CVEs published March 26, 2009
13 CVEs were published on March 26, 2009: 1 critical, 0 high. 1 is now in CISA KEV.
- Published
- 13
- Critical
- 1
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 12
- Now in CISA KEV
- 1
- Fix available
- 1
Most affected products
- phpmyadmin/phpmyadmin
- 1
Critical 1
Medium, low and unrated 12
- CVE-2008-6529Cross-site scripting (XSS) vulnerability in listtest.php in eZoneScripts Living Local 1.1 allows remote attackers to inject arbitrary web sc
- CVE-2008-6530Unrestricted file upload vulnerability in editimage.php in eZoneScripts Living Local 1.1 allows remote authenticated administrators to execu
- CVE-2008-6531The WebWork 1 web application framework in Atlassian JIRA before 3.13.2 allows remote attackers to invoke exposed public JIRA methods via a
- CVE-2008-6532Multiple cross-site request forgery (CSRF) vulnerabilities in the update feature in Drupal 5.x before 5.13 and 6.x before 6.7 allow remote a
- CVE-2008-6533Drupal 5.x before 5.13 and 6.x before 6.7 does not delete all related content when an input format is deleted, which prevents the content fr
- CVE-2008-6534Incomplete blacklist vulnerability in NULL FTP Server Free and Pro 1.1.0.7 allows remote authenticated users to execute arbitrary commands v
- CVE-2008-6535admin/settings.php in PayPal eStores allows remote attackers to bypass intended access restrictions and change the administrative password v
- CVE-2008-6528NTFS TmaxSoft JEUS 5 before Fix 26 allows remote attackers to read the source code for scripts by appending ::$DATA to the URL, which access
- CVE-2009-1148Directory traversal vulnerability in bs_disp_as_mime_type.php in the BLOB streaming feature in phpMyAdmin before 3.1.3.1 allows remote attac
- CVE-2009-1149CRLF injection vulnerability in bs_disp_as_mime_type.php in the BLOB streaming feature in phpMyAdmin before 3.1.3.1 allows remote attackers phpmyadmin/phpmyadmin
- CVE-2009-1150Multiple cross-site scripting (XSS) vulnerabilities in the export page (display_export.lib.php) in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x
- CVE-2009-1152Siemens Gigaset SE461 WiMAX router 1.5-BL024.9.6401, and possibly other versions, allows remote attackers to cause a denial of service (devi