Archive
February 2008
Vulnerabilities first published in this month (UTC), newest first.
250 results · Clear filters · Feed
-
Unscored —CVE-2008-0829 Public exploit
SQL injection vulnerability in jooget.php in the Joomlapixel Jooget! (com_jooget) 2.6.8 component for Joomla! and Mambo…
-
Unscored —CVE-2008-0827 Public exploit
SQL injection vulnerability in the Books module of PHP-Nuke allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2008-0819 Public exploit
Directory traversal vulnerability in index.php in PlutoStatus Locator 1.0 pre alpha allows remote attackers to include …
-
Unscored —CVE-2008-0822 Public exploit
Directory traversal vulnerability in index.php in Scribe 0.2 allows remote attackers to read arbitrary local files via …
-
Unscored —CVE-2008-0818 Public exploit
Multiple directory traversal vulnerabilities in freePHPgallery 0.6 allow remote attackers to include and execute arbitr…
-
Unscored —CVE-2008-0821 Public exploit
SQL injection vulnerability in admin/traffic/knowledge_searchm.php in OSI Codes Inc. PHP Live! 3.2.2 allows remote atta…
-
Unscored —CVE-2008-0814 Public exploit
Directory traversal vulnerability in download.php in Tracking Requirements & Use Cases (TRUC) 0.11.0 allows remote atta…
-
Unscored —CVE-2008-0816 Public exploit
SQL injection vulnerability in the com_sg component for Joomla! and Mambo allows remote attackers to execute arbitrary …
-
Unscored —CVE-2008-0810 Public exploit
SQL injection vulnerability in the com_scheduling module for Joomla! and Mambo allows remote attackers to execute arbit…
-
Unscored —CVE-2008-0817 Public exploit
SQL injection vulnerability in the com_filebase component for Joomla! and Mambo allows remote attackers to execute arbi…
-
Unscored —CVE-2008-0812 Public exploit
Directory traversal vulnerability in DMS/index.php in BanPro DMS 1.0 allows remote attackers to include and execute arb…
-
Unscored —CVE-2008-0813 Public exploit
Directory traversal vulnerability in Download.php in XPWeb 3.0.1, 3.3.2, and possibly other versions, allows remote att…
-
Unscored —CVE-2008-0811 Public exploit
Multiple SQL injection vulnerabilities in AuraCMS 1.62 allow remote attackers to execute arbitrary SQL commands via (1)…
-
Unscored —CVE-2008-0815 Public exploit
SQL injection vulnerability in the com_mezun component for Joomla! allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2008-0804 Public exploit
PHP remote file inclusion vulnerability in usrgetform.html in Thecus N5200Pro NAS Server allows remote attackers to exe…
-
Unscored —CVE-2008-0805 Public exploit
Unrestricted file upload vulnerability in image.php in PHPizabi 0.848b C1 HFP1 allows remote attackers to execute arbit…
-
Unscored —
Multiple stack-based buffer overflows in the legacy mod_jk2 2.0.3-DEV and earlier Apache module allow remote attackers …
-
Unscored —CVE-2008-0800 Public exploit
SQL injection vulnerability in index.php in the McQuiz (com_mcquiz) 0.9 Final component for Joomla! allows remote attac…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in LookStrike Lan Manager 0.9 allow remote attackers to execute arbi…
-
Unscored —CVE-2008-0802 Public exploit
SQL injection vulnerability in index.php in the MediaSlide (com_mediaslide) 0.5 component for Joomla! allows remote att…
-
Unscored —CVE-2008-0798 Public exploit
Multiple directory traversal vulnerabilities in artmedic webdesign weblog 1.0, when magic_quotes_gpc is disabled, allow…
-
Unscored —CVE-2008-0796 Public exploit
SQL injection vulnerability in threads.php in Nuboard 0.5 allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2008-0795 Public exploit
SQL injection vulnerability in index.php in the MGFi XfaQ (com_xfaq) 1.2 component for Mambo and Joomla! allows remote …
-
Unscored —CVE-2008-0799 Public exploit
SQL injection vulnerability in index.php in the Quiz (com_quiz) 0.81 and earlier component for Mambo and Joomla! allows…
-
Unscored —CVE-2008-0801 Public exploit
SQL injection vulnerability in index.php in the PAXXGallery (com_paxxgallery) 0.2 component for Mambo and Joomla! allow…
-
Unscored —CVE-2008-0794 Public exploit
Directory traversal vulnerability in user/header.php in Affiliate Market 0.1 BETA allows remote attackers to include an…
-
Unscored —CVE-2008-0790 Public exploit
Directory traversal vulnerability in ipdsserver.exe in Intermate WinIPDS 3.3 G52-33-021 allows remote attackers to read…
-
Unscored —CVE-2008-0787 Public exploit
SQL injection vulnerability in inc/datahandlers/pm.php in MyBB before 1.2.12 allows remote authenticated users to execu…
-
Unscored —CVE-2008-0783 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allow remote a…
-
Unscored —CVE-2008-0785 Public exploit
Multiple SQL injection vulnerabilities in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allow remote authenticated …
-
Medium —
MoinMoin Directory traversal vulnerability
Directory traversal vulnerability in MoinMoin 1.5.8 and earlier allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the MOIN_ID user ID in a cookie for a userform action. NOTE: this issue can be leveraged for PHP code execution via the …
-
Unscored —CVE-2008-0026 Public exploit
SQL injection vulnerability in Cisco Unified CallManager/Communications Manager (CUCM) 5.0/5.1 before 5.1(3a) and 6.0/6…
-
Unscored —CVE-2008-0778 Public exploit
Multiple stack-based buffer overflows in an ActiveX control in QTPlugin.ocx for Apple QuickTime 7.4.1 and earlier allow…
-
Unscored —CVE-2008-0773 Public exploit
SQL injection vulnerability in Phil Taylor Comments (com_comments, aka Review Script) 0.5.8.5g and earlier component fo…
-
Unscored —CVE-2008-0776 Public exploit
SQL injection vulnerability in detail.php in iTechBids Gold 6.0 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2008-0772 Public exploit
SQL injection vulnerability in index.php in the com_doc component for Joomla! and Mambo allows remote attackers to exec…
-
Unscored —CVE-2008-0770 Public exploit
SQL injection vulnerability in arcade.php in ibProArcade 3.3.0 and earlier allows remote attackers to execute arbitrary…
-
Unscored —CVE-2006-7231 Public exploit
SQL injection vulnerability in display.asp in Civica Software Civica allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2003-1541 Public exploit
PlanetMoon Guestbook tr3.a stores sensitive information under the web root with insufficient access control, which allo…
-
Unscored —CVE-2008-0763 Public exploit
Stack-based buffer overflow in NPSpcSVR.exe in Larson Network Print Server (LstNPS) 9.4.2 build 105 and earlier allows …