Skip to content
OpenAdvisories

Archive

24 January 2008

Vulnerabilities first published on this day (UTC), newest first.

← December 2007 2008 / January /24 February 2008 →
  1. 1 
  2. 2 
  3. 311
  4. 454
  5. 5 
  6. 6 
  7. 7 
  8. 845
  9. 934
  10. 1038
  11. 1113
  12. 1216
  13. 13 
  14. 14 
  15. 1535
  16. 1628
  17. 1746
  18. 1823
  19. 19 
  20. 20 
  21. 21 
  22. 2216
  23. 2341
  24. 2414
  25. 2513
  26. 26 
  27. 27 
  28. 2810
  29. 2920
  30. 3015
  31. 3126
All Critical High Medium Low Exploited only Public exploit

14 results · Feed

  • Unscored —
    CVE-2008-0446 Public exploit

    SQL injection vulnerability in voircom.php in LulieBlog 1.02 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2008-0445

    The replace_inline_img function in elogd in Electronic Logbook (ELOG) before 2.7.1 allows remote attackers to cause a d…

  • Unscored —
    CVE-2008-0449

    SQL injection vulnerability in paypalresult.asp in VP-ASP Shopping Cart 6.50 and earlier allows remote attackers to exe…

  • Unscored —
    CVE-2008-0442 Public exploit

    PHP remote file inclusion vulnerability in inc/linkbar.php in Small Axe Weblog 0.3.1 allows remote attackers to execute…

  • Unscored —
    CVE-2008-0453 Public exploit

    SQL injection vulnerability in list.php in Easysitenetwork Recipe allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2008-0441

    IBM Tivoli Business Service Manager (TBSM) 4.1.1 stores passwords in cleartext (1) after external authentication, which…

  • Unscored —
    CVE-2008-0444

    Cross-site scripting (XSS) vulnerability in Electronic Logbook (ELOG) before 2.7.0 allows remote attackers to inject ar…

  • Unscored —
    CVE-2008-0452 Public exploit

    Directory traversal vulnerability in articles.php in Siteman 1.1.9 allows remote attackers to read arbitrary files via …

  • Unscored —
    CVE-2008-0451 Public exploit

    Multiple SQL injection vulnerabilities in PacerCMS 0.6 allow remote authenticated users to execute arbitrary SQL comman…

  • Unscored —
    CVE-2008-0450

    Multiple PHP remote file inclusion vulnerabilities in BLOG:CMS 4.2.1.c allow remote attackers to execute arbitrary PHP …

  • Unscored —
    CVE-2008-0443 Public exploit EPSS 13%

    Heap-based buffer overflow in the FileUploader.FUploadCtl.1 ActiveX control in FileUploader.dll 2.0.0.2 in Lycos FileUp…

  • Unscored —
    CVE-2008-0447 Public exploit

    SQL injection vulnerability in index.php in Foojan WMS PHP Weblog 1.0 allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2008-0448

    PHP remote file inclusion vulnerability in utils/class_HTTPRetriever.php in phpSearch allows remote attackers to execut…

  • Unscored —
    CVE-2007-6415

    scponly 4.6 and earlier allows remote authenticated users to bypass intended restrictions and execute arbitrary code by…