Archive
June 2008
Vulnerabilities first published in this month (UTC), newest first.
219 results · Clear filters · Feed
-
Unscored —CVE-2008-2887 Public exploit
Directory traversal vulnerability in index.php in chaozz@work FubarForum 1.5 allows remote attackers to include and exe…
-
Unscored —CVE-2008-2891 Public exploit
SQL injection vulnerability in index.php in eMuSOFT emuCMS 0.3 allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2008-2882 Public exploit
upgrade.asp in sHibby sHop 2.2 and earlier does not require administrative authentication, which allows remote attacker…
-
Unscored —CVE-2008-2871 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in template2.php in PEGames allow remote attackers to inject arbitr…
-
Unscored —CVE-2008-2873 Public exploit
sHibby sHop 2.2 and earlier stores sensitive information under the web root with insufficient access control, which all…
-
Unscored —CVE-2008-2874 Public exploit
SQL injection vulnerability in index.php in Softbiz Jokes & Funny Pics Script allows remote attackers to execute arbitr…
-
Unscored —CVE-2008-2875 Public exploit
SQL injection vulnerability in index.php in Webdevindo-CMS 1.0.0 allows remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2008-2881 Public exploit
Relative Real Estate Systems 3.0 and earlier stores passwords in cleartext in a MySQL database, which allows context-de…
-
Unscored —CVE-2008-2872 Public exploit
SQL injection vulnerability in default.asp in sHibby sHop 2.2 and earlier allows remote attackers to execute arbitrary …
-
Unscored —CVE-2008-2870 Public exploit
Multiple SQL injection vulnerabilities in ShareCMS 0.1 Beta allow remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2008-2869 Public exploit
SQL injection vulnerability in out.php in E-topbiz Link ADS 1 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2008-2868 Public exploit
SQL injection vulnerability in detail.asp in DUware DUcalendar 1.0 and possibly earlier allows remote attackers to exec…
-
Unscored —CVE-2008-2877 Public exploit
PHP remote file inclusion vulnerability in admin/include/lib.module.php in cmsWorks 2.2 RC4, when register_globals is e…
-
Unscored —CVE-2008-2878 Public exploit
Open redirect vulnerability in rss_getfile.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allo…
-
Unscored —CVE-2008-2876 Public exploit
Directory traversal vulnerability in index.php in mUnky 0.0.1 allows remote attackers to include and execute arbitrary …
-
Unscored —CVE-2008-2867 Public exploit
SQL injection vulnerability in adclick.php in E-topbiz Viral DX 1 2.07 allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2008-2883 Public exploit
PHP remote file inclusion vulnerability in include/plugins/jrBrowser/payment.php in Jamroom 3.3.0 through 3.3.5 allows …
-
Unscored —CVE-2008-2842 Public exploit
Cross-site scripting (XSS) vulnerability in edit/showmedia.asp in doITLive CMS 2.50 and earlier allows remote attackers…
-
Unscored —CVE-2008-2862 Public exploit
Multiple SQL injection vulnerabilities in eLineStudio Site Composer (ESC) 2.6 and earlier allow remote attackers to exe…
-
Unscored —CVE-2008-2855 Public exploit
Cross-site scripting (XSS) vulnerability in clanek.php in OwnRS Beta 3 allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2008-2847 Public exploit
SQL injection vulnerability in the Trade module in Maxtrade AIO 1.3.23 allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2008-2854 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Orlando CMS 0.6 allow remote attackers to execute arbitrary PHP c…
-
Unscored —CVE-2008-2845 Public exploit
SQL injection vulnerability in index.php in MyBizz-Classifieds allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2008-2861 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in eLineStudio Site Composer (ESC) 2.6 and earlier allow remote att…
-
Unscored —CVE-2008-2857 Public exploit
AlstraSoft AskMe Pro 2.1 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent …
-
Unscored —CVE-2008-2865 Public exploit
SQL injection vulnerability in index.php in Kalptaru Infotech PHP Site Lock 2.0 allows remote attackers to execute arbi…
-
Unscored —CVE-2008-2858 Public exploit
SQL injection vulnerability in index.php in WebChamado 1.1 allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2008-2846 Public exploit
SQL injection vulnerability in index.php in BoatScripts Classifieds allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2008-2866 Public exploit
SQL injection vulnerability in csc_article_details.php in Caupo.net CaupoShop Classic 1.3 allows remote attackers to ex…
-
Unscored —CVE-2008-2859 Public exploit
Unspecified vulnerability in the IMAP service in NetWin SurgeMail before 3.9g2 allows remote attackers to cause a denia…
-
Unscored —CVE-2008-2860 Public exploit
SQL injection vulnerability in category.php in AJSquare AJ Auction Pro web 2.0 allows remote attackers to execute arbit…
-
Unscored —CVE-2008-2863 Public exploit
Multiple absolute path traversal vulnerabilities in eLineStudio Site Composer (ESC) 2.6 allow remote attackers to creat…
-
Unscored —CVE-2008-2864 Public exploit
eLineStudio Site Composer (ESC) 2.6 and earlier allows remote attackers to obtain sensitive information via a direct re…
-
Unscored —CVE-2008-2844 Public exploit
SQL injection vulnerability in index.php in Carscripts Classifieds allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2008-2853 Public exploit
SQL injection vulnerability in index.php in Easy Webstore 1.2 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2008-2856 Public exploit
SQL injection vulnerability in clanek.php in OwnRS Beta 3 allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2008-2843 Public exploit
Multiple SQL injection vulnerabilities in doITLive CMS 2.50 and earlier allow remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2008-2839 Public exploit
Cross-site scripting (XSS) vulnerability in the search module in Traindepot 0.1 allows remote attackers to inject arbit…
-
Unscored —CVE-2008-2834 Public exploit
SQL injection vulnerability in projects.php in Scientific Image DataBase 0.41 allows remote attackers to execute arbitr…
-
Unscored —
Argument injection vulnerability in XChat 2.8.7b and earlier on Windows, when Internet Explorer is used, allows remote …