Skip to content
OpenAdvisories

Archive

March 2008

Vulnerabilities first published in this month (UTC), newest first.

← February 2008 2008 / March April 2008 →
  1. 1 
  2. 2 
  3. 316
  4. 424
  5. 515
  6. 637
  7. 7 
  8. 813
  9. 95
  10. 1055
  11. 1122
  12. 1226
  13. 1319
  14. 147
  15. 15 
  16. 16 
  17. 1724
  18. 1839
  19. 1915
  20. 2047
  21. 21 
  22. 22 
  23. 23 
  24. 2442
  25. 2527
  26. 2613
  27. 2717
  28. 2820
  29. 29 
  30. 30 
  31. 3137
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium —
    CVE-2008-1502 EPSS 11%

    Moodle vulnerable to Cross-site scripting

    The _bad_protocol_once function in phpgwapi/inc/class.kses.inc.php in KSES, as used in eGroupWare before 1.4.003, Moodle before 1.8.5, and other products, allows remote attackers to bypass HTML filtering and conduct cross-site scripting (XSS) attacks via a st…

    moodle/moodle wordpress Debian Packagist
  • Medium 6.1
    CVE-2008-1474

    Roundup vulnerability related to Cross-site scripting (XSS)

    Multiple unspecified vulnerabilities in Roundup before 1.4.4 have unknown impact and attack vectors, some of which may be related to cross-site scripting (XSS).

    roundup PyPI
  • Medium —
    CVE-2008-1396

    Plone credentials stored in session cookie

    Plone CMS 3.x uses invariant data (a client username and a server secret) when calculating an HMAC-SHA1 value for an authentication cookie, which makes it easier for remote attackers to gain permanent access to an account by sniffing the network.

    plone PyPI
  • Medium —
    CVE-2008-1301 Public exploit

    Alkacon OpenCMS Absolute Path Traversal via pathname in filePath.0 parameter

    Absolute path traversal vulnerability in system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp in Alkacon OpenCms 7.0.3 and 7.0.4 allows remote authenticated administrators to read arbitrary files via a full pathname in the filePath.0 parameter.

    org.opencms:opencms-core Maven
  • Medium 6.1
    CVE-2008-1299

    Cross-site scripting (XSS) vulnerability in SolutionSearch.do in ManageEngine ServiceDesk Plus 7.0.0 Build 7011 for Win…

  • Medium 5.3
    CVE-2008-1285

    Cross-site scripting (XSS) vulnerability in Sun Java Server Faces (JSF)

    Cross-site scripting (XSS) vulnerability in Sun Java Server Faces (JSF) 1.2 before 1.2_08 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

    com.sun.faces:jsf-api Maven
  • Medium —
    CVE-2008-1098

    MoinMoin Multiple cross-site scripting (XSS) vulnerabilities

    Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.5.8 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) certain input processed by formatter/text_gedit.py (aka the gui editor formatter); (2) a page name, which t…

    moin PyPI
  • Medium —
    CVE-2008-1099

    MoinMoin Improper Access Control

    _macro_Getval in wikimacro.py in MoinMoin 1.5.8 and earlier does not properly enforce ACLs, which allows remote attackers to read protected pages.

    moin PyPI