Skip to content
OpenAdvisories

Archive

13 February 2008

Vulnerabilities first published on this day (UTC), newest first.

33 results · Clear filters · Feed

  • Unscored —
    CVE-2008-0773 Public exploit

    SQL injection vulnerability in Phil Taylor Comments (com_comments, aka Review Script) 0.5.8.5g and earlier component fo…

  • Unscored —
    CVE-2008-0776 Public exploit

    SQL injection vulnerability in detail.php in iTechBids Gold 6.0 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2008-0772 Public exploit

    SQL injection vulnerability in index.php in the com_doc component for Joomla! and Mambo allows remote attackers to exec…

  • Unscored —
    CVE-2008-0770 Public exploit

    SQL injection vulnerability in arcade.php in ibProArcade 3.3.0 and earlier allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2006-7231 Public exploit

    SQL injection vulnerability in display.asp in Civica Software Civica allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2003-1541 Public exploit

    PlanetMoon Guestbook tr3.a stores sensitive information under the web root with insufficient access control, which allo…

  • Unscored —
    CVE-2008-0763 Public exploit

    Stack-based buffer overflow in NPSpcSVR.exe in Larson Network Print Server (LstNPS) 9.4.2 build 105 and earlier allows …

  • Unscored —
    CVE-2008-0764 Public exploit

    Format string vulnerability in the logging function in Larson Network Print Server (LstNPS) 9.4.2 build 105 and earlier…

  • Unscored —
    CVE-2008-0761 Public exploit

    SQL injection vulnerability in index.php in the Prince Clan Chess Club (com_pcchess) 0.8 and earlier component for Joom…

  • Unscored —
    CVE-2008-0767 Public exploit

    ExtremeZ-IP.exe in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier does not verify that a certain "number of URL…

  • Unscored —
    CVE-2008-0760 Public exploit

    Directory traversal vulnerability in SafeNet Sentinel Protection Server 7.4.1.0 and earlier, and Sentinel Keys Server 1…

  • Unscored —
    CVE-2008-0756 Public exploit

    The LPD server in cyan soft Opium OPI Server 4.10.1028 and earlier; cyanPrintIP Easy OPI, Professional, and Basic 4.10.…

  • Unscored —
    CVE-2008-0748 Public exploit EPSS 16%

    Buffer overflow in the Sony AxRUploadServer.AxRUploadControl.1 ActiveX control in AxRUploadServer.dll 1.0.0.38 in SonyI…

  • Unscored —
    CVE-2008-0747 Public exploit

    Stack-based buffer overflow in COWON America jetAudio 7.0.5 and earlier allows user-assisted remote attackers to execut…

  • Unscored —
    CVE-2008-0749 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Calimero.CMS 3.3 allows remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2008-0753 Public exploit

    SQL injection vulnerability in calendar.php in Virtual War (VWar) 1.5 allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2008-0752 Public exploit

    SQL injection vulnerability in index.php in the Neogallery (com_neogallery) 1.1 component for Joomla! allows remote att…

  • Unscored —
    CVE-2008-0751 Public exploit

    Cross-site scripting (XSS) vulnerability in the Freetag before 2.96 plugin for S9Y Serendipity, when using Internet Exp…

  • Unscored —
    CVE-2008-0754 Public exploit

    Multiple SQL injection vulnerabilities in index.php in the Rapid Recipe (com_rapidrecipe) 1.6.5 component for Joomla! a…

  • Unscored —
    CVE-2008-0746 Public exploit

    SQL injection vulnerability in index.php in the Gallery (com_gallery) component for Mambo and Joomla! allows remote att…

  • Unscored —
    CVE-2008-0755 Public exploit

    Format string vulnerability in the ReportSysLogEvent function in the LPD server in cyan soft Opium OPI Server 4.10.1028…

  • Unscored —
    CVE-2008-0745 Public exploit

    Directory traversal vulnerability in aides/index.php in DomPHP 0.82 allows remote attackers to include and execute arbi…

  • Unscored —
    CVE-2008-0743 Public exploit

    PHP remote file inclusion vulnerability in members_help.php in Joovili 2.1 and earlier allows remote attackers to execu…

  • Unscored —
    CVE-2008-0744 Public exploit

    SQL injection vulnerability in user_login.asp in PreProjects.com Pre Hotels & Resorts Management System allows remote a…

  • Unscored —
    CVE-2008-0742 Public exploit

    Multiple directory traversal vulnerabilities in PowerScripts PowerNews 2.5.6 allow remote attackers to read and include…

  • Unscored —
    CVE-2003-1540 Public exploit

    WF-Chat 1.0 Beta stores sensitive information under the web root with insufficient access control, which allows remote …

  • Unscored —
    CVE-2008-0737 Public exploit

    SQL injection vulnerability in admin/utilities_ConfigHelp.asp in CandyPress (CP) 4.1.1.26, and other 4.x and 3.x versio…

  • Unscored —
    CVE-2008-0734 Public exploit

    SQL injection vulnerability in class_auth.php in Limbo CMS 1.0.4.2, and possibly earlier versions, allows remote attack…

  • Unscored —
    CVE-2008-0733 Public exploit

    SQL injection vulnerability in index.php in CS Team Counter Strike Portals allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2008-0735 Public exploit

    SQL injection vulnerability in mod/gallery/ajax/gallery_data.php in AuraCMS 2.2 allows remote attackers to execute arbi…

  • Unscored —
    CVE-2008-0738 Public exploit

    Multiple SQL injection vulnerabilities in CandyPress (CP) 4.1.1.26, and earlier 4.1.x versions, allow remote attackers …

  • Unscored —
    CVE-2008-0739 Public exploit

    SQL injection vulnerability in admin/SA_shipFedExMeter.asp in CandyPress (CP) 4.1.1.26, and earlier 4.x and 3.x version…

  • Unscored —
    CVE-2008-0736 Public exploit

    admin/SA_shipFedExMeter.asp in CandyPress (CP) 4.1.1.26, and possibly other 4.x and 3.x versions, allows remote attacke…