Archive
May 2008
Vulnerabilities first published in this month (UTC), newest first.
386 results · Feed
-
Unscored —CVE-2008-2355 Public exploit
Directory traversal vulnerability in index.php in WR-Meeting 1.0, when magic_quotes_gpc is disabled, allows remote atta…
-
Unscored —
Unspecified vulnerability in the data export function in testMaker before 3.0p10 allows test authors to obtain access t…
-
Unscored —CVE-2008-2347 Public exploit
MyPicGallery 1.0 allows remote attackers to bypass application authentication and gain administrative access by setting…
-
Unscored —CVE-2008-2346 Public exploit
AlkalinePHP 0.77.35 and earlier allows remote attackers to bypass authentication and gain administrative access by crea…
-
Unscored —CVE-2008-2352 Public exploit
Directory traversal vulnerability in index.php in Smeego 1.0, when magic_quotes_gpc is disabled, allows remote attacker…
-
Unscored —CVE-2008-2356 Public exploit
SQL injection vulnerability in index.php in Archangel Weblog 0.90.02 and earlier allows remote attackers to execute arb…
-
Unscored —CVE-2008-2350 Public exploit
Directory traversal vulnerability in highlight.php in bcoos 1.0.9 through 1.0.13 allows remote attackers to read arbitr…
-
Unscored —CVE-2008-2349 Public exploit
Zomplog 3.8.2 and earlier allows remote attackers to gain administrative access by creating an admin account via a dire…
-
Unscored —
Unspecified vulnerability in the air_filemanager 0.6.0 and earlier extension for TYPO3 allows remote attackers to execu…
-
Unscored —CVE-2008-2341 Public exploit
PHP remote file inclusion vulnerability in ch_readalso.php in News Manager 2.0 allows remote attackers to execute arbit…
-
Unscored —CVE-2008-2339 Public exploit
SQL injection vulnerability in index.php in Turnkey Web Tools SunShop Shopping Cart 3.5.1 allows remote attackers to ex…
-
Unscored —CVE-2008-2335 Public exploit
Cross-site scripting (XSS) vulnerability in search_results.php in Vastal I-Tech phpVID 1.1 and 1.2 allows remote attack…
-
Unscored —CVE-2008-2343 Public exploit
News Manager 2.0 allows remote attackers to bypass restrictions and obtain sensitive information via a direct request t…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the air_filemanager 0.6.0 and earlier extension for TYPO3 allows remote att…
-
Unscored —CVE-2008-2338 Public exploit
Interspire ActiveKB 1.5 and earlier allows remote attackers to gain privileges by setting the auth cookie to true when …
-
Unscored —CVE-2008-2342 Public exploit
Directory traversal vulnerability in attachments.php in News Manager 2.0 allows remote attackers to read arbitrary file…
-
Unscored —CVE-2008-2336 Public exploit
SQL injection vulnerability in category.php in 68 Classifieds 4.0.1 allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2008-2337 Public exploit
Multiple SQL injection vulnerabilities in IMGallery 2.5, when magic_quotes_gpc is disabled, allow remote attackers to e…
-
Unscored —CVE-2008-2340 Public exploit
Multiple SQL injection vulnerabilities in News Manager 2.0 allow remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2008-2334 Public exploit
Multiple SQL injection vulnerabilities in W1L3D4 Philboard 0.5 allow remote attackers to execute arbitrary SQL commands…
-
High —
TYPO3 Reveals Sensitive Information via Direct Request to `misc/phpcheck/`
TYPO3 3.8.0 and earlier allows remote attackers to obtain sensitive information via a direct request to misc/phpcheck/, which invokes the phpinfo function and prints values of unspecified environment variables.
-
Unscored —CVE-2008-0167 Public exploit
The write_array_file function in utils/include.pl in GForge 4.5.14 updates configuration files by truncating them to ze…
-
Unscored —CVE-2008-2297 Public exploit
The admin.php file in Rantx allows remote attackers to bypass authentication and gain privileges by setting the loginin…
-
Unscored —CVE-2008-2294 Public exploit
Pet Grooming Management System 2.0 allows remote attackers to gain privileges via a direct request to useradded.php wit…
-
Unscored —CVE-2008-2298 Public exploit
Admin.php in Web Slider 0.6 allows remote attackers to bypass authentication and gain privileges by setting the admin c…
-
Unscored —
Unspecified vulnerability in Citrix Presentation Server 4.5 and earlier, Citrix Access Essentials 2.0 and earlier, and …
-
Unscored —
Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 has insufficient access control for deletion and mo…
-
Unscored —CVE-2008-2283 Public exploit
IDAutomation allows remote attackers to overwrite arbitrary files via the argument to the (1) SaveBarCode and (2) SaveE…
-
Unscored —
SQL injection vulnerability in axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allo…
-
Unscored —
Unspecified vulnerability in SecureICA and ICA Basic encryption of Citrix Presentation Server 4.5 and earlier, Access E…
-
Unscored —CVE-2008-2301 Public exploit
SQL injection vulnerability in Kostenloses Linkmanagementscript allows remote attackers to execute arbitrary SQL comman…
-
Unscored —
Unspecified vulnerability in the Agent user interface in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.…
-
Unscored —
Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 does not properly protect the install directory, wh…
-
Unscored —
Unspecified vulnerability in a tooltip element in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 a…
-
Unscored —
The ssh-vulnkey tool on Ubuntu Linux 7.04, 7.10, and 8.04 LTS does not recognize authorized_keys lines that contain opt…
-
Unscored —CVE-2008-2282 Public exploit
admin.php in Internet Photoshow and Internet Photoshow Special Edition (SE) allows remote attackers to bypass authentic…
-
Unscored —
Cross-zone scripting vulnerability in the Print Table of Links feature in Internet Explorer 6.0, 7.0, and 8.0b allows u…
-
Unscored —CVE-2008-2293 Public exploit
admin.php in Multi-Page Comment System (MPCS) 1.0 and 1.1 allows remote attackers to bypass authentication and gain pri…
-
Unscored —
axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 generates credentials with a fixed …
-
Unscored —CVE-2008-2292 Public exploit
Buffer overflow in the __snprint_value function in snmp_get in Net-SNMP 5.1.4, 5.2.4, and 5.4.1, as used in SNMP.xs for…