Archive
April 2008
Vulnerabilities first published in this month (UTC), newest first.
190 results · Clear filters · Feed
-
Unscored —CVE-2008-2032 Public exploit
The FTP service in Acritum Femitter Server 1.03 allows remote attackers to cause a denial of service (crash) by sending…
-
Unscored —CVE-2008-2036 Public exploit
SQL injection vulnerability in index.php in dream4 Koobi Pro 6.25 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —
VicFTPS 5.0 allows remote attackers to cause a denial of service (crash) via a crafted LIST command, which triggers a N…
-
Unscored —CVE-2008-2037 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in EditeurScripts EsContacts 1.0 allow remote authenticated users t…
-
Unscored —CVE-2008-2028 Public exploit
miniBB 2.2, and possibly earlier, when register_globals is enabled, allows remote attackers to obtain the full path via…
-
Unscored —
Stack-based buffer overflow in the HTTP::getAuthUserPass function (core/common/http.cpp) in Peercast 0.1218 and gnome-p…
-
Unscored —CVE-2008-2029 Public exploit
Multiple SQL injection vulnerabilities in (1) setup_mysql.php and (2) setup_options.php in miniBB 2.2 and possibly earl…
-
Unscored —CVE-2008-2030 Public exploit
Cross-site scripting (XSS) vulnerability in installControl.php3 in F5 FirePass 4100 SSL VPN 5.4.2-5.5.2 and 6.0-6.2 all…
-
Unscored —CVE-2008-2023 Public exploit
Multiple SQL injection vulnerabilities in PD9 Software MegaBBS 2.2 allow remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2008-2022 Public exploit
Mulatiple cross-site scripting (XSS) vulnerabilities in PD9 Software MegaBBS 2.2 allow remote attackers to inject arbit…
-
Unscored —CVE-2008-2024 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in miniBB 2.2, and possibly earlier, when register_globals is ena…
-
Unscored —CVE-2008-2018 Public exploit
The AssignUser function in template.class.php in PHPizabi 0.848b C1 HFP3 performs unsafe macro expansions on strings de…
-
Unscored —CVE-2008-2015 Public exploit
Multiple absolute path traversal vulnerabilities in certain ActiveX controls in WatchFire AppScan 7.0 allow remote atta…
-
Unscored —CVE-2008-2019 Public exploit
Simple Machines Forum (SMF), probably 1.1.4, relies on "randomly generated static" to hinder brute-force attacks on the…
-
Unscored —CVE-2008-2012 Public exploit
SQL injection vulnerability in index.php in the PostSchedule 1.0 module for PostNuke allows remote attackers to execute…
-
Unscored —CVE-2008-2013 Public exploit
SQL injection vulnerability in index.php in the pnFlashGames 1.5 through 2.5 module for PostNuke, when magic_quotes_gpc…
-
Unscored —CVE-2008-1930 Public exploit
The cookie authentication method in WordPress 2.5 relies on a hash of a concatenated string containing USERNAME and EXP…
-
Unscored —
licq before 1.3.6 allows remote attackers to cause a denial of service (file-descriptor exhaustion and application cras…
-
Unscored —CVE-2008-1986 Public exploit
Cross-site scripting (XSS) vulnerability in liste_article.php in Blog Pixel Motion (aka PixelMotion) allows remote atta…
-
Unscored —CVE-2008-1989 Public exploit
PHP remote file inclusion vulnerability in 123flashchat.php in the 123 Flash Chat 6.8.0 module for e107, when register_…
-
Unscored —CVE-2008-1992 Public exploit
Acidcat CMS 3.4.1 does not properly restrict access to (1) default_mail_aspemail.asp, (2) default_mail_cdosys.asp or (3…
-
Unscored —CVE-2008-1985 Public exploit
Cross-site scripting (XSS) vulnerability in base.php in DigitalHive 2.0 RC2 allows remote attackers to inject arbitrary…
-
Unscored —CVE-2008-1993 Public exploit
Acidcat CMS 3.4.1 does not restrict access to the FCKEditor component, which allows remote attackers to upload arbitrar…
-
Unscored —CVE-2008-1990 Public exploit
Multiple SQL injection vulnerabilities in Acidcat CMS 3.4.1 allow remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2008-1991 Public exploit
Cross-site scripting (XSS) vulnerability in admin_colors_swatch.asp in Acidcat CMS 3.4.1 allows remote attackers to inj…
-
Unscored —CVE-2008-1982 Public exploit
SQL injection vulnerability in ss_load.php in the Spreadsheet (wpSS) 0.6 and earlier plugin for WordPress allows remote…
-
Unscored —CVE-2008-1979 Public exploit
The Discovery Service (casdscvc) in CA ARCserve Backup 12.0.5454.0 and earlier allows remote attackers to cause a denia…
-
Unscored —CVE-2008-1983 Public exploit
Cross-site scripting (XSS) vulnerability in Advanced Electron Forum (AEF) 1.0.6 allows remote attackers to inject arbit…
-
Unscored —CVE-2008-1974 Public exploit
Cross-site scripting (XSS) vulnerability in addevent.php in Horde Kronolith 2.1.7, Groupware Webmail Edition 1.0.6, and…
-
Unscored —CVE-2008-1975 Public exploit
SQL injection vulnerability in index.php in E-RESERV 2.1 allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2008-1971 Public exploit
phShoutBox Final 1.5 and earlier only checks passwords when specified in $_POST, which allows remote attackers to gain …
-
Unscored —CVE-2008-1973 Public exploit
Heap-based buffer overflow in SubEdit Player build 4056 and 4066 allows remote attackers to cause a denial of service (…
-
Unscored —CVE-2008-1967 Public exploit
Cross-site scripting (XSS) vulnerability in CFLogon/CFLogon.asp in Cezanne 6.5.1 and 7 allows remote attackers to injec…
-
Unscored —CVE-2008-1969 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Cezanne 6.5.1 and 7 allow remote attackers to inject arbitrary w…
-
Unscored —CVE-2008-1968 Public exploit
Multiple SQL injection vulnerabilities in Cezanne 7 allow remote authenticated users to execute arbitrary SQL commands …
-
Unscored —
Argument injection vulnerability in the cai: URI handler in rcplauncher in IBM Lotus Expeditor Client for Desktop 6.1.1…
-
Unscored —CVE-2008-1961 Public exploit
SQL injection vulnerability in index.php in Voice Of Web AllMyGuests 0.4.1 allows remote attackers to execute arbitrary…
-
Unscored —CVE-2008-1954 Public exploit
SQL injection vulnerability in one_day.php in Web Calendar Pro 4.1 and earlier allows remote attackers to execute arbit…
-
Unscored —
PHP remote file inclusion vulnerability in includes/functions.php in Quate Grape Web Statistics 0.2a allows remote atta…
-
Unscored —CVE-2008-1962 Public exploit
Multiple directory traversal vulnerabilities in Aterr 0.9.1 allow remote attackers to include and execute arbitrary loc…