Archive
May 2008
Vulnerabilities first published in this month (UTC), newest first.
195 results · Clear filters · Feed
-
Unscored —CVE-2008-2336 Public exploit
SQL injection vulnerability in category.php in 68 Classifieds 4.0.1 allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2008-2337 Public exploit
Multiple SQL injection vulnerabilities in IMGallery 2.5, when magic_quotes_gpc is disabled, allow remote attackers to e…
-
Unscored —CVE-2008-2340 Public exploit
Multiple SQL injection vulnerabilities in News Manager 2.0 allow remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2008-2334 Public exploit
Multiple SQL injection vulnerabilities in W1L3D4 Philboard 0.5 allow remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2008-0167 Public exploit
The write_array_file function in utils/include.pl in GForge 4.5.14 updates configuration files by truncating them to ze…
-
Unscored —CVE-2008-2297 Public exploit
The admin.php file in Rantx allows remote attackers to bypass authentication and gain privileges by setting the loginin…
-
Unscored —CVE-2008-2294 Public exploit
Pet Grooming Management System 2.0 allows remote attackers to gain privileges via a direct request to useradded.php wit…
-
Unscored —CVE-2008-2298 Public exploit
Admin.php in Web Slider 0.6 allows remote attackers to bypass authentication and gain privileges by setting the admin c…
-
Unscored —CVE-2008-2283 Public exploit
IDAutomation allows remote attackers to overwrite arbitrary files via the argument to the (1) SaveBarCode and (2) SaveE…
-
Unscored —
SQL injection vulnerability in axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allo…
-
Unscored —CVE-2008-2301 Public exploit
SQL injection vulnerability in Kostenloses Linkmanagementscript allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2008-2282 Public exploit
admin.php in Internet Photoshow and Internet Photoshow Special Edition (SE) allows remote attackers to bypass authentic…
-
Unscored —
Cross-zone scripting vulnerability in the Print Table of Links feature in Internet Explorer 6.0, 7.0, and 8.0b allows u…
-
Unscored —CVE-2008-2293 Public exploit
admin.php in Multi-Page Comment System (MPCS) 1.0 and 1.1 allows remote attackers to bypass authentication and gain pri…
-
Unscored —CVE-2008-2292 Public exploit
Buffer overflow in the __snprint_value function in snmp_get in Net-SNMP 5.1.4, 5.2.4, and 5.4.1, as used in SNMP.xs for…
-
Unscored —CVE-2008-2284 Public exploit
PHP remote file inclusion vulnerability in fusebox5.php in Fusebox 5.5.1 allows remote attackers to execute arbitrary P…
-
Unscored —CVE-2008-2296 Public exploit
PHP remote file inclusion vulnerability in include/bbs.lib.inc.php in Rgboard 3.0.12 allows remote attackers to execute…
-
Unscored —CVE-2008-2295 Public exploit
Cross-site scripting (XSS) vulnerability in rg_search.php in Rgboard 3.0.12, and possibly earlier versions, allows remo…
-
Unscored —CVE-2008-2279 Public exploit
Freelance Auction Script 1.0 stores user passwords in plaintext in the tbl_users table, which allows attackers to gain …
-
Unscored —CVE-2008-2277 Public exploit
SQL injection vulnerability in detail.php in Feedback and Rating Script 1.0 allows remote attackers to execute arbitrar…
-
Unscored —CVE-2008-2278 Public exploit
SQL injection vulnerability in browseproject.php in Freelance Auction Script 1.0 allows remote attackers to execute arb…
-
Unscored —CVE-2008-2264 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in CyrixMED 1.4 allows remote attackers to inject arbitrary web s…
-
Unscored —CVE-2008-2267 Public exploit
Incomplete blacklist vulnerability in javaUpload.php in Postlet in the FileManager module in CMS Made Simple 1.2.4 and …
-
Unscored —CVE-2008-2263 Public exploit
SQL injection vulnerability in linking.page.php in Automated Link Exchange Portal allows remote attackers to execute ar…
-
Unscored —CVE-2008-2265 Public exploit
SQL injection vulnerability in news.php in EMO Realty Manager allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2008-2270 Public exploit
Multiple PHP remote file inclusion vulnerabilities in PHPWAY Kostenloses Linkmanagementscript allow remote attackers to…
-
Unscored —CVE-2008-2276 Public exploit
Cross-site request forgery (CSRF) vulnerability in manage_user_create.php in Mantis 1.1.1 allows remote attackers to cr…
-
Unscored —CVE-2008-2269 Public exploit
AustinSmoke GasTracker (AS-GasTracker) 1.0.0 allows remote attackers to bypass authentication and gain privileges by se…
-
Unscored —CVE-2008-2225 Public exploit
SQL injection vulnerability in index.php in gameCMS Lite 1.0 allows remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2008-2215 Public exploit
Multiple directory traversal vulnerabilities in Project-Based Calendaring System (PBCS) 0.7.1-1 allow remote attackers …
-
Unscored —CVE-2008-2220 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Interact Learning Community Environment Interact 2.4.1, when regi…
-
Unscored —CVE-2008-2224 Public exploit
Multiple PHP remote file inclusion vulnerabilities in SazCart 1.5.1, when register_globals is enabled, allow remote att…
-
Unscored —CVE-2008-2227 Public exploit
Multiple directory traversal vulnerabilities in PHP-Fusion Forum Rank System 6 allow remote attackers to include and ex…
-
Unscored —CVE-2008-2219 Public exploit
Cross-site scripting (XSS) vulnerability in install.php in C-News.fr C-News 1.0.1 allows remote attackers to inject arb…
-
Unscored —CVE-2008-2223 Public exploit
SQL injection vulnerability in group_posts.php in vShare YouTube Clone 2.6 allows remote attackers to execute arbitrary…
-
Unscored —CVE-2008-2214 Public exploit
Stack-based buffer overflow in the Network Manager in Castle Rock Computing SNMPc 7.1 and earlier allows remote attacke…
-
Unscored —CVE-2008-2222 Public exploit
SQL injection vulnerability in login.php in EQdkp 1.3.2f allows remote attackers to bypass EQdkp user authentication vi…
-
Unscored —CVE-2008-2217 Public exploit
Directory traversal vulnerability in cm/graphie.php in Content Management System 0.6.1 for Phprojekt allows remote atta…
-
Unscored —CVE-2008-2216 Public exploit
Unrestricted file upload vulnerability in src/yopy_upload.php in Project-Based Calendaring System (PBCS) 0.7.1 allows r…
-
Unscored —CVE-2008-2228 Public exploit
PHP remote file inclusion vulnerability in portfolio/commentaires/derniers_commentaires.php in Cyberfolio 7.12, when re…