Archive
15 January 2008
Vulnerabilities first published on this day (UTC), newest first.
35 results · Feed
-
Unscored —
ngIRCd 0.10.x before 0.10.4 and 0.11.0 before 0.11.0-pre2 allows remote attackers to cause a denial of service (crash) …
-
Unscored —CVE-2008-0280 Public exploit
SQL injection vulnerability in index.php in MTCMS 2.0 and possibly earlier versions allows remote attackers to execute …
-
Unscored —CVE-2008-0282 Public exploit
SQL injection vulnerability in welcome/inscription.php in DomPHP 0.81 and earlier allows remote attackers to execute ar…
-
Unscored —CVE-2008-0283 Public exploit
PHP remote file inclusion vulnerability in /aides/index.php in DomPHP 0.81 and earlier allows remote attackers to execu…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Simple Machines Forum (SMF) 1.1.4 and earlier allows remote attackers to in…
-
Unscored —CVE-2008-0281 Public exploit
SQL injection vulnerability in liste.php in ID-Commerce 2.0 and earlier allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2008-0262 Public exploit
SQL injection vulnerability in includes/articleblock.php in Agares PhpAutoVideo 2.21 allows remote attackers to execute…
-
Unscored —CVE-2008-0268 Public exploit
Cross-site scripting (XSS) vulnerability in view.php in eTicket 1.5.5.2 allows remote attackers to inject arbitrary web…
-
Unscored —CVE-2008-0278 Public exploit
SQL injection vulnerability in index.php in X7 Chat 2.0.5 and possibly earlier allows remote attackers to execute arbit…
-
Unscored —
Unspecified vulnerability in the dotoprocs function in Sun Solaris 10 allows local users to cause a denial of service (…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the aggregator module in Drupal 4.7.x before 4.7.11 and 5.x before 5…
-
Unscored —
SQL injection vulnerability in Gforge 4.6.99 and earlier allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2008-0270 Public exploit
SQL injection vulnerability in index.php in TaskFreak! 0.6.1 and earlier allows remote authenticated users to execute a…
-
Unscored —CVE-2008-0256 Public exploit
Multiple SQL injection vulnerabilities in Matteo Binda ASP Photo Gallery 1.0 allow remote attackers to execute arbitrar…
-
Unscored —
Cross-site scripting (XSS) vulnerability in search.pl in Dansie Search Engine 2.7 allows remote attackers to inject arb…
-
Unscored —CVE-2008-0259 Public exploit
Multiple directory traversal vulnerabilities in _mg/php/mg_thumbs.php in minimal Gallery 0.8 allow remote attackers to …
-
Unscored —CVE-2008-0255 Public exploit
SQL injection vulnerability in archive.php in iGaming 1.5, and 1.3.1 and earlier, allows remote attackers to execute ar…
-
Unscored —
Unspecified vulnerability in the Fileshare module for Drupal allows remote authenticated users with node-creation privi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Devel module before 5.x-0.1 for Drupal allows remote attackers to injec…
-
Unscored —CVE-2008-0253 Public exploit
SQL injection vulnerability in full_text.php in Binn SBuilder allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2008-0265 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the Search function in the web management interface in F5 BIG-IP…
-
Unscored —
The Atom 4.7 before 4.7.x-1.0 and 5.x before 5.x-1.0 module for Drupal does not properly manage permissions for node (1…
-
Unscored —
VFS in the Linux kernel before 2.6.22.16, and 2.6.23.x before 2.6.23.14, performs tests of access mode by using the fla…
-
Unscored —
Interpretation conflict in Drupal 4.7.x before 4.7.11 and 5.x before 5.6, when Internet Explorer 6 is used, allows remo…
-
Unscored —CVE-2008-0258 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in PHP Running Management (phpRunMan) before 1.0.3 allows remote …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Drupal 4.7.x and 5.x, when certain .htaccess protections are disabled, allo…
-
Unscored —
Unspecified vulnerability in the search component and module in Mambo 4.5.x and 4.6.x allows remote attackers to cause …
-
Unscored —
Unspecified vulnerability in the Meta Tags (aka Nodewords) 5.x-1.6 module for Drupal, when images are permitted in node…
-
Unscored —CVE-2008-0260 Public exploit
minimal Gallery 0.8 allows remote attackers to obtain configuration information via a direct request to php_info.php, w…
-
Unscored —CVE-2008-0266 Public exploit
Cross-site request forgery (CSRF) vulnerability in admin.php in eTicket 1.5.5.2 allows remote attackers to change the a…
-
Unscored —CVE-2008-0267 Public exploit
Multiple SQL injection vulnerabilities in eTicket 1.5.5.2 allow remote authenticated users to execute arbitrary SQL com…
-
Unscored —
The editor deletion form in BUEditor 4.7.x before 4.7.x-1.0 and 5.x before 5.x-1.1, a module for Drupal, does not follo…
-
Unscored —CVE-2008-0279 Public exploit
SQL injection vulnerability in liretopic.php in Xforum 1.4 and possibly others allows remote attackers to execute arbit…
-
Unscored —CVE-2008-0254 Public exploit
SQL injection vulnerability in activate.php in TutorialCMS (aka Photoshop Tutorials) 1.02, when magic_quotes_gpc is dis…
-
Unscored —
The SIP module in Ingate Firewall before 4.6.1 and SIParator before 4.6.1 does not reuse SIP media ports in unspecified…