.48 and earlier does not block javascript: URIs in Refresh headers in HTTP...4.3 Medium
- opera browserOpera 9.52 and earlier does not block javascript: URIs in Refresh headers in HTTP responses,...4.3 Medium
- microsoft internet explorerMicrosoft Internet Explorer 6.0.2900.2180 and earlier does not block javascript: URIs in Refresh...4.3 Medium
- microsoft windows 2003 server, windows xp +1 moreUnspecified vulnerability in the Load method in the IPersistStreamInit interface in the Active...9.3 High
- microsoft windows, windows 2003 server, windows xp +2 moreStack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template...9.3 High
- Show moreLoading…