| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2009-2114 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in admin.php in SkyBlueCanvas 1.1 r237 allow remote attackers to inject arbitrary web script or HTML via the (1) mgroup, (2) mgr, (3) objtype, (4) id, and (5) dir parameters. | 2018-10-10 19:39:00 | 2009-06-18 21:30:00 |
| CVE-2009-2107 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in index.php in Webmedia Explorer (webmex) 5.09 and 5.10 allow remote attackers to inject arbitrary web script or HTML via event handlers such as onmouseover in the (1) search or (2) tag parameters; | 2018-10-10 19:39:00 | 2009-06-17 17:30:00 |
| CVE-2009-2097 | 7.5 | SQL injection vulnerability in system/application/controllers/catalog.php in Zoki Soft Zoki Catalog (aka Smart Catalog) allows remote attackers to execute arbitrary SQL commands via the search_text parameter. NOTE: some of these details are obtained | 2018-10-10 19:39:00 | 2009-06-17 17:30:00 |
| CVE-2009-2011 | 9.3 | Worldweaver DX Studio Player 3.0.29.0, 3.0.22.0, 3.0.12.0, and probably other versions before 3.0.29.1, when used as a plug-in for Firefox, does not restrict access to the shell.execute JavaScript API method, which allows remote attackers to execute | 2018-10-10 19:39:00 | 2009-06-16 21:00:00 |
| CVE-2009-2036 | 7.5 | SQL injection vulnerability in index.php in Open Biller 0.1 allows remote attackers to execute arbitrary SQL commands via the username parameter. | 2018-10-10 19:39:00 | 2009-06-12 18:00:00 |
| CVE-2009-2010 | 6.5 | Multiple SQL injection vulnerabilities in Haudenschilt Family Connections CMS (FCMS) 1.9 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) thread parameter to messageboard.php, (2) member parameter to profile. | 2018-10-10 19:39:00 | 2009-06-08 19:30:00 |
| CVE-2009-1943 | 10.0 | Stack-based buffer overflow in the IKE service (ireIke.exe) in SafeNet SoftRemote before 10.8.6 allows remote attackers to execute arbitrary code via a long request to UDP port 62514. | 2018-10-10 19:39:00 | 2009-06-05 21:30:00 |
| CVE-2009-1937 | 4.3 | Cross-site scripting (XSS) vulnerability in the comment posting feature in LightNEasy 2.2.1 "no database" (aka flat) and 2.2.2 SQLite allows remote attackers to inject arbitrary web script or HTML via the (1) commentname (aka Author), (2) commentemai | 2018-10-10 19:39:00 | 2009-06-05 18:30:00 |
| CVE-2009-1915 | 4.3 | Stack-based buffer overflow in the URL Search Hook (ICQToolBar.dll) in ICQ 6.5 allows remote attackers to cause a denial of service (persistent crash) and possibly execute arbitrary code via an Internet shortcut .URL file containing a long URL parame | 2018-10-10 19:39:00 | 2009-06-04 17:30:00 |
| CVE-2009-1911 | 6.8 | Directory traversal vulnerability in .include/init.php (aka admin/_include/init.php) in QuiXplorer 2.3.2 and earlier, as used in TinyWebGallery (TWG) 1.7.6 and earlier, allows remote attackers to include and execute arbitrary local files via a .. (do | 2018-10-10 19:39:00 | 2009-06-04 16:30:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: