Archive
17 April 2008
Vulnerabilities first published on this day (UTC), newest first.
19 results · Clear filters · Feed
-
Unscored —
Stack-based buffer overflow in the ParseSSA function (modules/demux/subtitle.c) in VLC 0.8.6e allows remote attackers t…
-
Unscored —
Stack-based buffer overflow in the demux_nsf_send_chunk function in src/demuxers/demux_nsf.c in xine-lib 1.1.12 and ear…
-
Unscored —
Heap-based buffer overflow in the OLE importer in OpenOffice.org before 2.4 allows remote attackers to cause a denial o…
-
Unscored —CVE-2008-1868 Public exploit
admin/sauvBase.php in Blog Pixel Motion (aka Blog PixelMotion) does not require authentication, which allows remote att…
-
Unscored —CVE-2008-1875 Public exploit
SQL injection vulnerability in index.php in Terong PHP Photo Gallery (aka Advanced Web Photo Gallery) 1.0 allows remote…
-
Unscored —CVE-2008-1867 Public exploit
SQL injection vulnerability in Blog Pixel Motion (aka Blog PixelMotion) allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2008-1872 Public exploit
SQL injection vulnerability in home.news.php in Comdev News Publisher 4.1.2 allows remote attackers to execute arbitrar…
-
Unscored —CVE-2008-1870 Public exploit
SQL injection vulnerability in getdata.php in PIGMy-SQL 1.4.1 and earlier allows remote attackers to execute arbitrary …
-
Unscored —CVE-2008-1863 Public exploit
SQL injection vulnerability in view_reviews.php in Prozilla Cheat Script (aka Cheats) 2.0 allows remote attackers to ex…
-
Unscored —CVE-2008-1873 Public exploit
Cross-site scripting (XSS) vulnerability in the private message feature in Nuke ET 3.2 and 3.4, when using Internet Exp…
-
Unscored —CVE-2008-1871 Public exploit
SQL injection vulnerability in links.php in Scriptsagent.com Links Directory 1.1 allows remote authenticated users to e…
-
Unscored —CVE-2008-1874 Public exploit
SQL injection vulnerability in account/user/mail.html in Xpoze Pro 3.05 and earlier allows remote authenticated users t…
-
Unscored —
PHP remote file inclusion vulnerability in index.php in VisualPic 0.3.1 allows remote attackers to execute arbitrary PH…
-
Unscored —CVE-2008-1864 Public exploit
SQL injection vulnerability in project.php in Prozilla Freelancers allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2008-1866 Public exploit
admin/modif_config.php in Blog Pixel Motion (aka PixelMotion) does not require admin authentication, which allows remot…
-
Unscored —CVE-2008-1869 Public exploit
SQL injection vulnerability in Site Sift Listings allows remote attackers to execute arbitrary SQL commands via the id …
-
Unscored —CVE-2008-1860 Public exploit
Static code injection vulnerability in admin.php in LokiCMS 0.3.3 and earlier allows remote attackers to inject arbitra…
-
Unscored —CVE-2008-1861 Public exploit
Directory traversal vulnerability in modules/threadstop/threadstop.php in ExBB Italia 0.22 and earlier, when register_g…
-
Unscored —CVE-2008-1862 Public exploit
ExBB Italia 0.22 and earlier only checks GET requests that use the QUERY_STRING for certain path manipulations, which a…