Archive
April 2008
Vulnerabilities first published in this month (UTC), newest first.
190 results · Clear filters · Feed
-
Unscored —
Stack-based buffer overflow in the demux_nsf_send_chunk function in src/demuxers/demux_nsf.c in xine-lib 1.1.12 and ear…
-
Unscored —
Heap-based buffer overflow in the OLE importer in OpenOffice.org before 2.4 allows remote attackers to cause a denial o…
-
Unscored —CVE-2008-1868 Public exploit
admin/sauvBase.php in Blog Pixel Motion (aka Blog PixelMotion) does not require authentication, which allows remote att…
-
Unscored —CVE-2008-1875 Public exploit
SQL injection vulnerability in index.php in Terong PHP Photo Gallery (aka Advanced Web Photo Gallery) 1.0 allows remote…
-
Unscored —CVE-2008-1867 Public exploit
SQL injection vulnerability in Blog Pixel Motion (aka Blog PixelMotion) allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2008-1872 Public exploit
SQL injection vulnerability in home.news.php in Comdev News Publisher 4.1.2 allows remote attackers to execute arbitrar…
-
Unscored —CVE-2008-1870 Public exploit
SQL injection vulnerability in getdata.php in PIGMy-SQL 1.4.1 and earlier allows remote attackers to execute arbitrary …
-
Unscored —CVE-2008-1863 Public exploit
SQL injection vulnerability in view_reviews.php in Prozilla Cheat Script (aka Cheats) 2.0 allows remote attackers to ex…
-
Unscored —CVE-2008-1873 Public exploit
Cross-site scripting (XSS) vulnerability in the private message feature in Nuke ET 3.2 and 3.4, when using Internet Exp…
-
Unscored —CVE-2008-1871 Public exploit
SQL injection vulnerability in links.php in Scriptsagent.com Links Directory 1.1 allows remote authenticated users to e…
-
Unscored —CVE-2008-1874 Public exploit
SQL injection vulnerability in account/user/mail.html in Xpoze Pro 3.05 and earlier allows remote authenticated users t…
-
Unscored —
PHP remote file inclusion vulnerability in index.php in VisualPic 0.3.1 allows remote attackers to execute arbitrary PH…
-
Unscored —CVE-2008-1864 Public exploit
SQL injection vulnerability in project.php in Prozilla Freelancers allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2008-1866 Public exploit
admin/modif_config.php in Blog Pixel Motion (aka PixelMotion) does not require admin authentication, which allows remot…
-
Unscored —CVE-2008-1869 Public exploit
SQL injection vulnerability in Site Sift Listings allows remote attackers to execute arbitrary SQL commands via the id …
-
Unscored —CVE-2008-1860 Public exploit
Static code injection vulnerability in admin.php in LokiCMS 0.3.3 and earlier allows remote attackers to inject arbitra…
-
Unscored —CVE-2008-1861 Public exploit
Directory traversal vulnerability in modules/threadstop/threadstop.php in ExBB Italia 0.22 and earlier, when register_g…
-
Unscored —CVE-2008-1862 Public exploit
ExBB Italia 0.22 and earlier only checks GET requests that use the QUERY_STRING for certain path manipulations, which a…
-
Unscored —CVE-2008-1854 Public exploit
Unspecified vulnerability in SmarterMail Web Server (SMWebSvr.exe) in SmarterMail 5.0.2999 allows remote attackers to c…
-
Unscored —CVE-2008-1859 Public exploit
SQL injection vulnerability in events.php in iScripts SocialWare allows remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2008-1856 Public exploit
plugins/maps/db_handler.php in LinPHA 1.3.3 and earlier does not require authentication for a settings action that modi…
-
Unscored —CVE-2008-1855 Public exploit
FrameworkService.exe in McAfee Common Management Agent (CMA) 3.6.0.574 Patch 3 and earlier, as used by ePolicy Orchestr…
-
Unscored —CVE-2008-1858 Public exploit
SQL injection vulnerability in index.php in 724Networks 724CMS 4.01 and earlier allows remote attackers to execute arbi…
-
Unscored —CVE-2008-1857 Public exploit
Multiple directory traversal vulnerabilities in viewsource.php in Make our Life Easy (Mole) 2.1.0 allow remote attacker…
-
Unscored —CVE-2008-0068 Public exploit
Directory traversal vulnerability in OpenView5.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 al…
-
Unscored —CVE-2008-1843 Public exploit
SQL injection vulnerability in browse.php in W2B DatingClub (aka Dating Club) allows remote attackers to execute arbitr…
-
Unscored —CVE-2008-1844 Public exploit
SQL injection vulnerability in cat.php in W2B phpHotResources allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2008-1849 Public exploit
Directory traversal vulnerability in index.php in the joomlaXplorer (com_joomlaxplorer) Mambo/Joomla! component 1.6.2 a…
-
Unscored —CVE-2008-1847 Public exploit
SQL injection vulnerability in view.php in CoronaMatrix phpAddressBook 2.11 allows remote attackers to execute arbitrar…
-
Unscored —CVE-2008-1848 Public exploit
Cross-site scripting (XSS) vulnerability in the joomlaXplorer (com_joomlaxplorer) Mambo/Joomla! component 1.6.2 and ear…
-
Unscored —
Integer signedness error in ovspmd.exe in HP OpenView Network Node Manager (OV NNM) 8.01, and 7.53 and earlier, allows …
-
Unscored —CVE-2008-1838 Public exploit
SQL injection vulnerability in BosClassifieds Classified Ads System 3.0 allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2008-1795 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Blackboard Academic Suite 7.x and earlier, and possibly some 8.0…
-
Unscored —CVE-2008-1789 Public exploit
SQL injection vulnerability in forum.php in Prozilla Forum allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2008-1799 Public exploit
Directory traversal vulnerability in thumbnails.php in sabros.us 1.75 allows remote attackers to read arbitrary files v…
-
Unscored —CVE-2008-1787 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Poplar Gedcom Viewer 2.0 allow remote attackers to …
-
Unscored —CVE-2008-1788 Public exploit
SQL injection vulnerability in directory.php in Prozilla Entertainers 1.1 and earlier allows remote attackers to execut…
-
Unscored —CVE-2008-1791 Public exploit
SQL injection vulnerability in ladder.php in My Gaming Ladder 7.5 and earlier allows remote attackers to execute arbitr…
-
Unscored —CVE-2008-1790 Public exploit
Unrestricted file upload vulnerability in iScripts SocialWare allows remote authenticated administrators to upload arbi…
-
Unscored —CVE-2008-1798 Public exploit
Directory traversal vulnerability in forum/kietu/libs/calendrier.php in Dragoon 0.1 allows remote attackers to include …