Skip to content
OpenAdvisories

Archive

June 2008

Vulnerabilities first published in this month (UTC), newest first.

219 results · Clear filters · Feed

  • Unscored —
    CVE-2008-2948 Public exploit EPSS 25%

    Cross-domain vulnerability in Microsoft Internet Explorer 7 and 8 allows remote attackers to change the location proper…

  • Unscored —
    CVE-2008-2949 Public exploit EPSS 20%

    Cross-domain vulnerability in Microsoft Internet Explorer 6 and 7 allows remote attackers to change the location proper…

  • Unscored —
    CVE-2008-2365 Public exploit

    Race condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used in Red Hat Enterprise…

  • Unscored —
    CVE-2008-2943 Public exploit

    Double free vulnerability in IBM Tivoli Directory Server (TDS) 6.1.0.0 through 6.1.0.15 allows remote authenticated adm…

  • Unscored —
    CVE-2008-2909 Public exploit

    SQL injection vulnerability in results.php in Clever Copy 3.0 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2008-2908 Public exploit EPSS 35%

    Multiple stack-based buffer overflows in a certain ActiveX control in ienipp.ocx in Novell iPrint Client for Windows be…

  • Unscored —
    CVE-2008-2920 Public exploit

    admin/filemanager/ (aka the File Manager) in EZTechhelp EZCMS 1.2 and earlier does not require authentication, which al…

  • Unscored —
    CVE-2008-2911 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in Contenido 4.8.4 allow remote attackers to inject ar…

  • Unscored —
    CVE-2008-2917 Public exploit

    SQL injection vulnerability in productsofcat.asp in E-SMART CART allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2008-2922 Public exploit

    Stack-based buffer overflow in artegic Dana IRC client 1.3 and earlier allows remote attackers to cause a denial of ser…

  • Unscored —
    CVE-2008-2910 Public exploit

    Buffer overflow in the DXTTextOutEffect ActiveX control (aka the Text-Effect DXT Filter), as distributed in TextOut.dll…

  • Unscored —
    CVE-2008-2903 Public exploit

    SQL injection vulnerability in news.php in Advanced Webhost Billing System (AWBS) 2.3.3 through 2.7.1, when magic_quote…

  • Unscored —
    CVE-2008-2914 Public exploit

    SQL injection vulnerability in jobseekers/JobSearch3.php (aka the search module) in PHP JOBWEBSITE PRO allows remote at…

  • Unscored —
    CVE-2008-2918 Public exploit

    SQL injection vulnerability in details.php in Application Dynamics Cartweaver 3.0 allows remote attackers to execute ar…

  • Unscored —
    CVE-2008-2912 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Contenido CMS 4.8.4 allow remote attackers to execute arbitrary P…

  • Unscored —
    CVE-2008-2905 Public exploit EPSS 18%

    PHP remote file inclusion vulnerability in includes/Cache/Lite/Output.php in the Cache_Lite package in Mambo 4.6.4 and …

  • Unscored —
    CVE-2008-2906 Public exploit

    SQL injection vulnerability in lista_anexos.php in WebChamado 1.1 allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2008-2921 Public exploit

    SQL injection vulnerability in index.php in EZTechhelp EZCMS 1.2 and earlier allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2008-2913 Public exploit

    Directory traversal vulnerability in func.php in Devalcms 1.4a, when magic_quotes_gpc is disabled, allows remote attack…

  • Unscored —
    CVE-2008-2919 Public exploit

    SQL injection vulnerability in listing.php in Gryphon gllcTS2 4.2.4 allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2008-2907 Public exploit

    SQL injection vulnerability in admin/index.php in WebChamado 1.1, when magic_quotes_gpc is disabled, allows remote atta…

  • Unscored —
    CVE-2008-2916 Public exploit

    Multiple SQL injection vulnerabilities in Pre ADS Portal 2.0 and earlier, when magic_quotes_gpc is disabled, allow remo…

  • Unscored —
    CVE-2008-2915 Public exploit

    Multiple SQL injection vulnerabilities in jobseekers/JobSearch.php (aka the search module) in Pre Job Board allow remot…

  • Unscored —
    CVE-2008-2902 Public exploit

    SQL injection vulnerability in profile.php in AlstraSoft AskMe Pro 2.1 and earlier allows remote attackers to execute a…

  • Unscored —
    CVE-2008-2901 Public exploit

    Multiple SQL injection vulnerabilities in Haudenschilt Family Connections CMS (FCMS) 1.4 allow remote authenticated use…

  • Unscored —
    CVE-2008-2904 Public exploit

    SQL injection vulnerability in shop.php in Conkurent PHPMyCart allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2008-2898 Public exploit

    Directory traversal vulnerability in includes/header.php in Hedgehog-CMS 1.21 allows remote attackers to include and ex…

  • Unscored —
    CVE-2008-2889 Public exploit

    Directory traversal vulnerability in the FTP client in AceBIT WISE-FTP 4.1.0 and 5.5.8 allows remote FTP servers to cre…

  • Unscored —
    CVE-2008-2896 Public exploit

    Directory traversal vulnerability in index.php in FireAnt 1.3 allows remote attackers to include and execute arbitrary …

  • Unscored —
    CVE-2008-2894 Public exploit

    Directory traversal vulnerability in the FTP client in NCH Software Classic FTP 1.02 for Windows allows remote FTP serv…

  • Unscored —
    CVE-2008-2892 Public exploit

    SQL injection vulnerability in the EXP Shop (com_expshop) component 1.0 for Joomla! allows remote attackers to execute …

  • Unscored —
    CVE-2008-2900 Public exploit

    SQL injection vulnerability in item.php in PHPAuction 3.2 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2008-2893 Public exploit

    SQL injection vulnerability in news.php in AJ Square aj-hyip (aka AJ HYIP Acme) allows remote attackers to execute arbi…

  • Unscored —
    CVE-2008-2886 Public exploit

    PHP remote file inclusion vulnerability in include/plugins/jrBrowser/purchase.php in Jamroom 3.3.0 through 3.3.5, when …

  • Unscored —
    CVE-2008-2890 Public exploit

    Multiple SQL injection vulnerabilities in Online Fantasy Football League (OFFL) 0.2.6 and earlier allow remote attacker…

  • Unscored —
    CVE-2008-2895 Public exploit

    Directory traversal vulnerability in index.php in AproxEngine 5.1.0.4 allows remote attackers to include and execute ar…

  • Unscored —
    CVE-2008-2897 Public exploit

    SQL injection vulnerability in index.php in PageSquid CMS 0.3 Beta allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2008-2884 Public exploit

    PHP remote file inclusion vulnerability in display.php in RSS-aggregator allows remote attackers to execute arbitrary P…

  • Unscored —
    CVE-2008-2885 Public exploit

    PHP remote file inclusion vulnerability in src/browser/resource/categories/resource_categories_view.php in Open Digital…

  • Unscored —
    CVE-2008-2888 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in MiGCMS 2.0.5, when register_globals is enabled, allow remote atta…