Archive
January 2008
Vulnerabilities first published in this month (UTC), newest first.
261 results · Clear filters · Feed
-
Unscored —CVE-2008-0406 Public exploit
HTTP File Server (HFS) before 2.2c, when account names are used as log filenames, allows remote attackers to cause a de…
-
Unscored —CVE-2008-0458 Public exploit
Directory traversal vulnerability in function/sources.php in SLAED CMS 2.5 Lite allows remote attackers to include and …
-
Unscored —CVE-2008-0465 Public exploit
Directory traversal vulnerability in optimizer.php in Seagull 0.6.3 allows remote attackers to read arbitrary files via…
-
Unscored —CVE-2008-0459 Public exploit
Directory traversal vulnerability in update/index.php in Liquid-Silver CMS 0.35, when magic_quotes_gpc is disabled, all…
-
Unscored —CVE-2008-0464 Public exploit
Directory traversal vulnerability in archiv.cgi in absofort aconon Mail 2007 Enterprise SQL 11.7.0 and Mail 2004 Enterp…
-
Unscored —CVE-2008-0461 Public exploit
SQL injection vulnerability in index.php in the Search module in PHP-Nuke 8.0 FINAL and earlier, when magic_quotes_gpc …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the mod_negotiation module in the Apache HTTP Server 2.2.6 and earlier in t…
-
Unscored —CVE-2007-4850 Public exploit
curl/interface.c in the cURL library (aka libcurl) in PHP 5.2.4 and 5.2.5 allows context-dependent attackers to bypass …
-
Unscored —CVE-2008-0446 Public exploit
SQL injection vulnerability in voircom.php in LulieBlog 1.02 allows remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2008-0442 Public exploit
PHP remote file inclusion vulnerability in inc/linkbar.php in Small Axe Weblog 0.3.1 allows remote attackers to execute…
-
Unscored —CVE-2008-0453 Public exploit
SQL injection vulnerability in list.php in Easysitenetwork Recipe allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2008-0452 Public exploit
Directory traversal vulnerability in articles.php in Siteman 1.1.9 allows remote attackers to read arbitrary files via …
-
Unscored —CVE-2008-0451 Public exploit
Multiple SQL injection vulnerabilities in PacerCMS 0.6 allow remote authenticated users to execute arbitrary SQL comman…
-
Unscored —
Heap-based buffer overflow in the FileUploader.FUploadCtl.1 ActiveX control in FileUploader.dll 2.0.0.2 in Lycos FileUp…
-
Unscored —CVE-2008-0447 Public exploit
SQL injection vulnerability in index.php in Foojan WMS PHP Weblog 1.0 allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2008-0440 Public exploit
AlstraSoft Forum Pay Per Post Exchange 2.0 stores passwords in cleartext, which makes it easier for attackers to access…
-
Unscored —CVE-2008-0432 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in phpAutoVideo 2.21 and earlier allows remote attackers to injec…
-
Unscored —
Multiple buffer overflows in the WebHPVCInstall.HPVirtualRooms14 ActiveX control in HPVirtualRooms14.dll 1.0.0.100, as …
-
Unscored —CVE-2008-0439 Public exploit
Cross-site scripting (XSS) vulnerability in templates/default/admincp/attachments_header.php in DeluxeBB 1.1 allows rem…
-
Unscored —CVE-2008-0430 Public exploit
SQL injection vulnerability in form.php in 360 Web Manager 3.0 allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2008-0429 Public exploit
SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange 2.0 allows remote attackers to execu…
-
Unscored —
Format string vulnerability in the AXIMilter module in AXIGEN Mail Server 5.0.2 allows remote attackers to execute arbi…
-
Unscored —CVE-2008-0424 Public exploit
SQL injection vulnerability in blog.php in Mooseguy Blog System (MGBS) 1.0 allows remote attackers to execute arbitrary…
-
Unscored —CVE-2008-0427 Public exploit
Directory traversal vulnerability in file.php in bloofoxCMS 0.3 allows remote attackers to read arbitrary files via a .…
-
Unscored —CVE-2008-0425 Public exploit
Absolute path traversal vulnerability in explorerdir.php in Frimousse 0.0.2 allows remote attackers to read arbitrary f…
-
Unscored —CVE-2008-0433 Public exploit
PHP remote file inclusion vulnerability in theme/phpAutoVideo/LightTwoOh/sidebar.php in Agares phpAutoVideo 2.21 and ea…
-
Unscored —CVE-2008-0422 Public exploit
SQL injection vulnerability in mail.php in boastMachine (aka bMachine) 3.1 and earlier allows remote attackers to execu…
-
Unscored —CVE-2008-0436 Public exploit
Cross-site scripting (XSS) vulnerability in profile-upload/upload.asp in PD9 Software MegaBBS 1.5.14b allows remote att…
-
Unscored —CVE-2008-0431 Public exploit
Directory traversal vulnerability in administrator/download.php in IDMOS (aka Phoenix) 1.0 allows remote attackers to r…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Lama Software allow remote attackers to execute arbitrary PHP cod…
-
Unscored —CVE-2008-0435 Public exploit
Directory traversal vulnerability in index.php in OZJournals 2.1.1 allows remote attackers to read portions of arbitrar…
-
Unscored —CVE-2008-0428 Public exploit
Multiple SQL injection vulnerabilities in the login function in system/class_permissions.php in bloofoxCMS 0.3 allow re…
-
Unscored —CVE-2008-0438 Public exploit
Cross-site scripting (XSS) vulnerability in the font rendering functionality in Novemberborn sIFR 2.0.2 allows remote a…
-
Unscored —CVE-2008-0421 Public exploit
SQL injection vulnerability in Invision Gallery 2.0.7 and earlier allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2008-0398 Public exploit
Cross-site scripting (XSS) vulnerability in aflog 1.01, and possibly earlier versions, allows remote attackers to injec…
-
Unscored —CVE-2008-0400 Public exploit
Cross-site scripting (XSS) vulnerability in header.tpl.php in the modern template for Singapore 0.10.1 allows remote at…
-
Unscored —CVE-2008-0399 Public exploit
Multiple buffer overflows in Toshiba Surveillance (Surveillix) RecordSend ActiveX control (MeIpCamX.DLL 1.0.0.4) allow …
-
Unscored —CVE-2008-0403 Public exploit
The web server in Belkin Wireless G Plus MIMO Router F5D9230-4 does not require authentication for SaveCfgFile.cgi, whi…
-
Unscored —
Buffer overflow in Citadel SMTP server 7.10 and earlier allows remote attackers to execute arbitrary code via a long RC…
-
Unscored —CVE-2008-0397 Public exploit
Multiple SQL injection vulnerabilities in aflog 1.01, and possibly earlier versions, allow remote attackers to execute …