CVEs published March 2, 2009
50 CVEs were published on March 2, 2009: 0 critical, 0 high.
- Published
- 50
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 50
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 50
- CVE-2009-0368OpenSC before 0.11.7 allows physically proximate attackers to bypass intended PIN requirements and read private data objects via a (1) low l
- CVE-2009-0750SQL injection vulnerability in login.php in the smNews example script for txtSQL 2.2 Final allows remote attackers to execute arbitrary SQL
- CVE-2009-0751Yaws before 1.80 allows remote attackers to cause a denial of service (memory consumption and crash) via a request with a large number of he
- CVE-2009-0749Use-after-free vulnerability in the GIFReadNextExtension function in lib/pngxtern/gif/gifread.c in OptiPNG 0.6.2 and earlier allows context-
- CVE-2008-6367Unrestricted file upload vulnerability in Photos/create_album.php in Social Groupie allows remote authenticated users to execute arbitrary c
- CVE-2008-6368SQL injection vulnerability in index.php in Chipmunk Guestbook 1.4m allows remote attackers to execute arbitrary SQL commands via the start
- CVE-2008-6369SQL injection vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows remote attackers to execute arbitrary SQL commands via
- CVE-2008-6370Cross-site scripting (XSS) vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows remote attackers to inject arbitrary web
- CVE-2008-6371SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via the
- CVE-2008-6372SQL injection vulnerability in default.asp in Ocean12 FAQ Manager Pro 1.0 allows remote attackers to execute arbitrary SQL commands via the
- CVE-2008-6373Unspecified vulnerability in Nagios before 3.0.6 has unspecified impact and remote attack vectors related to CGI programs, "adaptive externa
- CVE-2008-6374CodefixerSoftware MailingListPro Free Edition stores sensitive information under the web root with insufficient access control, which allows
- CVE-2008-6375JBook stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the databa
- CVE-2008-6376SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the password (pass parameter)
- CVE-2008-6377PHP remote file inclusion vulnerability in include/global.php in Multi SEO phpBB 1.1.0 allows remote attackers to execute arbitrary PHP code
- CVE-2008-6378SQL injection vulnerability in calendar_Eventupdate.asp in Calendar Mx Professional 2.0.0 allows remote attackers to execute arbitrary SQL c
- CVE-2008-6379SQL injection vulnerability in pics_pre.asp in Gallery MX 2.0.0 allows remote attackers to execute arbitrary SQL commands via the ID paramet
- CVE-2008-6380SQL injection vulnerability in default.aspx in Active Web Helpdesk 2.0 allows remote attackers to execute arbitrary SQL commands via the Cat
- CVE-2008-6381SQL injection vulnerability in modules/adresses/viewcat.php in bcoos 1.0.13, and possibly earlier, allows remote authenticated users with Ad
- CVE-2008-6382ASP Portal 3.2.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download
- CVE-2008-6383SQL injection vulnerability in SpeedTech Organization and Resource Manager (Storm) 5.x before 5.x-1.14 and 6.x before 6.x-1.18, a module for
- CVE-2008-6384Multiple cross-site request forgery (CSRF) vulnerabilities in Comment Mail 5.x before 5.x-1.1, a module for Drupal, allow remote attackers t
- CVE-2008-6385Cross-site scripting (XSS) vulnerability in index.php in W3matter RevSense 1.0 allows remote attackers to inject arbitrary web script or HTM
- CVE-2008-6386Cross-site scripting (XSS) vulnerability in showads.php in Z1Exchange 1.0 allows remote attackers to inject arbitrary web script or HTML via
- CVE-2008-6387Quick Tree View .NET 3.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to
- CVE-2008-6388Rapid Classified 3.1 and 3.15 stores sensitive information under the web root with insufficient access control, which allows remote attacker
- CVE-2008-6389SQL injection vulnerability in asadmin/default.asp in Rae Media Contact Management Software SOHO, Standard, and Enterprise allows remote att
- CVE-2008-6390SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via the
- CVE-2008-6391SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the username (user parameter)
- CVE-2008-6392SQL injection vulnerability in showads.php in Z1Exchange allows remote attackers to execute arbitrary SQL commands via the id parameter.
- CVE-2008-6347PHP remote file inclusion vulnerability in lib/onguma.class.php in the Onguma Time Sheet (com_ongumatimesheet20) 2.0 4b component for Joomla
- CVE-2008-6348Multiple SQL injection vulnerabilities in DevelopItEasy Photo Gallery 1.2 allow remote attackers to execute arbitrary SQL commands via the (
- CVE-2008-6349SQL injection vulnerability in survey_results_text.php in TurnkeyForms Business Survey Pro 1.0 allows remote attackers to execute arbitrary
- CVE-2008-6350SQL injection vulnerability in listtest.php in TurnkeyForms Local Classifieds allows remote attackers to execute arbitrary SQL commands via
- CVE-2008-6351Cross-site scripting (XSS) vulnerability in listtest.php in TurnkeyForms Local Classifieds allows remote attackers to inject arbitrary web s
- CVE-2008-6352SQL injection vulnerability in home.html in Xpoze Pro 4.10 allows remote attackers to execute arbitrary SQL commands via the menu parameter.
- CVE-2008-6353SQL injection vulnerability in index.asp in ASP-CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the cha parameter.
- CVE-2008-6354The Net Guys ASPired2poll stores sensitive information under the web root with insufficient access control, which allows remote attackers to
- CVE-2008-6355The Net Guys ASPired2Protect stores sensitive information under the web root with insufficient access control, which allows remote attackers
- CVE-2008-6356evCal Events Calendar stores sensitive information under the web root with insufficient access control, which allows remote attackers to dow
- CVE-2008-6357MyCal Personal Events Calendar stores sensitive information under the web root with insufficient access control, which allows remote attacke
- CVE-2008-6358SQL injection vulnerability in group_index.php in Social Groupie allows remote attackers to execute arbitrary SQL commands via the id parame
- CVE-2008-6359Cross-site scripting (XSS) vulnerability in index.php in Max's Guestbook allows remote attackers to inject arbitrary web script or HTML via
- CVE-2008-6360Cross-site scripting (XSS) vulnerability in the userranks feature in modules/system/admin.php in ImpressCMS 1.0.2 final allows remote attack
- CVE-2008-6361Directory traversal vulnerability in index.php in InSun Feed CMS 1.7.3 19Beta allows remote attackers to include and execute arbitrary local
- CVE-2008-6362SQL injection vulnerability in sitepage.php in Multiple Membership Script 2.5 allows remote attackers to execute arbitrary SQL commands via
- CVE-2008-6363Stack-based buffer overflow in DesignWorks Professional 4.3.1 and 5.0.7 allows remote attackers to execute arbitrary code via a crafted .cct
- CVE-2008-6364SQL injection vulnerability in logon_process.jsp in Ad Server Solutions Banner Exchange Solution Java allows remote attackers to execute arb
- CVE-2008-6365SQL injection vulnerability in logon.jsp in Ad Server Solutions Ad Management Software Java allows remote attackers to execute arbitrary SQL
- CVE-2008-6366SQL injection vulnerability in logon.jsp in Ad Server Solutions Affiliate Software Java 4.0 allows remote attackers to execute arbitrary SQL