| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2009-3665 | 7.5 | Multiple SQL injection vulnerabilities in index.php in Nullam Blog 0.1.2 allow remote attackers to execute arbitrary SQL commands via the (1) i parameter or (2) v parameters in a register action. | 2018-10-10 19:47:00 | 2009-10-11 22:30:00 |
| CVE-2009-3664 | 7.5 | Multiple directory traversal vulnerabilities in index.php in Nullam Blog 0.1.2 allow remote attackers to include or execute arbitrary files via a .. (dot dot) in the (1) p and (2) s parameters. | 2018-10-10 19:47:00 | 2009-10-11 22:30:00 |
| CVE-2009-3649 | 4.3 | Cross-site scripting (XSS) vulnerability in forums/index.php in Power Bulletin Board (PBBoard) 2.0.2 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter in a new_topic action. | 2018-10-10 19:47:00 | 2009-10-09 14:30:00 |
| CVE-2009-3591 | 5.0 | Dopewars 1.5.12 allows remote attackers to cause a denial of service (segmentation fault) via a REQUESTJET message with an invalid location. | 2018-10-10 19:47:00 | 2009-10-08 17:30:00 |
| CVE-2009-3579 | 4.3 | Cross-site scripting (XSS) vulnerability in the CookieDump.java sample application in Mort Bay Jetty 6.1.19 and 6.1.20 allows remote attackers to inject arbitrary web script or HTML via the Value parameter in a GET request to cookie/. | 2018-10-10 19:47:00 | 2009-10-07 17:30:00 |
| CVE-2009-3387 | 5.0 | Bugzilla 3.3.1 through 3.4.4, 3.5.1, and 3.5.2 does not allow group restrictions to be preserved throughout the process of moving a bug to a different product category, which allows remote attackers to obtain sensitive information via a request for a | 2018-10-10 19:43:00 | 2010-02-03 19:30:00 |
| CVE-2009-3031 | 9.3 | Stack-based buffer overflow in the BrowseAndSaveFile method in the Altiris eXpress NS ConsoleUtilities ActiveX control 6.0.0.1846 in AeXNSConsoleUtilities.dll in Symantec Altiris Notification Server (NS) 6.0 before R12, Deployment Server 6.8 and 6.9 | 2018-10-10 19:43:00 | 2009-11-03 16:30:00 |
| CVE-2009-3532 | 7.5 | Multiple SQL injection vulnerabilities in login.asp (aka the login screen) in LogRover 2.3 and 2.3.3 on Windows allow remote attackers to execute arbitrary SQL commands via the (1) uname and (2) pword parameters. NOTE: some of these details are obta | 2018-10-10 19:43:00 | 2009-10-02 19:30:00 |
| CVE-2009-3522 | 7.2 | Stack-based buffer overflow in aswMon2.sys in avast! Home and Professional for Windows 4.8.1351, and possibly other versions before 4.8.1356, allows local users to cause a denial of service (system crash) and possibly gain privileges via a crafted IO | 2018-10-10 19:43:00 | 2009-10-01 17:00:00 |
| CVE-2009-3494 | 6.8 | Multiple SQL injection vulnerabilities in index.php in T-HTB Manager 0.5, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in a delete_category action, (2) the name parameter in an u | 2018-10-10 19:43:00 | 2009-09-30 15:30:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: