Archive
January 2008
Vulnerabilities first published in this month (UTC), newest first.
498 results · Feed
-
Unscored —
cp, when running with an option to preserve symlinks on multiple OSes, allows local, user-assisted attackers to overwri…
-
Unscored —
PatchLink Update client for Unix, as used by Novell ZENworks Patch Management Update Agent for Linux/Unix/Mac (LUM) 6.2…
-
Unscored —
Stack-based buffer overflow in Pierre-emmanuel Gougelet (1) XnView 1.91 and 1.92, (2) NConvert 4.85, and (3) libgfl280.…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in deans_permalinks_migration.php in the Dean's Permalinks Migration 1.…
-
Unscored —CVE-2008-0517 Public exploit
SQL injection vulnerability in index.php in the Darko Selesi EstateAgent (com_estateagent) 0.1 component for Mambo 4.5.…
-
Unscored —CVE-2008-0520 Public exploit
Multiple SQL injection vulnerabilities in main.php in the WassUp plugin 1.4 through 1.4.3 for WordPress allow remote at…
-
Unscored —CVE-2008-0521 Public exploit
Multiple directory traversal vulnerabilities in Bubbling Library 1.32 allow remote attackers to read arbitrary files vi…
-
Unscored —
Multiple buffer overflows in IBM AIX 4.3 allow remote attackers to cause a denial of service (crash) or possibly gain p…
-
Unscored —
PHP remote file inclusion vulnerability in spaw/dialogs/confirm.php in SQLiteManager 1.2.0 allows remote attackers to e…
-
Unscored —CVE-2008-0515 Public exploit
SQL injection vulnerability in index.php in the musepoes (com_musepoes) component for Mambo and Joomla! allows remote a…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the management interface in multiple Yamaha RT series routers allows…
-
Unscored —CVE-2008-0511 Public exploit
SQL injection vulnerability in index.php in the MaMML (com_mamml) component for Mambo and Joomla! allows remote attacke…
-
Unscored —
Eval injection vulnerability in admin/op/disp.php in Netwerk Smart Publisher 1.0.1 allows remote attackers to execute a…
-
Unscored —CVE-2008-0518 Public exploit
SQL injection vulnerability in index.php in the Recipes (com_recipes) 1.00 component for Mambo and Joomla! allows remot…
-
Unscored —CVE-2008-0514 Public exploit
SQL injection vulnerability in index.php in the Glossary (com_glossary) 2.0 component for Mambo and Joomla! allows remo…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in docs/showdoc.php in Coppermine Photo Gallery (CPG) before 1.4.15…
-
Unscored —CVE-2008-0513 Public exploit
Directory traversal vulnerability in parser/include/class.cache_phpcms.php in phpCMS 1.2.2 allows remote attackers to r…
-
Unscored —CVE-2008-0510 Public exploit
SQL injection vulnerability in index.php in the Newsletter (com_newsletter) component for Mambo 4.5 and Joomla! allows …
-
Unscored —CVE-2008-0502 Public exploit
PHP remote file inclusion vulnerability in templates/Official/part_userprofile.php in Connectix Boards 0.8.2 and earlie…
-
Unscored —
include/imageObjectIM.class.php in Coppermine Photo Gallery (CPG) before 1.4.15, when the ImageMagick picture processin…
-
Unscored —CVE-2008-0504 Public exploit
Multiple SQL injection vulnerabilities in Coppermine Photo Gallery (CPG) before 1.4.15 allow remote authenticated admin…
-
Unscored —CVE-2008-0519 Public exploit
SQL injection vulnerability in index.php in the Atapin Jokes (com_jokes) 1.0 component for Mambo and Joomla! allows rem…
-
Unscored —CVE-2008-0507 Public exploit
SQL injection vulnerability in adclick.php in the AdServe 0.2 plugin for WordPress allows remote attackers to execute a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in multiple Hal Networks shopping-cart products allows remote attackers to inj…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in SoftCart.exe in SoftCart 5.1.2.2 allow remote attackers to injec…
-
Unscored —CVE-2008-0512 Public exploit
SQL injection vulnerability in index.php in the fq (com_fq) component for Mambo and Joomla! allows remote attackers to …
-
Unscored —CVE-2008-0493 Public exploit
fpx.dll 3.9.8.0 in the FlashPix plugin for IrfanView 4.10 allows remote attackers to execute arbitrary code via a craft…
-
Unscored —
Stack-based buffer overflow in the Persits.XUpload.2 ActiveX control in XUpload.ocx 3.0.0.4 and earlier in Persits XUpl…
-
Unscored —
Cross-site scripting (XSS) vulnerability in vpnum/userslist.php in Endian Firewall 2.1.2 allows remote attackers to inj…
-
Unscored —CVE-2008-0501 Public exploit
Directory traversal vulnerability in phpMyClub 0.0.1 allows remote attackers to include and execute arbitrary local fil…
-
Unscored —CVE-2008-0488 Public exploit
Directory traversal vulnerability in tseekdir.cgi in VB Marketing allows remote attackers to include and execute arbitr…
-
Unscored —
Multiple unspecified vulnerabilities in Mambo LaiThai 4.5.5 have unknown impact and attack vectors related to (1) mod_l…
-
Unscored —CVE-2008-0496 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in AmpJuke 0.7.0 allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2008-0497 Public exploit
Cross-site scripting (XSS) vulnerability in action.php in Nucleus CMS 3.31 allows remote attackers to inject arbitrary …
-
Unscored —
SQL injection vulnerability in Mambo LaiThai 4.5.5 allows remote attackers to execute arbitrary SQL commands via unspec…
-
Unscored —CVE-2008-0489 Public exploit
Directory traversal vulnerability in install.php in Clansphere 2007.4.4 allows remote attackers to include and execute …
-
Unscored —CVE-2008-0498 Public exploit
SQL injection vulnerability in main_bigware_53.tpl.php in Bigware Shop 2.0 allows remote attackers to execute arbitrary…
-
Unscored —CVE-2008-0487 Public exploit
Multiple SQL injection vulnerabilities in login.asp in ASPired2Protect allow remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2008-0490 Public exploit
SQL injection vulnerability in functions/editevent.php in the WP-Cal 0.3 plugin for WordPress allows remote attackers t…
-
Unscored —CVE-2008-0491 Public exploit
SQL injection vulnerability in fim_rss.php in the fGallery 2.4.1 plugin for WordPress allows remote attackers to execut…