Archive
February 2008
Vulnerabilities first published in this month (UTC), newest first.
250 results · Clear filters · Feed
-
Unscored —
Buffer overflow in demuxers/demux_asf.c (aka the ASF demuxer) in the xineplug_dmx_asf.so plugin in xine-lib before 1.1.…
-
Unscored —
Multiple stack-based buffer overflows in the PVATLCalendar.PVCalendar.1 ActiveX control in pvcalendar.ocx in the schedu…
-
Unscored —CVE-2008-1077 Public exploit
SQL injection vulnerability in index.php in the Simpleboard (com_simpleboard) 1.0.3 Stable component for Mambo and Joom…
-
Unscored —
PHP remote file inclusion vulnerability in lib/head_auth.php in GROUP-E 1.6.41 allows remote attackers to execute arbit…
-
Unscored —
Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier allows remote attack…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Quantum Game Library 0.7.2c allow remote attackers to execute arb…
-
Unscored —CVE-2008-1068 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Portail Web Php 2.5.1.1 and earlier allow remote attackers to exe…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in phpQLAdmin 2.2.7 allow remote attackers to execute arbitrary PHP …
-
Unscored —CVE-2003-1545 Public exploit
Absolute path traversal vulnerability in nukestyles.com viewpage.php addon for PHP-Nuke allows remote attackers to read…
-
Unscored —
PHP remote file inclusion vulnerability in modules/syntax_highlight.php in the Sniplets 1.1.2 and 1.2.2 plugin for Word…
-
Unscored —CVE-2008-1061 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allow remote a…
-
Unscored —
Eval injection vulnerability in modules/execute.php in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allows remote …
-
Unscored —CVE-2008-1042 Public exploit
Directory traversal vulnerability in include/body.inc.php in Linux Web Shop (LWS) php Download Manager 1.0 and 1.1 allo…
-
Unscored —CVE-2008-1044 Public exploit
Stack-based buffer overflow in the Quantum Streaming Player (Quantum Streaming IE Player) ActiveX control (aka QSP2IE.Q…
-
Unscored —CVE-2008-1053 Public exploit
Multiple SQL injection vulnerabilities in the Kose_Yazilari module for PHP-Nuke allow remote attackers to execute arbit…
-
Unscored —CVE-2008-1038 Public exploit
PHP remote file inclusion vulnerability in mod/mod.extmanager.php in DBHcms 1.1.4 and earlier allows remote attackers t…
-
Unscored —CVE-2008-1037 Public exploit
Cross-site scripting (XSS) vulnerability in the file listing function in the web management interface in Packeteer Pack…
-
Unscored —CVE-2008-1054 Public exploit
Stack-based buffer overflow in the _lib_spawn_user_getpid function in (1) swatch.exe and (2) surgemail.exe in NetWin Su…
-
Unscored —CVE-2008-1052 Public exploit
The administration web interface in NetWin SurgeFTP 2.3a2 and earlier allows remote attackers to cause a denial of serv…
-
Unscored —
PHP remote file inclusion vulnerability in templates/default/header.inc.php in Linux Web Shop (LWS) php User Base 1.3 B…
-
Low —CVE-2008-1045 Public exploit
Alkacon OpenCMS XSS via file tree navigation in system/workplace/views/explorer/tree_files.jsp
Cross-site scripting (XSS) vulnerability in the file tree navigation function in system/workplace/views/explorer/tree_files.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the resource parameter.
-
Unscored —
PHP remote file inclusion vulnerability in footer.php in Quinsonnas Mail Checker 1.55 allows remote attackers to execut…
-
Unscored —
PHP remote file inclusion vulnerability in include/body_comm.inc.php in phpProfiles 4.5.2 BETA allows remote attackers …
-
Unscored —CVE-2008-1055 Public exploit
Format string vulnerability in webmail.exe in NetWin SurgeMail 38k4 and earlier and beta 39a, and WebMail 3.1s and earl…
-
Unscored —CVE-2008-1050 Public exploit
SQL injection vulnerability in index.php in Softbiz Jokes & Funny Pics Script allows remote attackers to execute arbitr…
-
Unscored —CVE-2008-1039 Public exploit
SQL injection vulnerability in question.asp in PORAR WEBBOARD allows remote attackers to execute arbitrary SQL commands…
-
Unscored —
The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote …
-
Unscored —CVE-2008-0980 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Spyce - Python Server Pages (PSP) 2.1.3 allow remote attackers t…
-
Unscored —CVE-2008-0982 Public exploit
Spyce - Python Server Pages (PSP) 2.1.3 allows remote attackers to obtain sensitive information via a direct request fo…
-
Unscored —CVE-2008-0942 Public exploit
SQL injection vulnerability in GradebookStuScores.asp in Eagle Software Aeries Browser Interface (ABI) 3.8.2.8 allows r…
-
Unscored —
Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote attackers to cause a denial of service (NULL derefere…
-
Unscored —CVE-2008-0943 Public exploit
Multiple SQL injection vulnerabilities in Eagle Software Aeries Browser Interface (ABI) 3.7.2.2 allow remote attackers …
-
Unscored —CVE-2008-0939 Public exploit
Multiple SQL injection vulnerabilities in wppa.php in the WP Photo Album (WPPA) before 1.1 plugin for WordPress allow r…
-
Unscored —CVE-2008-0936 Public exploit
SQL injection vulnerability in index.php in the Prayer List (prayerlist) 1.04 module for XOOPS allows remote attackers …
-
Unscored —CVE-2008-0937 Public exploit
SQL injection vulnerability in index.php in the Tiny Event (tinyevent) 1.01 module for XOOPS allows remote attackers to…
-
Unscored —
Stack-based buffer overflow in the Novell iPrint Control ActiveX control in ienipp.ocx in Novell iPrint Client before 4…
-
Unscored —CVE-2008-0934 Public exploit
SQL injection vulnerability in modules.php in the NukeC 2.1 module for PHP-Nuke allows remote attackers to execute arbi…
-
Unscored —CVE-2008-0920 Public exploit
SQL injection vulnerability in port/modifyportform.php in Open Source Security Information Management (OSSIM) 0.9.9 rc5…
-
Unscored —CVE-2008-0911 Public exploit
SQL injection vulnerability in productdetails.php in iScripts MultiCart 2.0 allows remote authenticated users to execut…
-
Unscored —
Multiple heap-based buffer overflows in mlsrv10.exe in Sybase MobiLink 10.0.1.3629 and earlier, as used by SQL Anywhere…