Archive
25 March 2008
Vulnerabilities first published on this day (UTC), newest first.
21 results · Clear filters · Feed
-
Unscored —CVE-2008-1509 Public exploit
SQL injection vulnerability in index.php in XLPortal 2.2.4 and earlier allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2008-1512 Public exploit
Directory traversal vulnerability in admin/admin_xs.php in eXtreme Styles module (XS-Mod) 2.3.1 and 2.4.0 for phpBB all…
-
Low —CVE-2008-1510 Public exploit
Alkacon OpenCMS XSS via searchfilter or listSearchFilter parameter
Cross-site scripting (XSS) vulnerability in system/workplace/admin/accounts/users_list.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the (1) searchfilter or (2) listSearchFilter parameter.
-
Unscored —CVE-2008-1513 Public exploit
SQL injection vulnerability in index.php in Danneo CMS 0.5.1 and earlier, when the Referers statistics option is enable…
-
Unscored —CVE-2008-1508 Public exploit
SQL injection vulnerability in EfesTech E-Kontör and earlier allows remote attackers to execute arbitrary SQL commands …
-
Critical 9.8CVE-2008-1511 Public exploit
Multiple PHP remote file inclusion vulnerabilities in ooComments 1.0 allow remote attackers to execute arbitrary PHP co…
-
Unscored —CVE-2008-1507 Public exploit
PEEL, possibly 3.x and earlier, has (1) a default info@peel.fr account with password admin, and (2) a default contact@p…
-
Unscored —CVE-2008-1506 Public exploit
PEEL, possibly 3.x and earlier, allows remote attackers to obtain configuration information via a direct request to php…
-
Unscored —CVE-2008-1496 Public exploit
Multiple SQL injection vulnerabilities in PEEL, possibly 3.x and earlier, allow remote attackers to execute arbitrary S…
-
Unscored —CVE-2008-1499 Public exploit
Cross-site scripting (XSS) vulnerability in frontend/x/manpage.html in cPanel 11.18.3 and 11.21.0-BETA allows remote at…
-
Unscored —CVE-2008-1493 Public exploit
Directory traversal vulnerability in login.php in Cuteflow Bin 1.5.0 allows remote attackers to include and execute arb…
-
Unscored —
Stack-based buffer overflow in the DPC Proxy server (DpcProxy.exe) in ASUS Remote Console (aka ARC or ASMB3) 2.0.0.19 a…
-
Unscored —CVE-2008-1501 Public exploit
The send_user_mode function in s_user.c in (1) Undernet ircu 2.10.12.12 and earlier, (2) snircd 1.3.4 and earlier, and …
-
Unscored —CVE-2008-1492 Public exploit
Multiple directory traversal vulnerabilities in CoronaMatrix phpAddressBook 2.11 allow remote attackers to include and …
-
Unscored —
PHP remote file inclusion vulnerability in the SSTREAMTV custompages (com_custompages) 1.1 and earlier component for Jo…
-
Unscored —CVE-2008-1500 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in TinyPortal 0.8.6 and 1.0.3 allows remote attackers to inject a…
-
Unscored —CVE-2008-1495 Public exploit
Unrestricted file upload vulnerability in administrer/produits.php in PEEL, possibly 3.x and earlier, allows remote aut…
-
Unscored —CVE-2008-1498 Public exploit
Stack-based buffer overflow in the IMAP service in NetWin Surgemail 3.8k4-4 and earlier allows remote authenticated use…
-
Unscored —CVE-2008-1504 Public exploit
Cross-site scripting (XSS) vulnerability in setup.php3 in phpHeaven phpMyChat 0.14.5 allows remote attackers to inject …
-
Unscored —
ZyXEL ZyWALL 1050 has a hard-coded password for the Quagga and Zebra processes that is not changed when it is set by a …
-
Unscored —
Integer overflow in the MP4_ReadBox_rdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial …