Skip to content
OpenAdvisories

Archive

26 June 2008

Vulnerabilities first published on this day (UTC), newest first.

← May 2008 2008 / June /26 July 2008 →
  1. 1 
  2. 228
  3. 327
  4. 431
  5. 516
  6. 620
  7. 7 
  8. 8 
  9. 91
  10. 1033
  11. 111
  12. 1227
  13. 1321
  14. 14 
  15. 15 
  16. 1631
  17. 175
  18. 1831
  19. 1913
  20. 2013
  21. 21 
  22. 22 
  23. 2320
  24. 2416
  25. 2527
  26. 2620
  27. 2717
  28. 28 
  29. 29 
  30. 3039
All Critical High Medium Low Exploited only Public exploit

15 results · Clear filters · Feed

  • Unscored —
    CVE-2008-2882 Public exploit

    upgrade.asp in sHibby sHop 2.2 and earlier does not require administrative authentication, which allows remote attacker…

  • Unscored —
    CVE-2008-2871 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in template2.php in PEGames allow remote attackers to inject arbitr…

  • Unscored —
    CVE-2008-2873 Public exploit

    sHibby sHop 2.2 and earlier stores sensitive information under the web root with insufficient access control, which all…

  • Unscored —
    CVE-2008-2874 Public exploit

    SQL injection vulnerability in index.php in Softbiz Jokes & Funny Pics Script allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2008-2875 Public exploit

    SQL injection vulnerability in index.php in Webdevindo-CMS 1.0.0 allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2008-2881 Public exploit

    Relative Real Estate Systems 3.0 and earlier stores passwords in cleartext in a MySQL database, which allows context-de…

  • Unscored —
    CVE-2008-2872 Public exploit

    SQL injection vulnerability in default.asp in sHibby sHop 2.2 and earlier allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2008-2870 Public exploit

    Multiple SQL injection vulnerabilities in ShareCMS 0.1 Beta allow remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2008-2869 Public exploit

    SQL injection vulnerability in out.php in E-topbiz Link ADS 1 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2008-2868 Public exploit

    SQL injection vulnerability in detail.asp in DUware DUcalendar 1.0 and possibly earlier allows remote attackers to exec…

  • Unscored —
    CVE-2008-2877 Public exploit

    PHP remote file inclusion vulnerability in admin/include/lib.module.php in cmsWorks 2.2 RC4, when register_globals is e…

  • Unscored —
    CVE-2008-2878 Public exploit

    Open redirect vulnerability in rss_getfile.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allo…

  • Unscored —
    CVE-2008-2876 Public exploit

    Directory traversal vulnerability in index.php in mUnky 0.0.1 allows remote attackers to include and execute arbitrary …

  • Unscored —
    CVE-2008-2867 Public exploit

    SQL injection vulnerability in adclick.php in E-topbiz Viral DX 1 2.07 allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2008-2883 Public exploit

    PHP remote file inclusion vulnerability in include/plugins/jrBrowser/payment.php in Jamroom 3.3.0 through 3.3.5 allows …