Skip to content
OpenAdvisories

Archive

30 April 2008

Vulnerabilities first published on this day (UTC), newest first.

16 results · Clear filters · Feed

  • Unscored —
    CVE-2008-2032 Public exploit

    The FTP service in Acritum Femitter Server 1.03 allows remote attackers to cause a denial of service (crash) by sending…

  • Unscored —
    CVE-2008-2036 Public exploit

    SQL injection vulnerability in index.php in dream4 Koobi Pro 6.25 allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2008-2031 Public exploit EPSS 46%

    VicFTPS 5.0 allows remote attackers to cause a denial of service (crash) via a crafted LIST command, which triggers a N…

  • Unscored —
    CVE-2008-2037 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in EditeurScripts EsContacts 1.0 allow remote authenticated users t…

  • Unscored —
    CVE-2008-2028 Public exploit

    miniBB 2.2, and possibly earlier, when register_globals is enabled, allows remote attackers to obtain the full path via…

  • Unscored —
    CVE-2008-2040 Public exploit EPSS 15%

    Stack-based buffer overflow in the HTTP::getAuthUserPass function (core/common/http.cpp) in Peercast 0.1218 and gnome-p…

  • Unscored —
    CVE-2008-2029 Public exploit

    Multiple SQL injection vulnerabilities in (1) setup_mysql.php and (2) setup_options.php in miniBB 2.2 and possibly earl…

  • Unscored —
    CVE-2008-2030 Public exploit

    Cross-site scripting (XSS) vulnerability in installControl.php3 in F5 FirePass 4100 SSL VPN 5.4.2-5.5.2 and 6.0-6.2 all…

  • Unscored —
    CVE-2008-2023 Public exploit

    Multiple SQL injection vulnerabilities in PD9 Software MegaBBS 2.2 allow remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2008-2022 Public exploit

    Mulatiple cross-site scripting (XSS) vulnerabilities in PD9 Software MegaBBS 2.2 allow remote attackers to inject arbit…

  • Unscored —
    CVE-2008-2024 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in miniBB 2.2, and possibly earlier, when register_globals is ena…

  • Unscored —
    CVE-2008-2018 Public exploit

    The AssignUser function in template.class.php in PHPizabi 0.848b C1 HFP3 performs unsafe macro expansions on strings de…

  • Unscored —
    CVE-2008-2015 Public exploit

    Multiple absolute path traversal vulnerabilities in certain ActiveX controls in WatchFire AppScan 7.0 allow remote atta…

  • Unscored —
    CVE-2008-2019 Public exploit

    Simple Machines Forum (SMF), probably 1.1.4, relies on "randomly generated static" to hinder brute-force attacks on the…

  • Unscored —
    CVE-2008-2012 Public exploit

    SQL injection vulnerability in index.php in the PostSchedule 1.0 module for PostNuke allows remote attackers to execute…

  • Unscored —
    CVE-2008-2013 Public exploit

    SQL injection vulnerability in index.php in the pnFlashGames 1.5 through 2.5 module for PostNuke, when magic_quotes_gpc…