| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2009-4402 | 7.5 | The default configuration of SQL-Ledger 2.8.24 allows remote attackers to perform unspecified administrative operations by providing an arbitrary password to the admin interface. | 2018-10-10 19:49:00 | 2009-12-23 18:30:00 |
| CVE-2009-4386 | 7.5 | SQL injection vulnerability in hotel_tiempolibre_ext.php in Venalsur Booking Centre Booking System for Hotels Group, when magic_quotes_gpc is enabled, allows remote attackers to execute arbitrary SQL commands via the NoticiaID parameter and other uns | 2018-10-10 19:49:00 | 2009-12-22 23:30:00 |
| CVE-2009-4367 | 6.8 | The Staging Webservice ("sitecore modules/staging/service/api.asmx") in Sitecore Staging Module 5.4.0 rev.080625 and earlier allows remote attackers to bypass authentication and (1) upload files, (2) download files, (3) list directories, and (4) clea | 2018-10-10 19:49:00 | 2009-12-21 16:30:00 |
| CVE-2009-4356 | 9.3 | Multiple integer overflows in the jpeg.w5s and png.w5s filters in Winamp before 5.57 allow remote attackers to execute arbitrary code via malformed (1) JPEG or (2) PNG data in an MP3 file. | 2018-10-10 19:49:00 | 2009-12-18 19:30:00 |
| CVE-2009-4351 | 6.8 | SQL injection vulnerability in ADMIN/loginaction.php in WSCreator 1.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the Email (aka username) parameter. | 2018-10-10 19:49:00 | 2009-12-17 18:30:00 |
| CVE-2009-4347 | 4.3 | Cross-site scripting (XSS) vulnerability in daloradius-users/login.php in daloRADIUS 0.9-8 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter. | 2018-10-10 19:49:00 | 2009-12-17 17:30:00 |
| CVE-2009-4322 | 5.0 | extras/ipn_test_return.php in Zen Cart allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message. | 2018-10-10 19:49:00 | 2009-12-14 23:30:00 |
| CVE-2009-4321 | 5.0 | extras/curltest.php in Zen Cart 1.3.8 and 1.3.8a, and possibly other versions, allows remote attackers to read arbitrary files via a file:// URI. NOTE: some of these details are obtained from third party information. | 2018-10-10 19:49:00 | 2009-12-14 23:30:00 |
| CVE-2009-4310 | 9.3 | Stack-based buffer overflow in the Intel Indeo41 codec for Windows Media Player in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via crafted compressed video data in an IV41 stream i | 2018-10-10 19:49:00 | 2009-12-13 01:30:00 |
| CVE-2009-4309 | 9.3 | Heap-based buffer overflow in the Intel Indeo41 codec for Windows Media Player in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via a large size value in a movi record in an IV41 str | 2018-10-10 19:49:00 | 2009-12-13 01:30:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: