27 April 2008

29 results · Feed

• Unscored —
  CVE-2008-1986 Public exploit

  Cross-site scripting (XSS) vulnerability in liste_article.php in Blog Pixel Motion (aka PixelMotion) allows remote atta…

  Apr 27, 2008
• Unscored —
  CVE-2008-1988

  Unrestricted file upload vulnerability in the file_upload function in core/misc.class.php in EncapsGallery 2.0.2 allows…

  Apr 27, 2008
• Unscored —
  CVE-2008-1989 Public exploit

  PHP remote file inclusion vulnerability in 123flashchat.php in the 123 Flash Chat 6.8.0 module for e107, when register_…

  Apr 27, 2008
• Unscored —
  CVE-2008-1992 Public exploit

  Acidcat CMS 3.4.1 does not properly restrict access to (1) default_mail_aspemail.asp, (2) default_mail_cdosys.asp or (3…

  Apr 27, 2008
• Unscored —
  CVE-2008-1985 Public exploit

  Cross-site scripting (XSS) vulnerability in base.php in DigitalHive 2.0 RC2 allows remote attackers to inject arbitrary…

  Apr 27, 2008
• Unscored —
  CVE-2008-1993 Public exploit

  Acidcat CMS 3.4.1 does not restrict access to the FCKEditor component, which allows remote attackers to upload arbitrar…

  Apr 27, 2008
• Unscored —
  CVE-2008-1994

  Multiple stack-based buffer overflows in (a) acon.c, (b) menu.c, and (c) child.c in Acon 1.0.5-5 through 1.0.5-7 allow …

  Apr 27, 2008
• Unscored —
  CVE-2008-1987

  Cross-site scripting (XSS) vulnerability in search.php in EncapsGallery 2.0.2 allows remote attackers to inject arbitra…

  Apr 27, 2008
• Unscored —
  CVE-2008-1990 Public exploit

  Multiple SQL injection vulnerabilities in Acidcat CMS 3.4.1 allow remote attackers to execute arbitrary SQL commands vi…

  Apr 27, 2008
• Unscored —
  CVE-2008-1991 Public exploit

  Cross-site scripting (XSS) vulnerability in admin_colors_swatch.asp in Acidcat CMS 3.4.1 allows remote attackers to inj…

  Apr 27, 2008
• Unscored —
  CVE-2008-1981

  Cross-site request forgery (CSRF) vulnerability in E-Publish 5.x before 5.x-1.1 and 6.x before 6.x-1.0 beta1, a Drupal …

  Apr 27, 2008
• Unscored —
  CVE-2008-1978

  Cross-site scripting (XSS) vulnerability in the Ubercart 5.x before 5.x-1.0 rc3 module for Drupal allows remote authent…

  Web / CMS
  Apr 27, 2008
• Unscored —
  CVE-2008-1976

  Multiple cross-site scripting (XSS) vulnerabilities in the Drupal modules (1) Internationalization (i18n) 5.x before 5.…

  Apr 27, 2008
• Unscored —
  CVE-2008-1980

  Cross-site scripting (XSS) vulnerability in E-Publish 5.x before 5.x-1.1 and 6.x before 6.x-1.0 beta1, a Drupal module,…

  Apr 27, 2008
• Unscored —
  CVE-2008-1982 Public exploit

  SQL injection vulnerability in ss_load.php in the Spreadsheet (wpSS) 0.6 and earlier plugin for WordPress allows remote…

  Web / CMS
  Apr 27, 2008
• Unscored —
  CVE-2008-1977

  Cross-site request forgery (CSRF) vulnerability in the Internationalization (i18n) Drupal module 5.x before 5.x-2.3 and…

  Apr 27, 2008
• Unscored —
  CVE-2008-1979 Public exploit

  The Discovery Service (casdscvc) in CA ARCserve Backup 12.0.5454.0 and earlier allows remote attackers to cause a denia…

  Apr 27, 2008
• Unscored —
  CVE-2008-1984

  The eTrust Common Services (Transport) Daemon (eCSqdmn) in CA Secure Content Manager 8.0.28000.511 and earlier allows r…

  Apr 27, 2008
• Unscored —
  CVE-2008-1983 Public exploit

  Cross-site scripting (XSS) vulnerability in Advanced Electron Forum (AEF) 1.0.6 allows remote attackers to inject arbit…

  Apr 27, 2008
• Unscored —
  CVE-2008-1974 Public exploit

  Cross-site scripting (XSS) vulnerability in addevent.php in Horde Kronolith 2.1.7, Groupware Webmail Edition 1.0.6, and…

  Apr 27, 2008
• Unscored —
  CVE-2008-1975 Public exploit

  SQL injection vulnerability in index.php in E-RESERV 2.1 allows remote attackers to execute arbitrary SQL commands via …

  Apr 27, 2008
• Unscored —
  CVE-2008-1971 Public exploit

  phShoutBox Final 1.5 and earlier only checks passwords when specified in $_POST, which allows remote attackers to gain …

  Apr 27, 2008
• Unscored —
  CVE-2008-1970

  muCommander before 0.8.2 stores credentials.xml with insecure permissions, which allows local users to obtain credentia…

  Apr 27, 2008
• Unscored —
  CVE-2008-1973 Public exploit

  Heap-based buffer overflow in SubEdit Player build 4056 and 4066 allows remote attackers to cause a denial of service (…

  Apr 27, 2008
• Unscored —
  CVE-2008-1966

  Multiple buffer overflows in the JAR file administration routines in the BSU JAVA subcomponent in IBM DB2 8 before FP16…

  Apr 27, 2008
• Unscored —
  CVE-2008-1967 Public exploit

  Cross-site scripting (XSS) vulnerability in CFLogon/CFLogon.asp in Cezanne 6.5.1 and 7 allows remote attackers to injec…

  Apr 27, 2008
• Unscored —
  CVE-2008-1969 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in Cezanne 6.5.1 and 7 allow remote attackers to inject arbitrary w…

  Apr 27, 2008
• Unscored —
  CVE-2008-1968 Public exploit

  Multiple SQL injection vulnerabilities in Cezanne 7 allow remote authenticated users to execute arbitrary SQL commands …

  Apr 27, 2008
• Unscored —
  CVE-2008-1972

  Multiple cross-site scripting (XSS) vulnerabilities in the user account creation feature in Exponent CMS 0.96.6-GA20071…

  Apr 27, 2008