| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2009-2270 | 6.8 | Unrestricted file upload vulnerability in member/uploads_edit.php in dedecms 5.3 allows remote attackers to execute arbitrary code by uploading a file with a double extension in the filename, then accessing this file via unspecified vectors, as demon | 2018-10-10 19:39:00 | 2009-07-01 13:00:00 |
| CVE-2009-2269 | 7.5 | SQL injection vulnerability in Empire CMS 5.1 allows remote attackers to execute arbitrary SQL commands via the bid parameter to the default URI under e/tool/gbook/. | 2018-10-10 19:39:00 | 2009-07-01 13:00:00 |
| CVE-2009-2262 | 7.5 | PHP remote file inclusion vulnerability in install/di.php in AjaxPortal 3.0 allows remote attackers to execute arbitrary PHP code via a URL in the pathtoserverdata parameter. NOTE: the installation instructions specify deleting the install/ folder. | 2018-10-10 19:39:00 | 2009-06-30 10:30:00 |
| CVE-2009-2258 | 7.8 | Directory traversal vulnerability in cgi-bin/webcm in the administrative web interface on the Netgear DG632 with firmware 3.4.0_ap allows remote attackers to list arbitrary directories via a .. (dot dot) in the nextpage parameter. | 2018-10-10 19:39:00 | 2009-06-30 10:30:00 |
| CVE-2009-2257 | 7.8 | The administrative web interface on the Netgear DG632 with firmware 3.4.0_ap allows remote attackers to bypass authentication via a direct request to (1) gateway/commands/saveconfig.html, and (2) stattbl.htm, (3) modemmenu.htm, (4) onload.htm, (5) fo | 2018-10-10 19:39:00 | 2009-06-30 10:30:00 |
| CVE-2009-2256 | 7.8 | The administrative web interface on the Netgear DG632 with firmware 3.4.0_ap allows remote attackers to cause a denial of service (web outage) via an HTTP POST request to cgi-bin/firmwarecfg. | 2018-10-10 19:39:00 | 2009-06-30 10:30:00 |
| CVE-2009-2238 | 6.8 | Unrestricted file upload vulnerability in includes/shared_scripts/wysiwyg_editor/assetmanager/assetmanager.asp in DMXReady Registration Manager 1.1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, th | 2018-10-10 19:39:00 | 2009-06-27 18:47:00 |
| CVE-2009-2166 | 5.0 | Absolute path traversal vulnerability in cvs.php in OCS Inventory NG before 1.02.1 on Unix allows remote attackers to read arbitrary files via a full pathname in the log parameter. | 2018-10-10 19:39:00 | 2009-06-22 20:30:00 |
| CVE-2009-2164 | 6.8 | Multiple SQL injection vulnerabilities in Kjtechforce mailman beta1, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via (1) the code parameter to activate.php or (2) the dest parameter to index.php. | 2018-10-10 19:39:00 | 2009-06-22 20:30:00 |
| CVE-2009-2163 | 4.3 | Cross-site scripting (XSS) vulnerability in login/default.aspx in Sitecore CMS before 6.0.2 Update-1 090507 allows remote attackers to inject arbitrary web script or HTML via the sc_error parameter. | 2018-10-10 19:39:00 | 2009-06-22 20:30:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: