Archive
March 2008
Vulnerabilities first published in this month (UTC), newest first.
210 results · Clear filters · Feed
-
Unscored —CVE-2008-1401 Public exploit
Format string vulnerability in the Net Inspector HTTP server (mghttpd) in MG-SOFT Net Inspector 6.5.0.828 and earlier f…
-
Unscored —CVE-2008-1410 Public exploit
Directory traversal vulnerability in the PXE Server (pxesrv.exe) in Acronis Snap Deploy 2.0.0.1076 and earlier allows r…
-
Unscored —CVE-2008-1406 Public exploit
SQL injection vulnerability in annonces-p-f.php in the MyAnnonces 1.8 module for eXV2 allows remote attackers to execut…
-
Unscored —CVE-2008-1415 Public exploit
Directory traversal vulnerability in index.php in Multiple Time Sheets (MTS) 5.0 and earlier allows remote attackers to…
-
Unscored —CVE-2008-1402 Public exploit
MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to cause a (1) denial of service (excep…
-
Unscored —
PHP remote file inclusion vulnerability in code/display.php in fuzzylime (cms) 3.01 allows remote attackers to execute …
-
Unscored —CVE-2008-1400 Public exploit
Directory traversal vulnerability in the Net Inspector HTTP Server (mghttpd) in MG-SOFT Net Inspector 6.5.0.828 and ear…
-
Unscored —CVE-2008-1414 Public exploit
Cross-site scripting (XSS) vulnerability in Multiple Time Sheets (MTS) 5.0 and earlier allows remote attackers to injec…
-
Unscored —CVE-2008-1409 Public exploit
Multiple directory traversal vulnerabilities in the Default theme in Exero CMS 1.0.1 allow remote attackers to include …
-
Unscored —CVE-2007-4592 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the web interface for IBM Rational ClearQuest before 2003.06.16 …
-
Unscored —CVE-2008-1000 Public exploit
Directory traversal vulnerability in ContentServer.py in the Wiki Server in Apple Mac OS X 10.5.2 (aka Leopard) allows …
-
Unscored —CVE-2008-1370 Public exploit
PHP remote file inclusion vulnerability in index.php in wildmary Yap Blog 1.1 allows remote attackers to execute arbitr…
-
Unscored —CVE-2008-1371 Public exploit
Absolute path traversal vulnerability in install/index.php in Drake CMS 0.4.11 RC8 allows remote attackers to read and …
-
Unscored —
Stack-based buffer overflow in Trend Micro OfficeScan Corporate Edition 8.0 Patch 2 build 1189 and earlier, and 7.3 Pat…
-
Unscored —CVE-2008-1357 Public exploit
Format string vulnerability in the logDetail function of applib.dll in McAfee Common Management Agent (CMA) 3.6.0.574 (…
-
Unscored —CVE-2008-1353 Public exploit
zabbix_agentd in ZABBIX 1.4.4 allows remote attackers to cause a denial of service (CPU and connection consumption) via…
-
Unscored —CVE-2008-1355 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Jeebles Technology Jeebles Directory 2.9.60 allows remote atta…
-
Unscored —CVE-2008-1354 Public exploit
SQL injection vulnerability in MyIssuesView.asp in Advanced Data Solutions Virtual Support Office-XP (VSO-XP) allows re…
-
Unscored —
Stack-based buffer overflow in the IMAP server in Alt-N Technologies MDaemon 9.6.4 allows remote authenticated users to…
-
Unscored —CVE-2008-1344 Public exploit
Multiple SQL injection vulnerabilities in MyioSoft EasyCalendar 4.0tr and earlier allow remote attackers to execute arb…
-
Unscored —CVE-2008-1348 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in the eWebsite eWeather (Weather) module for PHP-Nuke allows rem…
-
Unscored —CVE-2008-1351 Public exploit
SQL injection vulnerability in the Tutorials 2.1b module for XOOPS allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2008-1347 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in staticpages/easygallery/index.php in MyioSoft EasyGallery 5.0tr …
-
Unscored —CVE-2008-1349 Public exploit
SQL injection vulnerability in viewcat.php in the bamaGalerie (Bama Galerie) 3.03 and 3.041 module for eXV2 2.0.6 allow…
-
Unscored —CVE-2008-1346 Public exploit
SQL injection vulnerability in staticpages/easygallery/index.php in MyioSoft EasyGallery 5.0tr and earlier allows remot…
-
Unscored —CVE-2008-1345 Public exploit
Cross-site scripting (XSS) vulnerability in plugins/calendar/calendar_backend.php in MyioSoft EasyCalendar 4.0tr and ea…
-
Unscored —CVE-2008-1350 Public exploit
SQL injection vulnerability in kb.php in Fully Modded phpBB (phpbbfm) 80220 allows remote attackers to execute arbitrar…
-
Unscored —CVE-2008-1343 Public exploit
Directory traversal vulnerability in (1) pkgadd and (2) pkgrm in SCO UnixWare 7.1.4 allows local users to gain privileg…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in securecgi-bin/CSuserCGI.exe in User-Changeable Password (UCP) be…
-
Unscored —
Multiple buffer overflows in securecgi-bin/CSuserCGI.exe in User-Changeable Password (UCP) before 4.2 in Cisco Secure A…
-
Unscored —
Directory traversal vulnerability in the Notes (aka Flash Notes or instant messages) feature in tb2ftp.dll in Timbuktu …
-
Unscored —CVE-2008-1118 Public exploit
Timbuktu Pro 8.6.5 for Windows, and possibly 8.7 for Mac OS X, does not perform input validation before logging informa…
-
Unscored —CVE-2008-1336 Public exploit
SQL injection vulnerability in Koobi CMS 4.2.3 through 4.3.0 allows remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2008-1316 Public exploit
SQL injection vulnerability in qtf_ind_search_ov.php in QT-cute QuickTalk Forum 1.6 and earlier allows remote attackers…
-
Unscored —CVE-2008-1326 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in Gallarific allows remote attackers to inject arbitrary web sc…
-
Unscored —
Multiple buffer overflows in ASG-Sentry Network Manager 7.0.0 and earlier allow remote attackers to execute arbitrary c…
-
Unscored —CVE-2008-1325 Public exploit
Multiple directory traversal vulnerabilities in index.php in Uberghey CMS 0.3.1 allow remote attackers to include and e…
-
Unscored —CVE-2008-1327 Public exploit
Gallarific does not require authentication for (1) users.php and (2) index.php, which allows remote attackers to add an…
-
Unscored —CVE-2008-1319 Public exploit
Untrusted search path and argument injection vulnerability in the VersantD service in Versant Object Database 7.0.1.3 a…
-
Unscored —CVE-2008-1321 Public exploit
The FxIAList service in ASG-Sentry Network Manager 7.0.0 and earlier does require authentication, which allows remote a…