CVEs published January 12, 2009
19 CVEs were published on January 12, 2009: 0 critical, 0 high.
- Published
- 19
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 19
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 19
- CVE-2008-5883Absolute path traversal vulnerability in front-end/dir.php in mini-pub 0.3 and earlier allows remote attackers to list arbitrary directories
- CVE-2008-5884AyeView 2.20 allows user-assisted attackers to cause a denial of service (application crash) via a GIF file with a malformed header.
- CVE-2008-5885The Net Guys ASPired2Quote stores sensitive information under the web root with insufficient access control, which allows remote attackers t
- CVE-2008-5886TAKempis Discussion Web 4.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers
- CVE-2008-5887phplist before 2.10.8 allows remote attackers to include files via unknown vectors, related to a "local file include vulnerability."
- CVE-2008-5888Multiple SQL injection vulnerabilities in Click&Rank allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) hi
- CVE-2008-5889Cross-site scripting (XSS) vulnerability in user.asp in Click&Rank allows remote attackers to inject arbitrary web script or HTML via the ac
- CVE-2008-5890SQL injection vulnerability in feeds.php in Injader before 2.1.2 allows remote attackers to execute arbitrary SQL commands via the id parame
- CVE-2008-5891Cross-site scripting (XSS) vulnerability in the profile editing functionality in Injader before 2.1.2 allows remote attackers to inject arbi
- CVE-2008-5892Multiple SQL injection vulnerabilities in ClickAndEmail allow remote attackers to execute arbitrary SQL commands via (1) the ID parameter to
- CVE-2008-5893Cross-site scripting (XSS) vulnerability in admin_dblayers.asp in ClickAndEmail allows remote attackers to inject arbitrary web script or HT
- CVE-2008-5894Directory traversal vulnerability in index.php in Mediatheka 4.2 allows remote attackers to include and execute arbitrary local files via a
- CVE-2008-5895SQL injection vulnerability in connection.php in Mediatheka 4.2 and earlier allows remote attackers to execute arbitrary SQL commands via th
- CVE-2008-5896CodeAvalanche RateMySite stores sensitive information under the web root with insufficient access control, which allows remote attackers to
- CVE-2008-5897CodeAvalanche FreeWallpaper stores sensitive information under the web root with insufficient access control, which allows remote attackers
- CVE-2008-5898CodeAvalanche Directory stores sensitive information under the web root with insufficient access control, which allows remote attackers to d
- CVE-2008-5899CodeAvalanche FreeForAll stores sensitive information under the web root with insufficient access control, which allows remote attackers to
- CVE-2008-5900CodeAvalanche Articles stores sensitive information under the web root with insufficient access control, which allows remote attackers to do
- CVE-2008-5901iyzi Forum 1.0 beta 3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to dow