CVEs published January 6, 2009
17 CVEs were published on January 6, 2009: 0 critical, 0 high.
- Published
- 17
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 17
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 17
- CVE-2008-5848The Advantech ADAM-6000 module has 00000000 as its default password, which makes it easier for remote attackers to obtain access through an
- CVE-2008-5849Check Point VPN-1 R55, R65, and other versions, when Port Address Translation (PAT) is used, allows remote attackers to discover intranet IP
- CVE-2008-5851SQL injection vulnerability in index.php in My PHP Baseball Stats (MyPBS) allows remote attackers to execute arbitrary SQL commands via the
- CVE-2008-5852Emefa Guestbook 3.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to downl
- CVE-2008-5853Chilek Content Management System (aka ChiCoMaS) 2.0.4 and earlier stores sensitive information under the web root with insufficient access c
- CVE-2008-5854Multiple cross-site scripting (XSS) vulnerabilities in login.php in myPHPscripts Login Session 2.0 allow remote attackers to inject arbitrar
- CVE-2008-5855myPHPscripts Login Session 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attacke
- CVE-2008-5856Directory traversal vulnerability in scripts/export.php in ClaSS before 0.8.61 allows remote attackers to read arbitrary files via directory
- CVE-2008-5857The DropDocuments plugin in KnowledgeTree before 3.5.4a allows remote authenticated users to gain administrative privileges via a certain se
- CVE-2008-5858Multiple cross-site scripting (XSS) vulnerabilities in KnowledgeTree before 3.5.4a allow remote attackers to inject arbitrary web script or
- CVE-2008-5859SQL injection vulnerability in index.php in Constructr CMS 3.02.5 and earlier, when register_globals is enabled and magic_quotes_gpc is disa
- CVE-2008-5860Directory traversal vulnerability in backend/template.php in Constructr CMS 3.02.5 and earlier, when register_globals is enabled and magic_q
- CVE-2008-5861Directory traversal vulnerability in source.php in FreeLyrics 1.0 allows remote attackers to read arbitrary files via directory traversal se
- CVE-2008-5862Directory traversal vulnerability in webcamXP 5.3.2.375 and 5.3.2.410 build 2132 allows remote attackers to read arbitrary files via a ..%2F
- CVE-2008-5863SQL injection vulnerability in locator.php in the Userlocator module 3.0 for Woltlab Burning Board (wBB) allows remote attackers to execute
- CVE-2008-5864SQL injection vulnerability in the Top Hotel (com_tophotelmodule) component 1.0 in the Hotel Booking Reservation System (aka HBS) 1.0.0 for
- CVE-2008-5865SQL injection vulnerability in the com_hbssearch component 1.0 in the Hotel Booking Reservation System (aka HBS) 1.0.0 for Joomla! allows re