Archive
May 2008
Vulnerabilities first published in this month (UTC), newest first.
195 results · Clear filters · Feed
-
Unscored —CVE-2008-2505 Public exploit
Cross-site scripting (XSS) vulnerability in result.php in Simpel Side Weblosning 1 through 4 allows remote attackers to…
-
Unscored —CVE-2008-2504 Public exploit
Multiple SQL injection vulnerabilities in Simpel Side Netbutik 1 through 4 allow remote attackers to execute arbitrary …
-
Unscored —CVE-2008-2501 Public exploit
Multiple SQL injection vulnerabilities in PHPhotoalbum 0.5 allow remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2008-2508 Public exploit
Cross-site scripting (XSS) vulnerability in news.php in Tr Script News 2.1 allows remote attackers to inject arbitrary …
-
Unscored —CVE-2008-2507 Public exploit
Cross-site scripting (XSS) vulnerability in Calcium40.pl in Brown Bear Software Calcium 3.10 and 4.0.4 allows remote at…
-
Unscored —CVE-2008-2506 Public exploit
Multiple SQL injection vulnerabilities in Simpel Side Weblosning 1 through 4 allow remote attackers to execute arbitrar…
-
Unscored —CVE-2008-2510 Public exploit
SQL injection vulnerability in wp-uploadfile.php in the Upload File plugin for WordPress allows remote attackers to exe…
-
Unscored —CVE-2008-2509 Public exploit
SQL injection vulnerability in pwd.asp in Excuse Online allows remote attackers to execute arbitrary SQL commands via t…
-
Unscored —
Stack-based buffer overflow in the Creative Software AutoUpdate Engine ActiveX control in CTSUEng.ocx allows remote att…
-
Unscored —
Heap-based buffer overflow in the receive_smb_raw function in util/sock.c in Samba 3.0.0 through 3.0.29 allows remote a…
-
Unscored —
Multiple stack-based buffer overflows in the Command Line Interface process in the Server Agent in EMC AlphaStor 3.1 SP…
-
Unscored —
robotd in the Library Manager in EMC AlphaStor 3.1 SP1 for Windows allows remote attackers to execute arbitrary command…
-
Unscored —
Stack-based buffer overflow in the Community Services Multiplexer (aka MUX or StMux.exe) in IBM Lotus Sametime 7.5.1 CF…
-
Unscored —CVE-2008-2491 Public exploit
SQL injection vulnerability in adv_cat.php in AbleSpace 1.0 allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2008-2479 Public exploit
Multiple SQL injection vulnerabilities in phpFix 2.0 allow remote attackers to execute arbitrary SQL commands via the (…
-
Unscored —CVE-2008-2496 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Quate CMS 0.3.4 allow remote attackers to inject arbitrary web s…
-
Unscored —CVE-2008-2492 Public exploit
Multiple SQL injection vulnerabilities in Campus Bulletin Board 3.4 allow remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2008-2487 Public exploit
SQL injection vulnerability in index.php in MAXSITE 1.10 and earlier allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2008-2480 Public exploit
PHP remote file inclusion vulnerability in plus.php in plusPHP Short URL Multi-User Script 1.6 allows remote attackers …
-
Unscored —CVE-2008-2478 Public exploit
scripts/wwwacct in cPanel 11.18.6 STABLE and earlier and 11.23.1 CURRENT and earlier allows remote authenticated users …
-
Unscored —CVE-2008-2483 Public exploit
Directory traversal vulnerability in index.php in Xomol CMS 1.20071213 allows remote attackers to include and execute a…
-
Unscored —CVE-2008-2493 Public exploit
Cross-site scripting (XSS) vulnerability in post3/Book.asp in Campus Bulletin Board 3.4 allows remote attackers to inje…
-
Unscored —CVE-2008-2482 Public exploit
Directory traversal vulnerability in install_mod.php in insanevisions OneCMS 2.5 allows remote attackers to include and…
-
Unscored —CVE-2008-2481 Public exploit
PHP remote file inclusion vulnerability in authentication/phpbb3/phpbb3.functions.php in phpRaider 1.0.7 and 1.0.7a, wh…
-
Unscored —CVE-2008-2477 Public exploit
SQL injection vulnerability in index.php in MxBB (aka MX-System) Portal 2.7.3 allows remote attackers to execute arbitr…
-
Unscored —CVE-2008-2488 Public exploit
admin/userform.php in RoomPHPlanning 1.5 does not require administrative credentials, which allows remote authenticated…
-
Unscored —CVE-2008-2484 Public exploit
SQL injection vulnerability in index.php in Xomol CMS 1.20071213, when magic_quotes_gpc is disabled, allows remote atta…
-
Unscored —CVE-2008-2447 Public exploit
SQL injection vulnerability in products.php in the Mytipper ZoGo-shop plugin 1.15.5 and 1.16 Beta 13 for e107 allows re…
-
Unscored —CVE-2008-2456 Public exploit
SQL injection vulnerability in index.php in ComicShout 2.5 and earlier allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2008-2449 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Isaac McGowan phpInstantGallery 2.0 allow remote attackers to in…
-
Unscored —CVE-2008-2461 Public exploit
SQL injection vulnerability in index.php in Netious CMS 0.4 allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2008-2443 Public exploit
SQL injection vulnerability in dpage.php in The Real Estate Script allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2008-2446 Public exploit
Multiple SQL injection vulnerabilities in Web Group Communication Center (WGCC) 1.0.3 PreRelease 1 and earlier allow re…
-
Unscored —CVE-2008-2454 Public exploit
SQL injection vulnerability in the xsstream-dm (com_xsstream-dm) component 0.01 Beta for Joomla! allows remote attacker…
-
Unscored —CVE-2008-2457 Public exploit
SQL injection vulnerability in jokes_category.php in PHP-Jokesite 2.0 allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2008-2445 Public exploit
Cross-site scripting (XSS) vulnerability in profile.php in Web Group Communication Center (WGCC) 1.0.3 PreRelease 1 and…
-
Unscored —CVE-2008-2453 Public exploit
Multiple SQL injection vulnerabilities in PHP Classifieds Script allow remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2008-2444 Public exploit
SQL injection vulnerability in userreg.php in CaLogic Calendars 1.2.2 allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2008-2459 Public exploit
Directory traversal vulnerability in page.php in EntertainmentScript 1.4.0 allows remote attackers to include and execu…
-
Unscored —CVE-2008-2455 Public exploit
SQL injection vulnerability in comment.php in the MacGuru BLOG Engine plugin 2.2 for e107 allows remote attackers to ex…