Skip to content
OpenAdvisories

Archive

19 February 2008

Vulnerabilities first published on this day (UTC), newest first.

25 results · Feed

  • Unscored —
    CVE-2008-0830 Public exploit

    The Digital Photo Access Protocol (DPAP) server for iPhoto 4.0.3 allows remote attackers to cause a denial of service (…

  • Unscored —

    Multiple unspecified vulnerabilities in Lyris ListManager 8.x before 8.95d, 9.2 before 9.2c, and 9.3 before 9.3b allow …

  • Unscored —
    CVE-2008-0829 Public exploit

    SQL injection vulnerability in jooget.php in the Joomlapixel Jooget! (com_jooget) 2.6.8 component for Joomla! and Mambo…

  • Unscored —
    CVE-2008-0827 Public exploit

    SQL injection vulnerability in the Books module of PHP-Nuke allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.5.5 and earlier allow remote attackers to inject arbitr…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Claroline before 1.8.9 allows remote attackers to inject arbitrary web scri…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in index.php in Etomite 0.6.1.4 Final allows remote attackers to inject arbitr…

  • Unscored —

    Unspecified vulnerability in the php2phps function in Claroline before 1.8.9 has unknown impact and attack vectors.

  • Unscored —
    CVE-2008-0819 Public exploit

    Directory traversal vulnerability in index.php in PlutoStatus Locator 1.0 pre alpha allows remote attackers to include …

  • Unscored —
    CVE-2008-0822 Public exploit

    Directory traversal vulnerability in index.php in Scribe 0.2 allows remote attackers to read arbitrary local files via …

  • Unscored —

    SQL injection vulnerability in Claroline before 1.8.9 allows remote attackers to execute arbitrary SQL commands via uns…

  • Unscored —

    Unspecified vulnerability in the Header Image Module before 5.x-1.1 for Drupal allows remote attackers to access the ad…

  • Unscored —
    CVE-2008-0818 Public exploit

    Multiple directory traversal vulnerabilities in freePHPgallery 0.6 allow remote attackers to include and execute arbitr…

  • Unscored —
    CVE-2008-0821 Public exploit

    SQL injection vulnerability in admin/traffic/knowledge_searchm.php in OSI Codes Inc. PHP Live! 3.2.2 allows remote atta…

  • Unscored —
    CVE-2008-0814 Public exploit

    Directory traversal vulnerability in download.php in Tracking Requirements & Use Cases (TRUC) 0.11.0 allows remote atta…

  • Unscored —
    CVE-2008-0816 Public exploit

    SQL injection vulnerability in the com_sg component for Joomla! and Mambo allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2008-0810 Public exploit

    SQL injection vulnerability in the com_scheduling module for Joomla! and Mambo allows remote attackers to execute arbit…

  • Unscored —
    CVE-2008-0817 Public exploit

    SQL injection vulnerability in the com_filebase component for Joomla! and Mambo allows remote attackers to execute arbi…

  • Unscored —
    CVE-2008-0812 Public exploit

    Directory traversal vulnerability in DMS/index.php in BanPro DMS 1.0 allows remote attackers to include and execute arb…

  • Unscored —
    CVE-2008-0813 Public exploit

    Directory traversal vulnerability in Download.php in XPWeb 3.0.1, 3.3.2, and possibly other versions, allows remote att…

  • Unscored —
    CVE-2008-0811 Public exploit

    Multiple SQL injection vulnerabilities in AuraCMS 1.62 allow remote attackers to execute arbitrary SQL commands via (1)…

  • Unscored —
    CVE-2008-0815 Public exploit

    SQL injection vulnerability in the com_mezun component for Joomla! allows remote attackers to execute arbitrary SQL com…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the htmlscrubber in Ikiwiki before 1.1.46 allows remote attackers to inject…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the meta plugin in Ikiwiki before 1.1.47 allows remote attackers to inject …

  • Unscored —

    lib/Driver/sql.php in Turba 2 (turba2) Contact Manager H3 2.1.x before 2.1.7 and 2.2.x before 2.2-RC3, as used in produ…