Archive
April 2008
Vulnerabilities first published in this month (UTC), newest first.
190 results · Clear filters · Feed
-
Unscored —CVE-2008-1800 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in DivXDB 2002 0.94b allow remote attackers to inject …
-
Unscored —CVE-2008-1785 Public exploit
delete.php in Prozilla Top 100 1.2 allows remote authenticated users to delete statistics and accounts of arbitrary use…
-
Unscored —CVE-2008-1782 Public exploit
phpdemo/viewsource.php in Advanced Software Engineering ChartDirector 4.1 allows remote attackers to read sensitive fil…
-
Unscored —CVE-2008-1784 Public exploit
Prozilla Topsites 1.0 allows remote attackers to perform administrative actions via a direct request to (1) addu.php, (…
-
Unscored —CVE-2008-1783 Public exploit
Prozilla Reviews 1.0 allows remote attackers to delete arbitrary users via a modified UserID parameter in a direct requ…
-
Unscored —
dhost.exe in Novell eDirectory 8.7.3 before sp10 and 8.8.2 allows remote attackers to cause a denial of service (CPU co…
-
Unscored —
PHP remote file inclusion vulnerability in modules/basicfog/basicfogfactory.class.php in PhpBlock A8.4 allows remote at…
-
Unscored —CVE-2008-1774 Public exploit
SQL injection vulnerability in editlink.php in Pligg 9.9.0 allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —
PHP remote file inclusion vulnerability in includes/header.inc.php in Dragoon 0.1 allows remote attackers to execute ar…
-
Unscored —CVE-2008-1772 Public exploit
iScripts SocialWare stores passwords in cleartext in a database, which allows context-dependent attackers to obtain sen…
-
Unscored —CVE-2008-1763 Public exploit
SQL injection vulnerability in _blogadata/include/sond_result.php in Blogator-script 0.95 allows remote attackers to ex…
-
Unscored —CVE-2008-1760 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Blogator-script before 1.01 allow remote attackers to execute arb…
-
Unscored —CVE-2008-1759 Public exploit
SQL injection vulnerability in the jeuxflash module for KwsPHP allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2008-1762 Public exploit
Opera before 9.27 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via …
-
Unscored —CVE-2008-1758 Public exploit
SQL injection vulnerability in the ConcoursPhoto module for KwsPHP allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2008-1757 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in the ConcoursPhoto module for KwsPHP 1.0 allows remote attacker…
-
Unscored —CVE-2008-1751 Public exploit
Multiple directory traversal vulnerabilities in index.php in Ksemail allow remote attackers to read arbitrary local fil…
-
Unscored —CVE-2008-1755 Public exploit
Directory traversal vulnerability in the showSource function in showSource.php in World of Phaos 4.0.1 allows remote at…
-
Unscored —CVE-2008-1750 Public exploit
SQL injection vulnerability in Integry Systems LiveCart 1.1.1 and earlier allows remote attackers to execute arbitrary …
-
Unscored —CVE-2008-1726 Public exploit
Multiple SQL injection vulnerabilities in KnowledgeQuest 2.6, when magic_quotes_gpc is disabled, allow remote attackers…
-
Unscored —CVE-2008-1730 Public exploit
Directory traversal vulnerability in download.html in ARWScripts Gallery Script Lite (aka gallery-script-lite or Free P…
-
Unscored —CVE-2008-1733 Public exploit
SQL injection vulnerability in puarcade.class.php 2.2 and earlier in the Pragmatic Utopia PU Arcade (com_puarcade) comp…
-
Unscored —CVE-2008-1732 Public exploit
SQL injection vulnerability in showpredictionsformatch.php in Prediction Football 1.x allows remote attackers to execut…
-
Unscored —CVE-2008-1727 Public exploit
KnowledgeQuest 2.5 and 2.6 does not require authentication for access to admincheck.php, which allows remote attackers …
-
Unscored —CVE-2008-1725 Public exploit
The IBizEBank.FIProfile.1 ActiveX control in fiprofile20.ocx in IBiz E-Banking Integrator (formerly IBiz OFX Integrator…
-
Unscored —
Stack-based buffer overflow in the IActiveXTransfer.FileTransfer method in the SecureTransport FileTransfer ActiveX con…
-
Unscored —
Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute ar…
-
Unscored —CVE-2008-1714 Public exploit
SQL injection vulnerability in show.php in FaScript FaPhoto 1.0, when magic_quotes_gpc is disabled, allows remote attac…
-
Unscored —CVE-2008-1715 Public exploit
SQL injection vulnerability in content/user.php in AuraCMS 2.2.1 and earlier, when magic_quotes_gpc is disabled, allows…
-
Unscored —CVE-2008-1713 Public exploit
MailServer.exe in NoticeWare Email Server 4.6.1.0 allows remote attackers to cause a denial of service (application cra…
-
Unscored —CVE-2008-1712 Public exploit
PHP remote file inclusion vulnerability in includes/functions_weblog.php in mxBB mx_blogs 2.0.0 beta allows remote atta…
-
Unscored —
Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code v…
-
Unscored —
Buffer overflow in Microsoft Visual InterDev 6.0 (SP6) allows user-assisted attackers to execute arbitrary code via a S…
-
Unscored —CVE-2008-1711 Public exploit
Terong PHP Photo Gallery (aka Advanced Web Photo Gallery) 1.0 stores passwords in cleartext in a MySQL database, which …
-
Unscored —
Stack-based buffer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 20…
-
Unscored —CVE-2008-1084 Public exploit
Unspecified vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, through Vista S…
-
High 8.1
Heap-based buffer overflow in the CreateDIBPatternBrushPt function in GDI in Microsoft Windows 2000 SP4, XP SP2, Server…
-
Unscored —CVE-2008-1702 Public exploit
Absolute path traversal vulnerability in dload.php in the my_gallery 2.3 plugin for e107 allows remote attackers to obt…
-
Unscored —
Stack-based buffer overflow in ovwparser.dll in HP OpenView Network Node Manager (OV NNM) 7.53, 7.51, and earlier allow…
-
Unscored —CVE-2008-1696 Public exploit
Directory traversal vulnerability in makepost.php in DaZPHPNews 0.1-1, when register_globals is enabled and magic_quote…