Archive
June 2008
Vulnerabilities first published in this month (UTC), newest first.
219 results · Clear filters · Feed
-
Unscored —CVE-2008-2837 Public exploit
SQL injection vulnerability in index.php in CMS-BRD allows remote attackers to execute arbitrary SQL commands via the m…
-
Unscored —
Stack-based buffer overflow in NConvert 4.92, GFL SDK 2.82, and XnView 1.93.6 on Windows and 1.70 on Linux and FreeBSD …
-
Unscored —CVE-2008-2836 Public exploit
PHP remote file inclusion vulnerability in send_reminders.php in WebCalendar 1.0.4 allows remote attackers to execute a…
-
Unscored —CVE-2008-2835 Public exploit
SQL injection vulnerability in cgi-bin/igsuite in IGSuite 3.2.4 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —
Unrestricted file upload vulnerability in calendar_admin.asp in Full Revolution aspWebCalendar 2008 allows remote attac…
-
Unscored —CVE-2008-2833 Public exploit
admin/upload.php in le.cms 1.4 and earlier allows remote attackers to bypass administrative authentication, and upload …
-
Unscored —CVE-2008-2838 Public exploit
Directory traversal vulnerability in index.php in Traindepot 0.1 allows remote attackers to read arbitrary files via a …
-
Unscored —CVE-2008-2830 Public exploit
Open Scripting Architecture in Apple Mac OS X 10.4.11 and 10.5.4, and some other 10.4 and 10.5 versions, does not prope…
-
Unscored —CVE-2008-2827 Public exploit
The rmtree function in lib/File/Path.pm in Perl 5.10 does not properly check permissions before performing a chmod, whi…
-
Unscored —CVE-2008-2823 Public exploit
SQL injection vulnerability in newsarchive.php in PHPeasyblog (formerly phpeasynews) 1.13 RC2 and earlier allows remote…
-
Unscored —CVE-2008-2814 Public exploit
Cross-site scripting (XSS) vulnerability in WallCity-Server Shoutcast Admin Panel 2.0 allows remote attackers to inject…
-
Unscored —CVE-2008-2818 Public exploit
Directory traversal vulnerability in Easy-Clanpage 3.0 b1 allows remote attackers to include and execute arbitrary loca…
-
Unscored —CVE-2008-2822 Public exploit
Multiple directory traversal vulnerabilities in the FTP client in 3D-FTP Client 8.01 (8.0 build 1) allow remote FTP ser…
-
Unscored —CVE-2008-2816 Public exploit
SQL injection vulnerability in post.php in Oxygen (aka O2PHP Bulletin Board) 2.0 allows remote attackers to execute arb…
-
Unscored —CVE-2008-2821 Public exploit
Directory traversal vulnerability in the FTP client in Glub Tech Secure FTP before 2.5.16 on Windows allows remote FTP …
-
Unscored —CVE-2008-2820 Public exploit
Directory traversal vulnerability in lang/lang-system.php in Open Azimyt CMS 0.22 minimal and 0.21 stable allows remote…
-
Unscored —CVE-2008-2817 Public exploit
SQL injection vulnerability in albums.php in NiTrO Web Gallery 1.4.3 and earlier allows remote attackers to execute arb…
-
Unscored —CVE-2008-2815 Public exploit
SQL injection vulnerability in shopping/index.php in MyMarket 1.72 allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2008-2813 Public exploit
Directory traversal vulnerability in index.php in WallCity-Server Shoutcast Admin Panel 2.0, when magic_quotes_gpc is d…
-
Unscored —
SQL injection vulnerability in pages/index.php in BASIC-CMS allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2008-2793 Public exploit
SQL injection vulnerability in group_posts.php in ClipShare before 3.0.1 allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2008-2795 Public exploit
Directory traversal vulnerability in the FTP and SFTP clients in IDM Computer Solutions Inc UltraEdit 14.00b allows rem…
-
Unscored —CVE-2008-2796 Public exploit
SQL injection vulnerability in index.php in FreeCMS 0.2 allows remote attackers to execute arbitrary SQL commands via t…
-
Unscored —CVE-2008-2790 Public exploit
SQL injection vulnerability in detail.php in MountainGrafix easyTrade 2.x allows remote attackers to execute arbitrary …
-
Unscored —CVE-2008-2791 Public exploit
SQL injection vulnerability in product.detail.php in Kalptaru Infotech Comparison Engine Power Script 1.0 allows remote…
-
Unscored —CVE-2008-2792 Public exploit
SQL injection vulnerability in index.php in eroCMS 1.4 and earlier allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2008-2787 Public exploit
Cross-site scripting (XSS) vulnerability in out.php in OpenDocMan 1.2.5 allows remote attackers to inject arbitrary web…
-
Unscored —
Multiple directory traversal vulnerabilities in PHP 5.2.6 and earlier allow context-dependent attackers to bypass safe_…
-
Unscored —CVE-2008-2781 Public exploit
SQL injection vulnerability in index.php in DZOIC Handshakes 3.5 allows remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2008-2783 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Horde Groupware, Groupware Webmail Edition, and Kronolith allow …
-
Unscored —CVE-2008-2778 Public exploit
SQL injection vulnerability in inc/class_search.php in the Search System in RevokeBB 1.0 RC11 allows remote attackers t…
-
Unscored —CVE-2008-2782 Public exploit
Multiple directory traversal vulnerabilities in OtomiGenX 2.2 allow remote attackers to include and execute arbitrary l…
-
Unscored —CVE-2008-2774 Public exploit
SQL injection vulnerability in item.php in CartKeeper CKGold Shopping Cart 2.5 and 2.7 allows remote attackers to execu…
-
Unscored —CVE-2008-2770 Public exploit
SQL injection vulnerability in index.php in MycroCMS 0.5, when magic_quotes_gpc is disabled, allows remote attackers to…
-
Unscored —CVE-2008-2753 Public exploit
Multiple SQL injection vulnerabilities in Pooya Site Builder (PSB) 6.0 allow remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2008-2754 Public exploit
SQL injection vulnerability in toplists.php in eFiction 3.0 and 3.4.3, when magic_quotes_gpc is disabled, allows remote…
-
Unscored —CVE-2008-2755 Public exploit
SQL injection vulnerability in index.php in JAMM CMS allows remote attackers to execute arbitrary SQL commands via the …
-
Unscored —CVE-2008-2751 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application …
-
Unscored —
Microsoft Word 2000 9.0.2812 and 2003 11.8106.8172 does not properly handle unordered lists, which allows user-assisted…
-
Unscored —CVE-2008-2748 Public exploit
Skulltag 0.97d2-RC2 and earlier allows remote attackers to cause a denial of service (daemon hang) via a series of long…