Archive
February 2008
Vulnerabilities first published in this month (UTC), newest first.
250 results · Clear filters · Feed
-
Unscored —CVE-2008-0723 Public exploit
Cross-site scripting (XSS) vulnerability in mynews.inc.php in MyNews 1.6.4, and other earlier 1.6.x versions, allows re…
-
Unscored —CVE-2008-0688 Public exploit
Cross-site scripting (XSS) vulnerability in catalog.php in Smartscript Domain Trader 2.0 allows remote attackers to inj…
-
Unscored —CVE-2008-0678 Public exploit
SQL injection vulnerability in index.php in BlogPHP 2.0 allows remote attackers to execute arbitrary SQL commands via t…
-
Unscored —CVE-2008-0685 Public exploit
SQL injection vulnerability in ViewCat.php in iTechClassifieds 3.0 allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2008-0700 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in Crux Software CruxCMS 3.0 allows remote attackers to inject a…
-
Unscored —CVE-2008-0675 Public exploit
SQL injection vulnerability in cms/index.pl in The Everything Development Engine in The Everything Development System P…
-
Unscored —CVE-2008-0683 Public exploit
SQL injection vulnerability in shiftthis-preview.php in the ShiftThis Newsletter (st_newsletter) plugin for WordPress a…
-
Unscored —CVE-2008-0676 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in A-Blog 2 allows remote attackers to inject arbitrary web scri…
-
Unscored —CVE-2008-0680 Public exploit
SNMPd in MikroTik RouterOS 3.2 and earlier allows remote attackers to cause a denial of service (daemon crash) via a cr…
-
Unscored —
Stack-based buffer overflow in the add_line_buffer function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attack…
-
Unscored —
Multiple heap-based buffer overflows in Titan FTP Server 6.03 and 6.0.5.549 allow remote attackers to cause a denial of…
-
Unscored —CVE-2008-0677 Public exploit
SQL injection vulnerability in blog.php in A-Blog 2 allows remote attackers to execute arbitrary SQL commands via the i…
-
Unscored —CVE-2008-0670 Public exploit
SQL injection vulnerability in index.php in the Noticias (com_noticias) 1.0 component for Joomla! allows remote attacke…
-
Unscored —CVE-2008-0682 Public exploit
SQL injection vulnerability in wordspew-rss.php in the Wordspew plugin before 3.72 for Wordpress allows remote attacker…
-
Unscored —CVE-2008-0689 Public exploit
SQL injection vulnerability in index.php in the Marketplace (com_marketplace) 1.1.1 and 1.1.1-pl1 component for Joomla!…
-
Unscored —CVE-2008-0695 Public exploit
SQL injection vulnerability in index.php in BookmarkX script 2007 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2008-0684 Public exploit
Cross-site scripting (XSS) vulnerability in ViewCat.php in iTechClassifieds 3.0 allows remote attackers to inject arbit…
-
Unscored —CVE-2008-0691 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in admin_panel.php in the Simon Elvery WP-Footnotes 2.2 plugin for …
-
Unscored —CVE-2008-0692 Public exploit
SQL injection vulnerability in bidhistory.php in iTechBids 3 Gold and 5.0 allows remote attackers to execute arbitrary …
-
Unscored —CVE-2008-0686 Public exploit
SQL injection vulnerability in index.php in the NeoReferences (com_neoreferences) 1.3.1 and 1.3.3 component for Joomla!…
-
Unscored —CVE-2008-0679 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in BlogPHP 2.0 allows remote attackers to inject arbitrary web sc…
-
Unscored —CVE-2008-0681 Public exploit
SQL injection vulnerability in index.php in PHPShop 0.8.1 allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2008-0703 Public exploit
Multiple directory traversal vulnerabilities in sflog! 0.96 allow remote attackers to read arbitrary files via a .. (do…
-
Unscored —CVE-2008-0690 Public exploit
SQL injection vulnerability in index.php in the mosDirectory (com_directory) 2.3.2 component for Joomla! allows remote …
-
Medium —
Exposure of Sensitive Information in Apache Tomcat
Apache Tomcat 6.0.0 through 6.0.14, 5.5.0 through 5.5.25, and 4.1.0 through 4.1.36 does not properly handle (1) double quote (") characters or (2) %5C (encoded backslash) sequences in a cookie value, which might cause sensitive information such as session IDs…
-
Unscored —CVE-2008-0418 Public exploit
Directory traversal vulnerability in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before…
-
Unscored —CVE-2008-0661 Public exploit
Buffer overflow in dBpowerAMP Audio Player Release 2 allows remote attackers to execute arbitrary code via a .M3U file …
-
Unscored —
Multiple stack-based buffer overflows in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.6.17.0, 4.5.70.0…
-
Unscored —
Stack-based buffer overflow in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.5.70 and earlier, as used …
-
Unscored —
The ipcomp6_input function in sys/netinet6/ipcomp_input.c in the KAME project before 20071201 does not properly check t…
-
Unscored —CVE-2008-0649 Public exploit
SQL injection vulnerability in detail.php in Astanda Directory Project (ADP) 1.2 and 1.3 allows remote attackers to exe…
-
Unscored —CVE-2008-0652 Public exploit
SQL injection vulnerability in index.php in the Downloads (com_downloads) component for Mambo and Joomla! allows remote…
-
Unscored —CVE-2008-0650 Public exploit
SQL injection vulnerability in login.php in Simple OS CMS 0.1c beta allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2008-0647 Public exploit
Multiple stack-based buffer overflows in the HanGamePluginCn18.HanGamePluginCn18.1 ActiveX control in HanGamePluginCn18…
-
Unscored —
Unrestricted file upload vulnerability in the FileUpload class running on the Symantec LiveState Apache Tomcat server, …
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Portail Web Php 2.5.1.1 allow remote attackers to execute arbitra…
-
Unscored —CVE-2008-0648 Public exploit
Multiple PHP remote file inclusion vulnerabilities in OpenSiteAdmin 0.9.1.1 and earlier allow remote attackers to execu…
-
Unscored —CVE-2008-0651 Public exploit
SQL injection vulnerability in login.php in Pedro Santana Codice CMS allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2008-0653 Public exploit
SQL injection vulnerability in index.php in the Ynews (com_ynews) 1.0.0 component for Joomla! allows remote attackers t…
-
Unscored —CVE-2008-0634 Public exploit
Buffer overflow in the NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll 3.0.0.1, as used in Sejoong Nam…