Archive
May 2008
Vulnerabilities first published in this month (UTC), newest first.
195 results · Clear filters · Feed
-
Unscored —CVE-2008-2126 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Tux CMS 0.1 allow remote attackers to inject arbitrary web scrip…
-
Unscored —CVE-2008-2118 Public exploit
SQL injection vulnerability in info.php in Project Alumni 1.0.9 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2008-2113 Public exploit
SQL injection vulnerability in annuaire.php in PHPEasyData 1.5.4 allows remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2008-2117 Public exploit
Cross-site scripting (XSS) vulnerability in pages/news.page.inc in Project Alumni 1.0.9 allows remote attackers to inje…
-
Unscored —CVE-2008-2114 Public exploit
SQL injection vulnerability in emall/search.php in Pre Shopping Mall 1.1 allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2008-2116 Public exploit
Multiple directory traversal vulnerabilities in editor.php in ScriptsEZ.net Power Editor 2.0 allow remote attackers to …
-
Unscored —CVE-2008-2115 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in editor.php in ScriptsEZ.net Power Editor 2.0 allow remote attack…
-
Unscored —CVE-2008-2111 Public exploit
The ActiveX Control (yNotifier.dll) in Yahoo! Assistant 3.6 and earlier allows remote attackers to execute arbitrary co…
-
Unscored —CVE-2008-2110 Public exploit
Unrestricted file upload vulnerability in qtofm.php in QTOFileManager 1.0 allows remote attackers to execute arbitrary …
-
Unscored —CVE-2008-2106 Public exploit
Call of Duty 4 (CoD4) 1.5 and earlier allows remote authenticated users to cause a denial of service (crash) via a type…
-
Unscored —CVE-2008-2096 Public exploit
SQL injection vulnerability in BackLinkSpider allows remote attackers to execute arbitrary SQL commands via the cat_id …
-
Unscored —CVE-2008-2094 Public exploit
SQL injection vulnerability in article.php in the Article module for XOOPS allows remote attackers to execute arbitrary…
-
Unscored —CVE-2008-2095 Public exploit
SQL injection vulnerability in index.php in the FlippingBook (com_flippingbook) 1.0.4 component for Joomla! allows remo…
-
Unscored —CVE-2008-2092 Public exploit
Linksys SPA-2102 Phone Adapter 3.3.6 allows remote attackers to cause a denial of service (crash) via a long ping packe…
-
Unscored —CVE-2008-2091 Public exploit
Directory traversal vulnerability in ipn.php in KubeLabs Kubelance 1.6.4 allows remote attackers to include and execute…
-
Unscored —CVE-2008-2093 Public exploit
SQL injection vulnerability in the Profiler (com_comprofiler) component in Community Builder for Mambo and Joomla! allo…
-
Unscored —
The SuiteLink Service (aka slssvc.exe) in WonderWare SuiteLink before 2.0 Patch 01, as used in WonderWare InTouch 8.0, …
-
Unscored —CVE-2008-2088 Public exploit
SQL injection vulnerability in admin/news.php in PHP Forge 3.0 beta 2 allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2008-2087 Public exploit
SQL injection vulnerability in search_result.php in Softbiz Web Host Directory Script, when magic_quotes_gpc is disable…
-
Unscored —CVE-2008-2081 Public exploit
Directory traversal vulnerability in index.php in Siteman 2.0.x2 allows remote authenticated administrators to include …
-
Unscored —CVE-2008-2083 Public exploit
SQL injection vulnerability in directory.php in Prozilla Hosting Index, when magic_quotes_gpc is disabled, allows remot…
-
Unscored —CVE-2008-2082 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Siteman 2.0.x2 allows remote attackers to inject arbitrary web…
-
Unscored —CVE-2008-2084 Public exploit
SQL injection vulnerability in topics.php in the MyArticles 0.6 beta-1 module for RunCMS allows remote attackers to exe…
-
Unscored —CVE-2008-2076 Public exploit
Directory traversal vulnerability in admin.php in ActualScripts ActualAnalyzer Lite 2.78 allows remote attackers to inc…
-
Unscored —CVE-2008-2074 Public exploit
Multiple PHP remote file inclusion vulnerabilities Harris Yusuf Arifin Harris Wap Chat 1.0, when register_globals is en…
-
Unscored —CVE-2008-2073 Public exploit
Directory traversal vulnerability in include/global.inc.php in Virtual Design Studio vlbook 1.21 allows remote attacker…
-
Unscored —CVE-2008-2072 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Virtual Design Studio vlbook 1.21 allows remote attackers to i…
-
Unscored —
Buffer overflow in Novell GroupWise 7 allows remote attackers to cause a denial of service or execute arbitrary code vi…
-
Unscored —CVE-2008-2065 Public exploit
SQL injection vulnerability in jokes.php in YourFreeWorld Jokes Site Script allows remote attackers to execute arbitrar…
-
Unscored —CVE-2008-2063 Public exploit
SQL injection vulnerability in browse.videos.php in Joovili 3.1 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2008-2048 Public exploit
Cross-site scripting (XSS) vulnerability in hpz/admin/Default.asp in Angelo-Emlak 1.0 allows remote attackers to inject…
-
Unscored —CVE-2008-2045 Public exploit
Absolute path traversal vulnerability in SugarCRM Sugar Community Edition 4.5.1 and 5.0.0 allows remote attackers to re…
-
Unscored —CVE-2008-2046 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Softpedia SiteXS CMS 0.1.1 Pre-Alpha allows remote attackers t…
-
Unscored —CVE-2008-2047 Public exploit
Multiple SQL injection vulnerabilities in Angelo-Emlak 1.0 allow remote attackers to execute arbitrary SQL commands via…
-
Unscored —
includes/library.php in netOffice Dwins 1.3 p2 compares the demoSession variable to the 'true' string literal instead o…