Skip to content
OpenAdvisories

Archive

February 2008

Vulnerabilities first published in this month (UTC), newest first.

← January 2008 2008 / February March 2008 →
  1. 119
  2. 2 
  3. 3 
  4. 415
  5. 533
  6. 634
  7. 717
  8. 820
  9. 92
  10. 10 
  11. 114
  12. 1291
  13. 1356
  14. 1410
  15. 1525
  16. 16 
  17. 17 
  18. 187
  19. 1925
  20. 2016
  21. 2140
  22. 2229
  23. 23 
  24. 24 
  25. 2525
  26. 266
  27. 2719
  28. 2823
  29. 2917
All Critical High Medium Low Exploited only Public exploit

533 results · Feed

  • Unscored —
    CVE-2008-0840 Public exploit

    Directory traversal vulnerability in view_member.php in Public Warehouse LightBlog 9.6 allows remote attackers to inclu…

  • Unscored —
    CVE-2008-0838 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the web administration interface in Sophos ES1000 and ES4000 Ema…

  • Unscored —
    CVE-2008-0845 Public exploit

    SQL injection vulnerability in wp-people-popup.php in Dean Logan WP-People plugin 1.6.1 for WordPress allows remote att…

  • Unscored —
    CVE-2008-0837

    Cross-site scripting (XSS) vulnerability in the log feature in the John Godley Search Unleashed 0.2.10 plugin for WordP…

    Web / CMS
  • Unscored —
    CVE-2008-0846 Public exploit

    SQL injection vulnerability in index.php in the com_profile component for Joomla! allows remote attackers to execute ar…

  • Unscored —
    CVE-2008-0839 Public exploit

    SQL injection vulnerability in refer.php in the astatsPRO (com_astatspro) 1.0 component for Joomla! allows remote attac…

  • Unscored —
    CVE-2008-0835 Public exploit

    SQL injection vulnerability in indexen.php in Simple CMS 1.0.3 and earlier allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2008-0834

    Cross-site scripting (XSS) vulnerability in Lotus Quickr for i5/OS before 8.0.0.2 Hotfix 11, when anonymous access is d…

  • Unscored —
    CVE-2008-0836

    Unspecified vulnerability in the vuidmice STREAMS modules in Sun Solaris 9 and 10 on x86 architectures allows local use…

  • Unscored —
    CVE-2008-0841 Public exploit

    SQL injection vulnerability in index.php in the Giorgio Nordo Ricette (com_ricette) 1.0 component for Joomla! and Mambo…

  • Unscored —
    CVE-2008-0844 Public exploit

    SQL injection vulnerability in index.php in the PccookBook (com_pccookbook) component for Joomla! allows remote attacke…

  • Unscored —
    CVE-2008-0842 Public exploit

    SQL injection vulnerability in index.php in the Classifier (com_clasifier) component for Joomla! allows remote attacker…

  • Unscored —
    CVE-2008-0832 Public exploit

    SQL injection vulnerability in index.php in the Kemas Antonius com_quran 1.1 and earlier component for Mambo and Joomla…

  • Unscored —
    CVE-2008-0831 Public exploit

    Multiple SQL injection vulnerabilities in the Rapid Recipe (com_rapidrecipe) 1.6.5 and earlier component for Joomla! al…

  • Unscored —
    CVE-2008-0833 Public exploit

    SQL injection vulnerability in index.php in the com_galeria component for Joomla! allows remote attackers to execute ar…

  • Unscored —
    CVE-2008-0830 Public exploit

    The Digital Photo Access Protocol (DPAP) server for iPhoto 4.0.3 allows remote attackers to cause a denial of service (…

  • Unscored —
    CVE-2007-6319

    Multiple unspecified vulnerabilities in Lyris ListManager 8.x before 8.95d, 9.2 before 9.2c, and 9.3 before 9.3b allow …

  • Unscored —
    CVE-2008-0829 Public exploit

    SQL injection vulnerability in jooget.php in the Joomlapixel Jooget! (com_jooget) 2.6.8 component for Joomla! and Mambo…

  • Unscored —
    CVE-2008-0827 Public exploit

    SQL injection vulnerability in the Books module of PHP-Nuke allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2008-0828

    Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.5.5 and earlier allow remote attackers to inject arbitr…

  • Unscored —
    CVE-2008-0826

    Cross-site scripting (XSS) vulnerability in Claroline before 1.8.9 allows remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2008-0820

    Cross-site scripting (XSS) vulnerability in index.php in Etomite 0.6.1.4 Final allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2008-0824

    Unspecified vulnerability in the php2phps function in Claroline before 1.8.9 has unknown impact and attack vectors.

  • Unscored —
    CVE-2008-0819 Public exploit

    Directory traversal vulnerability in index.php in PlutoStatus Locator 1.0 pre alpha allows remote attackers to include …

  • Unscored —
    CVE-2008-0822 Public exploit

    Directory traversal vulnerability in index.php in Scribe 0.2 allows remote attackers to read arbitrary local files via …

  • Unscored —
    CVE-2008-0825

    SQL injection vulnerability in Claroline before 1.8.9 allows remote attackers to execute arbitrary SQL commands via uns…

  • Unscored —
    CVE-2008-0823

    Unspecified vulnerability in the Header Image Module before 5.x-1.1 for Drupal allows remote attackers to access the ad…

  • Unscored —
    CVE-2008-0818 Public exploit

    Multiple directory traversal vulnerabilities in freePHPgallery 0.6 allow remote attackers to include and execute arbitr…

  • Unscored —
    CVE-2008-0821 Public exploit

    SQL injection vulnerability in admin/traffic/knowledge_searchm.php in OSI Codes Inc. PHP Live! 3.2.2 allows remote atta…

  • Unscored —
    CVE-2008-0814 Public exploit

    Directory traversal vulnerability in download.php in Tracking Requirements & Use Cases (TRUC) 0.11.0 allows remote atta…

  • Unscored —
    CVE-2008-0816 Public exploit

    SQL injection vulnerability in the com_sg component for Joomla! and Mambo allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2008-0810 Public exploit

    SQL injection vulnerability in the com_scheduling module for Joomla! and Mambo allows remote attackers to execute arbit…

    Web / CMS
  • Unscored —
    CVE-2008-0817 Public exploit

    SQL injection vulnerability in the com_filebase component for Joomla! and Mambo allows remote attackers to execute arbi…

  • Unscored —
    CVE-2008-0812 Public exploit

    Directory traversal vulnerability in DMS/index.php in BanPro DMS 1.0 allows remote attackers to include and execute arb…

  • Unscored —
    CVE-2008-0813 Public exploit

    Directory traversal vulnerability in Download.php in XPWeb 3.0.1, 3.3.2, and possibly other versions, allows remote att…

  • Unscored —
    CVE-2008-0811 Public exploit

    Multiple SQL injection vulnerabilities in AuraCMS 1.62 allow remote attackers to execute arbitrary SQL commands via (1)…

  • Unscored —
    CVE-2008-0815 Public exploit

    SQL injection vulnerability in the com_mezun component for Joomla! allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2008-0809

    Cross-site scripting (XSS) vulnerability in the htmlscrubber in Ikiwiki before 1.1.46 allows remote attackers to inject…

    ikiwiki Debian
  • Unscored —
    CVE-2008-0808

    Cross-site scripting (XSS) vulnerability in the meta plugin in Ikiwiki before 1.1.47 allows remote attackers to inject …

    ikiwiki Debian
  • Unscored —
    CVE-2008-0807

    lib/Driver/sql.php in Turba 2 (turba2) Contact Manager H3 2.1.x before 2.1.7 and 2.2.x before 2.2-RC3, as used in produ…