Skip to content
OpenAdvisories

Archive

5 May 2008

Vulnerabilities first published on this day (UTC), newest first.

  1. 19
  2. 211
  3. 3 
  4. 4 
  5. 515
  6. 611
  7. 710
  8. 814
  9. 918
  10. 10 
  11. 11 
  12. 1224
  13. 1334
  14. 1443
  15. 15 
  16. 1634
  17. 17 
  18. 1822
  19. 1913
  20. 2012
  21. 2117
  22. 2219
  23. 2317
  24. 24 
  25. 25 
  26. 26 
  27. 2719
  28. 2822
  29. 2922
  30. 30 
  31. 31 

15 results · Feed

  • Unscored —
    CVE-2008-0599 EPSS 11%

    The init_request_info function in sapi/cgi/cgi_main.c in PHP before 5.2.6 does not properly consider operator precedenc…

  • Unscored —
    CVE-2008-2081 Public exploit

    Directory traversal vulnerability in index.php in Siteman 2.0.x2 allows remote authenticated administrators to include …

  • Unscored —

    The escapeshellcmd API function in PHP before 5.2.6 has unknown impact and context-dependent attack vectors related to …

  • Unscored —

    Stack-based buffer overflow in the FastCGI SAPI (fastcgi.c) in PHP before 5.2.6 has unknown impact and attack vectors.

  • Unscored —
    CVE-2008-2083 Public exploit

    SQL injection vulnerability in directory.php in Prozilla Hosting Index, when magic_quotes_gpc is disabled, allows remot…

  • Unscored —
    CVE-2008-2082 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Siteman 2.0.x2 allows remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2008-2084 Public exploit

    SQL injection vulnerability in topics.php in the MyArticles 0.6 beta-1 module for RunCMS allows remote attackers to exe…

  • Unscored —

    MySQL 4.1.x before 4.1.24, 5.0.x before 5.0.60, 5.1.x before 5.1.24, and 6.0.x before 6.0.5 allows local users to bypas…

  • Unscored —
    CVE-2008-2076 Public exploit

    Directory traversal vulnerability in admin.php in ActualScripts ActualAnalyzer Lite 2.78 allows remote attackers to inc…

  • Unscored —

    Unspecified vulnerability in Plain Black WebGUI 7.4.34 has unknown impact and attack vectors related to "data form list…

  • Unscored —
    CVE-2008-2074 Public exploit

    Multiple PHP remote file inclusion vulnerabilities Harris Yusuf Arifin Harris Wap Chat 1.0, when register_globals is en…

  • Unscored —
    CVE-2008-2073 Public exploit

    Directory traversal vulnerability in include/global.inc.php in Virtual Design Studio vlbook 1.21 allows remote attacker…

  • Unscored —
    CVE-2008-2072 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Virtual Design Studio vlbook 1.21 allows remote attackers to i…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in pic.php in AstroCam 2.5.0 through 2.7.3 allows remote attackers to inject a…

  • Unscored —

    Robocode before 1.6.0 allows user-assisted remote attackers to "access the internals of the Robocode game" via unspecif…