Skip to content
OpenAdvisories

Archive

27 April 2008

Vulnerabilities first published on this day (UTC), newest first.

← March 2008 2008 / April /27 May 2008 →
  1. 111
  2. 240
  3. 3 
  4. 422
  5. 5 
  6. 66
  7. 711
  8. 822
  9. 919
  10. 1011
  11. 1120
  12. 1210
  13. 13 
  14. 1415
  15. 1518
  16. 1660
  17. 1730
  18. 1816
  19. 19 
  20. 201
  21. 2118
  22. 2210
  23. 2311
  24. 2414
  25. 2514
  26. 26 
  27. 2729
  28. 2813
  29. 298
  30. 3027
All Critical High Medium Low Exploited only Public exploit

17 results · Clear filters · Feed

  • Unscored —
    CVE-2008-1986 Public exploit

    Cross-site scripting (XSS) vulnerability in liste_article.php in Blog Pixel Motion (aka PixelMotion) allows remote atta…

  • Unscored —
    CVE-2008-1989 Public exploit

    PHP remote file inclusion vulnerability in 123flashchat.php in the 123 Flash Chat 6.8.0 module for e107, when register_…

  • Unscored —
    CVE-2008-1992 Public exploit

    Acidcat CMS 3.4.1 does not properly restrict access to (1) default_mail_aspemail.asp, (2) default_mail_cdosys.asp or (3…

  • Unscored —
    CVE-2008-1985 Public exploit

    Cross-site scripting (XSS) vulnerability in base.php in DigitalHive 2.0 RC2 allows remote attackers to inject arbitrary…

  • Unscored —
    CVE-2008-1993 Public exploit

    Acidcat CMS 3.4.1 does not restrict access to the FCKEditor component, which allows remote attackers to upload arbitrar…

  • Unscored —
    CVE-2008-1990 Public exploit

    Multiple SQL injection vulnerabilities in Acidcat CMS 3.4.1 allow remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2008-1991 Public exploit

    Cross-site scripting (XSS) vulnerability in admin_colors_swatch.asp in Acidcat CMS 3.4.1 allows remote attackers to inj…

  • Unscored —
    CVE-2008-1982 Public exploit

    SQL injection vulnerability in ss_load.php in the Spreadsheet (wpSS) 0.6 and earlier plugin for WordPress allows remote…

    Web / CMS
  • Unscored —
    CVE-2008-1979 Public exploit

    The Discovery Service (casdscvc) in CA ARCserve Backup 12.0.5454.0 and earlier allows remote attackers to cause a denia…

  • Unscored —
    CVE-2008-1983 Public exploit

    Cross-site scripting (XSS) vulnerability in Advanced Electron Forum (AEF) 1.0.6 allows remote attackers to inject arbit…

  • Unscored —
    CVE-2008-1974 Public exploit

    Cross-site scripting (XSS) vulnerability in addevent.php in Horde Kronolith 2.1.7, Groupware Webmail Edition 1.0.6, and…

  • Unscored —
    CVE-2008-1975 Public exploit

    SQL injection vulnerability in index.php in E-RESERV 2.1 allows remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2008-1971 Public exploit

    phShoutBox Final 1.5 and earlier only checks passwords when specified in $_POST, which allows remote attackers to gain …

  • Unscored —
    CVE-2008-1973 Public exploit

    Heap-based buffer overflow in SubEdit Player build 4056 and 4066 allows remote attackers to cause a denial of service (…

  • Unscored —
    CVE-2008-1967 Public exploit

    Cross-site scripting (XSS) vulnerability in CFLogon/CFLogon.asp in Cezanne 6.5.1 and 7 allows remote attackers to injec…

  • Unscored —
    CVE-2008-1969 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Cezanne 6.5.1 and 7 allow remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2008-1968 Public exploit

    Multiple SQL injection vulnerabilities in Cezanne 7 allow remote authenticated users to execute arbitrary SQL commands …