Skip to content
OpenAdvisories

Archive

27 February 2008

Vulnerabilities first published on this day (UTC), newest first.

19 results · Feed

  • Unscored —

    Unspecified vulnerability in Parallels SiteStudio before 1.7.2, and 1.8.x before 1.8b, as used in Parallels H-Sphere 3.…

  • Unscored —
    CVE-2008-1042 Public exploit

    Directory traversal vulnerability in include/body.inc.php in Linux Web Shop (LWS) php Download Manager 1.0 and 1.1 allo…

  • Unscored —
    CVE-2008-1044 Public exploit

    Stack-based buffer overflow in the Quantum Streaming Player (Quantum Streaming IE Player) ActiveX control (aka QSP2IE.Q…

  • Unscored —
    CVE-2008-1053 Public exploit

    Multiple SQL injection vulnerabilities in the Kose_Yazilari module for PHP-Nuke allow remote attackers to execute arbit…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in manager/xmedia.php in Plume CMS 1.2.2 allows remote attackers to inject arb…

  • Unscored —
    CVE-2008-1038 Public exploit

    PHP remote file inclusion vulnerability in mod/mod.extmanager.php in DBHcms 1.1.4 and earlier allows remote attackers t…

  • Unscored —
    CVE-2008-1037 Public exploit

    Cross-site scripting (XSS) vulnerability in the file listing function in the web management interface in Packeteer Pack…

  • Unscored —
    CVE-2008-1054 Public exploit

    Stack-based buffer overflow in the _lib_spawn_user_getpid function in (1) swatch.exe and (2) surgemail.exe in NetWin Su…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in mwhois.php in Matt Wilson Matt's Whois (MWhois) allows remote attackers to …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in tiki-edit_article.php in TikiWiki before 1.9.10.1 allows remote attackers t…

  • Unscored —
    CVE-2008-1052 Public exploit

    The administration web interface in NetWin SurgeFTP 2.3a2 and earlier allows remote attackers to cause a denial of serv…

  • Unscored —
    CVE-2008-1043 Public exploit EPSS 49%

    PHP remote file inclusion vulnerability in templates/default/header.inc.php in Linux Web Shop (LWS) php User Base 1.3 B…

  • Low —
    CVE-2008-1045 Public exploit

    Alkacon OpenCMS XSS via file tree navigation in system/workplace/views/explorer/tree_files.jsp

    Cross-site scripting (XSS) vulnerability in the file tree navigation function in system/workplace/views/explorer/tree_files.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the resource parameter.

  • Unscored —

    Buffer overflow in the Single Sign-On function in Fujitsu Interstage Application Server 8.0.0 through 8.0.3 and 9.0.0, …

  • Unscored —
    CVE-2008-1046 Public exploit EPSS 21%

    PHP remote file inclusion vulnerability in footer.php in Quinsonnas Mail Checker 1.55 allows remote attackers to execut…

  • Unscored —
    CVE-2008-1051 Public exploit EPSS 21%

    PHP remote file inclusion vulnerability in include/body_comm.inc.php in phpProfiles 4.5.2 BETA allows remote attackers …

  • Unscored —
    CVE-2008-1055 Public exploit

    Format string vulnerability in webmail.exe in NetWin SurgeMail 38k4 and earlier and beta 39a, and WebMail 3.1s and earl…

  • Unscored —
    CVE-2008-1050 Public exploit

    SQL injection vulnerability in index.php in Softbiz Jokes & Funny Pics Script allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2008-1039 Public exploit

    SQL injection vulnerability in question.asp in PORAR WEBBOARD allows remote attackers to execute arbitrary SQL commands…