Skip to content
OpenAdvisories

Archive

February 2008

Vulnerabilities first published in this month (UTC), newest first.

250 results · Clear filters · Feed

  • Unscored —
    CVE-2008-0922 Public exploit

    SQL injection vulnerability in the Manuales 0.1 module for PHP-Nuke allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2008-0919 Public exploit

    Cross-site scripting (XSS) vulnerability in session/login.php in Open Source Security Information Management (OSSIM) 0.…

  • Unscored —
    CVE-2008-0921 Public exploit

    SQL injection vulnerability in news.php in beContent 0.3.1 allows remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2008-0916 Public exploit

    SQL injection vulnerability in the Highwood Design hwdVideoShare (com_hwdvideoshare) 1.1.3 Alpha component for Joomla! …

  • Unscored —
    CVE-2008-0918 Public exploit

    SQL injection vulnerability in includes/count_dl_or_link.inc.php in the astatsPRO (com_astatspro) 1.0.1 component for J…

  • Unscored —
    CVE-2008-0905 Public exploit

    Directory traversal vulnerability in globsy_edit.php in Globsy 1.0 allows remote attackers to read arbitrary files via …

  • Unscored —
    CVE-2008-0907 Public exploit

    SQL injection vulnerability in the Inhalt module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2008-0906 Public exploit

    SQL injection vulnerability in the Docum module in PHP-Nuke allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2008-0879 Public exploit

    SQL injection vulnerability in modules.php in the Web_Links module for PHP-Nuke allows remote attackers to execute arbi…

  • Unscored —
    CVE-2008-0873 Public exploit

    SQL injection vulnerability in index.php in the jlmZone Classifieds module for XOOPS allows remote attackers to execute…

  • Unscored —
    CVE-2008-0872 Public exploit

    Cross-site scripting (XSS) vulnerability in SmarterTools SmarterMail Enterprise 4.3 allows remote attackers to inject a…

  • Unscored —
    CVE-2008-0871 Public exploit EPSS 33%

    Multiple stack-based buffer overflows in Now SMS/MMS Gateway 2007.06.27 and earlier allow remote attackers to execute a…

  • Unscored —
    CVE-2008-0878 Public exploit

    SQL injection vulnerability in index.php in the MyAnnonces 1.7 and earlier module for RunCMS allows remote attackers to…

  • Unscored —
    CVE-2008-0881 Public exploit

    SQL injection vulnerability in modules.php in the Okul 1.0 module for PHP-Nuke allows remote attackers to execute arbit…

  • Unscored —
    CVE-2008-0874 Public exploit

    SQL injection vulnerability in index.php in the eEmpregos module for XOOPS allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2008-0880 Public exploit

    SQL injection vulnerability in modules.php in the EasyContent module for PHP-Nuke allows remote attackers to execute ar…

  • Unscored —
    CVE-2008-0877 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Jinzora Media Jukebox 2.7.5 allow remote attackers to inject arb…

  • Unscored —
    CVE-2008-0857 Public exploit

    SQL injection vulnerability in index.php in WoltLab Burning Board 3.0.3 PL 1 allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2008-0852 Public exploit

    freeSSHd 1.2 and earlier allows remote attackers to cause a denial of service (crash) via a SSH2_MSG_NEWKEYS packet to …

  • Unscored —
    CVE-2008-0855 Public exploit

    SQL injection vulnerability in the Facile Forms (com_facileforms) component for Joomla! and Mambo allows remote attacke…

  • Unscored —
    CVE-2008-0854 Public exploit

    SQL injection vulnerability in the com_salesrep component for Joomla! and Mambo allows remote attackers to execute arbi…

  • Unscored —
    CVE-2008-0851 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.4 allow remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2008-0853 Public exploit

    SQL injection vulnerability in the com_detail component for Joomla! and Mambo allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2008-0847 Public exploit

    SQL injection vulnerability in print.php in the myTopics module for XOOPS allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2008-0850 Public exploit

    Multiple SQL injection vulnerabilities in Dokeos 1.8.4 allow remote attackers to execute arbitrary SQL commands via the…

  • Unscored —
    CVE-2008-0856 Public exploit

    Multiple SQL injection vulnerabilities in e-Vision CMS 2.02 allow remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2008-0843 Public exploit

    StatCounteX 3.0 and 3.1 allows remote attackers to obtain sensitive information and edit configuration scripts via a di…

  • Unscored —
    CVE-2008-0840 Public exploit

    Directory traversal vulnerability in view_member.php in Public Warehouse LightBlog 9.6 allows remote attackers to inclu…

  • Unscored —
    CVE-2008-0838 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the web administration interface in Sophos ES1000 and ES4000 Ema…

  • Unscored —
    CVE-2008-0845 Public exploit

    SQL injection vulnerability in wp-people-popup.php in Dean Logan WP-People plugin 1.6.1 for WordPress allows remote att…

  • Unscored —
    CVE-2008-0846 Public exploit

    SQL injection vulnerability in index.php in the com_profile component for Joomla! allows remote attackers to execute ar…

  • Unscored —
    CVE-2008-0839 Public exploit

    SQL injection vulnerability in refer.php in the astatsPRO (com_astatspro) 1.0 component for Joomla! allows remote attac…

  • Unscored —
    CVE-2008-0835 Public exploit

    SQL injection vulnerability in indexen.php in Simple CMS 1.0.3 and earlier allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2008-0841 Public exploit

    SQL injection vulnerability in index.php in the Giorgio Nordo Ricette (com_ricette) 1.0 component for Joomla! and Mambo…

  • Unscored —
    CVE-2008-0844 Public exploit

    SQL injection vulnerability in index.php in the PccookBook (com_pccookbook) component for Joomla! allows remote attacke…

  • Unscored —
    CVE-2008-0842 Public exploit

    SQL injection vulnerability in index.php in the Classifier (com_clasifier) component for Joomla! allows remote attacker…

  • Unscored —
    CVE-2008-0832 Public exploit

    SQL injection vulnerability in index.php in the Kemas Antonius com_quran 1.1 and earlier component for Mambo and Joomla…

  • Unscored —
    CVE-2008-0831 Public exploit

    Multiple SQL injection vulnerabilities in the Rapid Recipe (com_rapidrecipe) 1.6.5 and earlier component for Joomla! al…

  • Unscored —
    CVE-2008-0833 Public exploit

    SQL injection vulnerability in index.php in the com_galeria component for Joomla! allows remote attackers to execute ar…

  • Unscored —
    CVE-2008-0830 Public exploit

    The Digital Photo Access Protocol (DPAP) server for iPhoto 4.0.3 allows remote attackers to cause a denial of service (…