Archive
January 2008
Vulnerabilities first published in this month (UTC), newest first.
261 results · Clear filters · Feed
-
Unscored —CVE-2008-0140 Public exploit
Directory traversal vulnerability in error.php in Uebimiau Webmail 2.7.10 and 2.7.2 allows remote authenticated users t…
-
Unscored —CVE-2008-0137 Public exploit
PHP remote file inclusion vulnerability in config.inc.php in SNETWORKS PHP CLASSIFIEDS 5.0 allows remote attackers to e…
-
Unscored —CVE-2008-0143 Public exploit
PHP remote file inclusion vulnerability in common/db.php in samPHPweb, possibly 4.2.2 and others, as provided with SAM …
-
Unscored —CVE-2008-0141 Public exploit
actions.php in WebPortal CMS 0.6-beta generates predictable passwords containing only the time of day, which makes it e…
-
Unscored —CVE-2008-0135 Public exploit
Snitz Forums 2000 3.4.06 and earlier stores sensitive information under the web root with insufficient access control, …
-
Unscored —CVE-2008-0146 Public exploit
Cross-site scripting (XSS) vulnerability in the error page in W3-mSQL allows remote attackers to inject arbitrary web s…
-
Unscored —
PHP remote file inclusion vulnerability in index.php in NetRisk 1.9.7 and earlier allows remote attackers to execute ar…
-
Unscored —CVE-2008-0138 Public exploit
PHP remote file inclusion vulnerability in xoopsgallery/init_basic.php in the mod_gallery module for XOOPS, when regist…
-
Unscored —CVE-2008-0133 Public exploit
Multiple SQL injection vulnerabilities in Tribisur 2.1 and earlier allow remote attackers to execute arbitrary SQL comm…
-
Unscored —
Eval injection vulnerability in loudblog/inc/parse_old.php in Loudblog 0.8.0 and earlier allows remote attackers to exe…
-
Unscored —CVE-2008-0142 Public exploit
Multiple SQL injection vulnerabilities in WebPortal CMS 0.6-beta allow remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2008-0129 Public exploit
SQL injection vulnerability in starnet/addons/slideshow_full.php in Site@School 2.3.10 and earlier allows remote attack…
-
Unscored —CVE-2008-0132 Public exploit
Pragma FortressSSH 5.0 Build 4 Revision 293 and earlier handles long input to sshd.exe by creating an error-message win…
-
Unscored —CVE-2007-6671 Public exploit
SQL injection vulnerability in login_form.asp in Instant Softwares Dating Site allows remote attackers to execute arbit…
-
Unscored —CVE-2007-6673 Public exploit
Cross-site scripting (XSS) vulnerability in Makale Scripti allows remote attackers to inject arbitrary web script or HT…
-
Unscored —CVE-2008-0100 Public exploit
Stack-based buffer overflow in the Scene::errorf function in Scene.cpp in White_Dune 0.29 beta791 and earlier allows re…
-
Unscored —CVE-2008-0094 Public exploit
Multiple directory traversal vulnerabilities in MODx Content Management System 0.9.6.1 allow remote attackers to (1) in…
-
Unscored —
The SIP channel driver in Asterisk Open Source 1.4.x before 1.4.17, Business Edition before C.1.0-beta8, AsteriskNOW be…
-
Unscored —CVE-2008-0096 Public exploit
Multiple buffer overflows in Georgia SoftWorks SSH2 Server (GSW_SSHD) 7.01.0003 and earlier allow remote attackers to e…
-
Unscored —CVE-2008-0099 Public exploit
Multiple SQL injection vulnerabilities in MyPHP Forum 3.0 and earlier allow remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2007-6668 Public exploit
admin/uploadgames.php in MySpace Content Zone (MCZ) 3.x does not require administrative privileges, which allows remote…
-
Unscored —CVE-2007-6670 Public exploit
SQL injection vulnerability in search.php in PHCDownload 1.1.0 allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2007-6669 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in PHCDownload 1.1.0 allows remote attackers to inject arbitrary…
-
Unscored —CVE-2007-6654 Public exploit
Buffer overflow in a certain ActiveX control in Macrovision InstallShield Update Service Web Agent 5.1.100.47363 allows…
-
Unscored —CVE-2007-6658 Public exploit
SQL injection vulnerability in admin.php/vars.php in CustomCMS (CCMS) 3.1 Demo allows remote attackers to execute arbit…
-
Unscored —CVE-2007-6666 Public exploit
SQL injection vulnerability in rss.php in Zenphoto 1.1 through 1.1.3 allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2007-6647 Public exploit
SQL injection vulnerability in index.php in w-Agora 4.2.1 and earlier allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2007-6656 Public exploit
SQL injection vulnerability in content_css.php in the TinyMCE module for CMS Made Simple 1.2.2 and earlier allows remot…
-
Unscored —CVE-2007-6653 Public exploit
Directory traversal vulnerability in download.php in Mihalism Multi Host 2.0.7 allows remote attackers to read arbitrar…
-
Unscored —CVE-2007-6663 Public exploit
SQL injection vulnerability in (1) Puarcade.php and (2) PUarcade.html.php in Pragmatic Utopia PU Arcade (com_puarcade) …
-
Unscored —CVE-2007-6650 Public exploit
Unrestricted file upload vulnerability in fisheye/upload.php in Bitweaver R2 CMS allows remote attackers to upload arbi…
-
Unscored —CVE-2007-6665 Public exploit
SQL injection vulnerability in admin/login.asp in Netchemia oneSCHOOL allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2007-6657 Public exploit
PHP remote file inclusion vulnerability in source/includes/load_forum.php in Mihalism Multi Forum Host 3.0.x and earlie…
-
Unscored —CVE-2007-6648 Public exploit
Directory traversal vulnerability in index.php in SanyBee Gallery 0.1.0 and 0.1.1 allows remote attackers to include an…
-
Unscored —CVE-2007-6649 Public exploit
PHP remote file inclusion vulnerability in includes/tumbnail.php in MatPo Bilder Galerie 1.1 allows remote attackers to…
-
Unscored —CVE-2007-6655 Public exploit
PHP remote file inclusion vulnerability in includes/function.php in Kontakt Formular 1.4 allows remote attackers to exe…
-
Unscored —CVE-2007-6652 Public exploit
cpie.php in XCMS 1.83 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers …
-
Unscored —CVE-2007-6664 Public exploit
SQL injection vulnerability in index.php in WebPortal CMS 0.6.0 and earlier allows remote attackers to execute arbitrar…
-
Unscored —CVE-2007-6651 Public exploit
Directory traversal vulnerability in wiki/edit.php in Bitweaver R2 CMS allows remote attackers to obtain sensitive info…
-
Unscored —CVE-2007-6667 Public exploit
SQL injection vulnerability in faq.php in MyPHP Forum 3.0 and earlier allows remote attackers to execute arbitrary SQL …