Skip to content
OpenAdvisories

Archive

April 2008

Vulnerabilities first published in this month (UTC), newest first.

190 results · Clear filters · Feed

  • Unscored —
    CVE-2008-1878 Public exploit EPSS 15%

    Stack-based buffer overflow in the demux_nsf_send_chunk function in src/demuxers/demux_nsf.c in xine-lib 1.1.12 and ear…

  • Unscored —
    CVE-2008-0320 Public exploit EPSS 57%

    Heap-based buffer overflow in the OLE importer in OpenOffice.org before 2.4 allows remote attackers to cause a denial o…

  • Unscored —
    CVE-2008-1868 Public exploit

    admin/sauvBase.php in Blog Pixel Motion (aka Blog PixelMotion) does not require authentication, which allows remote att…

  • Unscored —
    CVE-2008-1875 Public exploit

    SQL injection vulnerability in index.php in Terong PHP Photo Gallery (aka Advanced Web Photo Gallery) 1.0 allows remote…

  • Unscored —
    CVE-2008-1867 Public exploit

    SQL injection vulnerability in Blog Pixel Motion (aka Blog PixelMotion) allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2008-1872 Public exploit

    SQL injection vulnerability in home.news.php in Comdev News Publisher 4.1.2 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2008-1870 Public exploit

    SQL injection vulnerability in getdata.php in PIGMy-SQL 1.4.1 and earlier allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2008-1863 Public exploit

    SQL injection vulnerability in view_reviews.php in Prozilla Cheat Script (aka Cheats) 2.0 allows remote attackers to ex…

  • Unscored —
    CVE-2008-1873 Public exploit

    Cross-site scripting (XSS) vulnerability in the private message feature in Nuke ET 3.2 and 3.4, when using Internet Exp…

  • Unscored —
    CVE-2008-1871 Public exploit

    SQL injection vulnerability in links.php in Scriptsagent.com Links Directory 1.1 allows remote authenticated users to e…

  • Unscored —
    CVE-2008-1874 Public exploit

    SQL injection vulnerability in account/user/mail.html in Xpoze Pro 3.05 and earlier allows remote authenticated users t…

  • Unscored —
    CVE-2008-1876 Public exploit EPSS 28%

    PHP remote file inclusion vulnerability in index.php in VisualPic 0.3.1 allows remote attackers to execute arbitrary PH…

  • Unscored —
    CVE-2008-1864 Public exploit

    SQL injection vulnerability in project.php in Prozilla Freelancers allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2008-1866 Public exploit

    admin/modif_config.php in Blog Pixel Motion (aka PixelMotion) does not require admin authentication, which allows remot…

  • Unscored —
    CVE-2008-1869 Public exploit

    SQL injection vulnerability in Site Sift Listings allows remote attackers to execute arbitrary SQL commands via the id …

  • Unscored —
    CVE-2008-1860 Public exploit

    Static code injection vulnerability in admin.php in LokiCMS 0.3.3 and earlier allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2008-1861 Public exploit

    Directory traversal vulnerability in modules/threadstop/threadstop.php in ExBB Italia 0.22 and earlier, when register_g…

  • Unscored —
    CVE-2008-1862 Public exploit

    ExBB Italia 0.22 and earlier only checks GET requests that use the QUERY_STRING for certain path manipulations, which a…

  • Unscored —
    CVE-2008-1854 Public exploit

    Unspecified vulnerability in SmarterMail Web Server (SMWebSvr.exe) in SmarterMail 5.0.2999 allows remote attackers to c…

  • Unscored —
    CVE-2008-1859 Public exploit

    SQL injection vulnerability in events.php in iScripts SocialWare allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2008-1856 Public exploit

    plugins/maps/db_handler.php in LinPHA 1.3.3 and earlier does not require authentication for a settings action that modi…

  • Unscored —
    CVE-2008-1855 Public exploit

    FrameworkService.exe in McAfee Common Management Agent (CMA) 3.6.0.574 Patch 3 and earlier, as used by ePolicy Orchestr…

  • Unscored —
    CVE-2008-1858 Public exploit

    SQL injection vulnerability in index.php in 724Networks 724CMS 4.01 and earlier allows remote attackers to execute arbi…

  • Unscored —
    CVE-2008-1857 Public exploit

    Multiple directory traversal vulnerabilities in viewsource.php in Make our Life Easy (Mole) 2.1.0 allow remote attacker…

  • Unscored —
    CVE-2008-0068 Public exploit

    Directory traversal vulnerability in OpenView5.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 al…

  • Unscored —
    CVE-2008-1843 Public exploit

    SQL injection vulnerability in browse.php in W2B DatingClub (aka Dating Club) allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2008-1844 Public exploit

    SQL injection vulnerability in cat.php in W2B phpHotResources allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2008-1849 Public exploit

    Directory traversal vulnerability in index.php in the joomlaXplorer (com_joomlaxplorer) Mambo/Joomla! component 1.6.2 a…

  • Unscored —
    CVE-2008-1847 Public exploit

    SQL injection vulnerability in view.php in CoronaMatrix phpAddressBook 2.11 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2008-1848 Public exploit

    Cross-site scripting (XSS) vulnerability in the joomlaXplorer (com_joomlaxplorer) Mambo/Joomla! component 1.6.2 and ear…

  • Unscored —
    CVE-2008-1842 Public exploit EPSS 12%

    Integer signedness error in ovspmd.exe in HP OpenView Network Node Manager (OV NNM) 8.01, and 7.53 and earlier, allows …

  • Unscored —
    CVE-2008-1838 Public exploit

    SQL injection vulnerability in BosClassifieds Classified Ads System 3.0 allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2008-1795 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Blackboard Academic Suite 7.x and earlier, and possibly some 8.0…

  • Unscored —
    CVE-2008-1789 Public exploit

    SQL injection vulnerability in forum.php in Prozilla Forum allows remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2008-1799 Public exploit

    Directory traversal vulnerability in thumbnails.php in sabros.us 1.75 allows remote attackers to read arbitrary files v…

  • Unscored —
    CVE-2008-1787 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in Poplar Gedcom Viewer 2.0 allow remote attackers to …

  • Unscored —
    CVE-2008-1788 Public exploit

    SQL injection vulnerability in directory.php in Prozilla Entertainers 1.1 and earlier allows remote attackers to execut…

  • Unscored —
    CVE-2008-1791 Public exploit

    SQL injection vulnerability in ladder.php in My Gaming Ladder 7.5 and earlier allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2008-1790 Public exploit

    Unrestricted file upload vulnerability in iScripts SocialWare allows remote authenticated administrators to upload arbi…

  • Unscored —
    CVE-2008-1798 Public exploit

    Directory traversal vulnerability in forum/kietu/libs/calendrier.php in Dragoon 0.1 allows remote attackers to include …