Archive
April 2008
Vulnerabilities first published in this month (UTC), newest first.
190 results · Clear filters · Feed
-
Unscored —CVE-2008-1956 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Wikepage Opus 13 2007.2 allows remote attackers to inject arbi…
-
Unscored —CVE-2008-1958 Public exploit
Unrestricted file upload vulnerability in the ajout_cat mode in admin/main.php in Tr Script News 2.1 allows remote auth…
-
Unscored —CVE-2008-1957 Public exploit
SQL injection vulnerability in news.php in Tr Script News 2.1 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2008-1955 Public exploit
Cross-site scripting (XSS) vulnerability in rep.php in Martin BOUCHER MyBoard 1.0.12 allows remote attackers to inject …
-
Unscored —CVE-2008-1939 Public exploit
Multiple SQL injection vulnerabilities in W1L3D4 Philboard 1.0 allow remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2008-1935 Public exploit
SQL injection vulnerability in the Filiale 1.0.4 component for Joomla! allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2008-1769 Public exploit
VLC before 0.8.6f allow remote attackers to cause a denial of service (crash) via a crafted Cinepak file that triggers …
-
Unscored —CVE-2008-1936 Public exploit
SQL injection vulnerability in index.php in Classifieds Caffe allows remote attackers to execute arbitrary SQL commands…
-
Unscored —
Absolute path traversal vulnerability in a certain ActiveX control in Zune allows user-assisted remote attackers to ove…
-
Unscored —CVE-2008-1934 Public exploit
SQL injection vulnerability in commentaires.php in Crazy Goomba 1.2.1 allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2008-1385 Public exploit
Cross-site scripting (XSS) vulnerability in the Top Referrers (aka referrer) plugin in Serendipity (S9Y) before 1.3.1 a…
-
Unscored —
Buffer overflow in Adobe Photoshop Album Starter Edition 3.2, and possibly After Effects CS3, allows user-assisted remo…
-
Unscored —CVE-2008-1919 Public exploit
SQL injection vulnerability in listtest.php in YourFreeWorld Apartment Search Script allows remote attackers to execute…
-
Unscored —CVE-2008-1918 Public exploit
SQL injection vulnerability in submit.php in PHP-Fusion 6.01.14 and 6.00.307, when magic_quotes_gpc is disabled and the…
-
Unscored —CVE-2008-1921 Public exploit
SQL injection vulnerability in store_pages/category_list.php in 5th Avenue Shopping Cart 1.2 trial edition allows remot…
-
Unscored —CVE-2008-1920 Public exploit
Heap-based buffer overflow in the boxelyRenderer module in the Personal Status Manager feature in ICQ 6.0 build 6043 al…
-
Unscored —
Stack-based buffer overflow in the AntServer module (AntServer.exe) in BigAnt IM Server in BigAnt Messenger 2.2 allows …
-
Unscored —CVE-2008-1915 Public exploit
SQL injection vulnerability in view.asp in DevWorx BlogWorx 1.0 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —
Stack-based buffer overflow in DivX Player 6.7 build 6.7.0.22 and earlier allows user-assisted remote attackers to caus…
-
Unscored —CVE-2008-1917 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in AMFPHP 1.2 allow remote attackers to inject arbitrary web script…
-
Unscored —CVE-2008-1913 Public exploit
SQL injection vulnerability in index.php in Lasernet CMS 1.5 and 1.11, when magic_quotes_gpc is disabled, allows remote…
-
Unscored —CVE-2008-1906 Public exploit
Cross-site scripting (XSS) vulnerability in calendar.php in cpCommerce 1.1.0 allows remote attackers to inject arbitrar…
-
Unscored —
PHP remote file inclusion vulnerability in news_show.php in Newanz NewsOffice 1.0 and 1.1, when register_globals is ena…
-
Unscored —CVE-2008-1904 Public exploit
Cicoandcico CcMail 1.0.1 and earlier does not verify that the this_cookie cookie corresponds to an authenticated sessio…
-
Unscored —CVE-2008-1909 Public exploit
SQL injection vulnerability in comment.php in PHP Knowledge Base (PHPKB) 1.5 and 2.0 allows remote attackers to execute…
-
Unscored —CVE-2008-1911 Public exploit
SQL injection vulnerability in includes/system.php in 1024 CMS 1.4.2 beta and earlier, when magic_quotes_gpc is disable…
-
Unscored —CVE-2008-1907 Public exploit
Multiple SQL injection vulnerabilities in functions/display_page.func.php in cpCommerce 1.1.0 allow remote attackers to…
-
Unscored —CVE-2008-1910 Public exploit
Stack-based buffer overflow in the database service (ibserver.exe) in Borland InterBase 2007 SP2 allows remote attacker…
-
Unscored —CVE-2008-1908 Public exploit
Multiple directory traversal vulnerabilities in cpCommerce 1.1.0 allow remote attackers to include and execute arbitrar…
-
Unscored —CVE-2008-1613 Public exploit
SQL injection vulnerability in ioRD.asp in RedDot CMS 7.5 Build 7.5.0.48, and possibly other versions including 6.5 and…
-
Unscored —
Microsoft Windows XP Professional SP2, Vista, and Server 2003 and 2008 does not properly assign activities to the (1) N…
-
Unscored —
A certain ActiveX control in WkImgSrv.dll 7.03.0616.0, as distributed in Microsoft Works 7 and Microsoft Office 2003 an…
-
Unscored —CVE-2008-1896 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Carbon Communities 2.4 and earlier allow remote attackers to inj…
-
Unscored —CVE-2008-1893 Public exploit
PHP remote file inclusion vulnerability in index.php in W2B Online Banking allows remote attackers to execute arbitrary…
-
Unscored —CVE-2008-1889 Public exploit
SQL injection vulnerability in viewcat.php in XplodPHP AutoTutorials 2.1 and earlier, when magic_quotes_gpc is disabled…
-
Unscored —CVE-2008-1895 Public exploit
Multiple SQL injection vulnerabilities in Carbon Communities 2.4 and earlier allow remote attackers to execute arbitrar…
-
Unscored —CVE-2008-1888 Public exploit
Cross-site scripting (XSS) vulnerability in Microsoft Windows SharePoint Services 2.0 allows remote attackers to inject…
-
Unscored —CVE-2008-1885 Public exploit
Directory traversal vulnerability in the NeffyLauncher 1.0.5 ActiveX control (NeffyLauncher.dll) in CDNetworks Nefficie…
-
Unscored —CVE-2008-1886 Public exploit
The NeffyLauncher 1.0.5 ActiveX control (NeffyLauncher.dll) in CDNetworks Nefficient Download uses weak cryptography fo…
-
Unscored —
Stack-based buffer overflow in the ParseSSA function (modules/demux/subtitle.c) in VLC 0.8.6e allows remote attackers t…