23 January 2008

32 results · Clear filters · Feed

• Unscored —
  CVE-2008-0440 Public exploit

  AlstraSoft Forum Pay Per Post Exchange 2.0 stores passwords in cleartext, which makes it easier for attackers to access…

  Jan 23, 2008
• Unscored —
  CVE-2008-0432 Public exploit

  Cross-site scripting (XSS) vulnerability in index.php in phpAutoVideo 2.21 and earlier allows remote attackers to injec…

  Jan 23, 2008
• Unscored —
  CVE-2008-0437 Public exploit EPSS 58%

  Multiple buffer overflows in the WebHPVCInstall.HPVirtualRooms14 ActiveX control in HPVirtualRooms14.dll 1.0.0.100, as …

  Jan 23, 2008
• Unscored —
  CVE-2008-0439 Public exploit

  Cross-site scripting (XSS) vulnerability in templates/default/admincp/attachments_header.php in DeluxeBB 1.1 allows rem…

  Jan 23, 2008
• Unscored —
  CVE-2008-0430 Public exploit

  SQL injection vulnerability in form.php in 360 Web Manager 3.0 allows remote attackers to execute arbitrary SQL command…

  Jan 23, 2008
• Unscored —
  CVE-2008-0429 Public exploit

  SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange 2.0 allows remote attackers to execu…

  Jan 23, 2008
• Unscored —
  CVE-2008-0434 Public exploit EPSS 10%

  Format string vulnerability in the AXIMilter module in AXIGEN Mail Server 5.0.2 allows remote attackers to execute arbi…

  Jan 23, 2008
• Unscored —
  CVE-2008-0424 Public exploit

  SQL injection vulnerability in blog.php in Mooseguy Blog System (MGBS) 1.0 allows remote attackers to execute arbitrary…

  Jan 23, 2008
• Unscored —
  CVE-2008-0427 Public exploit

  Directory traversal vulnerability in file.php in bloofoxCMS 0.3 allows remote attackers to read arbitrary files via a .…

  Jan 23, 2008
• Unscored —
  CVE-2008-0425 Public exploit

  Absolute path traversal vulnerability in explorerdir.php in Frimousse 0.0.2 allows remote attackers to read arbitrary f…

  Jan 23, 2008
• Unscored —
  CVE-2008-0433 Public exploit

  PHP remote file inclusion vulnerability in theme/phpAutoVideo/LightTwoOh/sidebar.php in Agares phpAutoVideo 2.21 and ea…

  Jan 23, 2008
• Unscored —
  CVE-2008-0422 Public exploit

  SQL injection vulnerability in mail.php in boastMachine (aka bMachine) 3.1 and earlier allows remote attackers to execu…

  Jan 23, 2008
• Unscored —
  CVE-2008-0436 Public exploit

  Cross-site scripting (XSS) vulnerability in profile-upload/upload.asp in PD9 Software MegaBBS 1.5.14b allows remote att…

  Jan 23, 2008
• Unscored —
  CVE-2008-0431 Public exploit

  Directory traversal vulnerability in administrator/download.php in IDMOS (aka Phoenix) 1.0 allows remote attackers to r…

  Jan 23, 2008
• Unscored —
  CVE-2008-0423 Public exploit EPSS 37%

  Multiple PHP remote file inclusion vulnerabilities in Lama Software allow remote attackers to execute arbitrary PHP cod…

  Jan 23, 2008
• Unscored —
  CVE-2008-0435 Public exploit

  Directory traversal vulnerability in index.php in OZJournals 2.1.1 allows remote attackers to read portions of arbitrar…

  Jan 23, 2008
• Unscored —
  CVE-2008-0428 Public exploit

  Multiple SQL injection vulnerabilities in the login function in system/class_permissions.php in bloofoxCMS 0.3 allow re…

  Jan 23, 2008
• Unscored —
  CVE-2008-0438 Public exploit

  Cross-site scripting (XSS) vulnerability in the font rendering functionality in Novemberborn sIFR 2.0.2 allows remote a…

  Jan 23, 2008
• Unscored —
  CVE-2008-0421 Public exploit

  SQL injection vulnerability in Invision Gallery 2.0.7 and earlier allows remote attackers to execute arbitrary SQL comm…

  Jan 23, 2008
• Unscored —
  CVE-2008-0398 Public exploit

  Cross-site scripting (XSS) vulnerability in aflog 1.01, and possibly earlier versions, allows remote attackers to injec…

  Jan 23, 2008
• Unscored —
  CVE-2008-0400 Public exploit

  Cross-site scripting (XSS) vulnerability in header.tpl.php in the modern template for Singapore 0.10.1 allows remote at…

  Jan 23, 2008
• Unscored —
  CVE-2008-0399 Public exploit

  Multiple buffer overflows in Toshiba Surveillance (Surveillix) RecordSend ActiveX control (MeIpCamX.DLL 1.0.0.4) allow …

  Jan 23, 2008
• Unscored —
  CVE-2008-0403 Public exploit

  The web server in Belkin Wireless G Plus MIMO Router F5D9230-4 does not require authentication for SaveCfgFile.cgi, whi…

  Jan 23, 2008
• Unscored —
  CVE-2008-0394 Public exploit EPSS 12%

  Buffer overflow in Citadel SMTP server 7.10 and earlier allows remote attackers to execute arbitrary code via a long RC…

  Jan 23, 2008
• Unscored —
  CVE-2008-0397 Public exploit

  Multiple SQL injection vulnerabilities in aflog 1.01, and possibly earlier versions, allow remote attackers to execute …

  Jan 23, 2008
• Unscored —
  CVE-2008-0396 Public exploit

  Directory traversal vulnerability in BitDefender Update Server (http.exe), as used in BitDefender products including Se…

  Jan 23, 2008
• Unscored —
  CVE-2008-0393 Public exploit

  Directory traversal vulnerability in info.php in GradMan 0.1.3 and earlier allows remote attackers to include and execu…

  Jan 23, 2008
• Unscored —
  CVE-2008-0392 Public exploit EPSS 30%

  Multiple buffer overflows in Microsoft Visual Basic Enterprise Edition 6.0 SP6 allow user-assisted remote attackers to …

  Jan 23, 2008
• Unscored —
  CVE-2008-0388 Public exploit

  SQL injection vulnerability in the WP-Forum 1.7.4 plugin for WordPress allows remote attackers to execute arbitrary SQL…

  Web / CMS
  Jan 23, 2008
• Unscored —
  CVE-2008-0390 Public exploit

  stat.php in AuraCMS 1.62, and Mod Block Statistik for AuraCMS, allows remote attackers to inject arbitrary PHP code int…

  Jan 23, 2008
• Unscored —
  CVE-2008-0391 Public exploit

  inc/elementz.php in aliTalk 1.9.1.1 does not properly verify authentication, which allows remote attackers to add an ar…

  Jan 23, 2008
• Unscored —
  CVE-2008-0128 Public exploit EPSS 20%

  The SingleSignOn Valve (org.apache.catalina.authenticator.SingleSignOn) in Apache Tomcat before 5.5.21 does not set the…

  Jan 23, 2008