Archive
June 2008
Vulnerabilities first published in this month (UTC), newest first.
219 results · Clear filters · Feed
-
Unscored —CVE-2008-2644 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in SMEWeb 1.4b and 1.4f allow remote attackers to inject arbitrary …
-
Unscored —CVE-2008-2651 Public exploit
SQL injection vulnerability in the Joomla! Bulletin Board (aka Joo!BB or com_joobb) component 0.5.9 for Joomla! allows …
-
Unscored —CVE-2008-2652 Public exploit
Multiple SQL injection vulnerabilities in catalog.php in SMEWeb 1.4b and 1.4f allow remote attackers to execute arbitra…
-
Unscored —
Directory traversal vulnerability in cmsimple/cms.php in CMSimple 3.1, when register_globals is enabled, allows remote …
-
Unscored —CVE-2008-2649 Public exploit
Multiple PHP remote file inclusion vulnerabilities in DesktopOnNet 3 Beta allow remote attackers to execute arbitrary P…
-
Unscored —CVE-2008-2646 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in meBiblio 0.4.7 allow remote attackers to inject arbitrary web sc…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Brim (formerly Booby) 1.0.1 allow remote attackers to execute arb…
-
Unscored —CVE-2008-2643 Public exploit
SQL injection vulnerability in the Bible Study (com_biblestudy) component before 6.0.7c for Joomla! allows remote attac…
-
Unscored —CVE-2008-2647 Public exploit
SQL injection vulnerability in admin/journal_change_mask.inc.php in meBiblio 0.4.7 allows remote attackers to execute a…
-
Unscored —CVE-2008-2648 Public exploit
Unrestricted file upload vulnerability in upload/uploader.html in meBiblio 0.4.7 allows remote attackers to execute arb…
-
Unscored —CVE-2008-2627 Public exploit
SQL injection vulnerability in the IDoBlog (com_idoblog) component b24 and earlier and 1.0, a component for Joomla!, al…
-
Unscored —CVE-2008-2629 Public exploit
SQL injection vulnerability in the LifeType (formerly pLog) module for Drupal allows remote attackers to execute arbitr…
-
Unscored —CVE-2008-2638 Public exploit
Static code injection vulnerability in guestbook.php in 1Book 1.0.1 and earlier allows remote attackers to upload arbit…
-
Unscored —CVE-2008-2633 Public exploit
Multiple SQL injection vulnerabilities in the EXP JoomRadio (com_joomradio) component 1.0 for Joomla! allow remote atta…
-
Unscored —CVE-2008-2630 Public exploit
SQL injection vulnerability in the JooBlog (com_jb2) component 0.1.1 for Joomla! allows remote attackers to execute arb…
-
Unscored —CVE-2008-2626 Public exploit
SQL injection vulnerability in comment.asp in Battle Blog 1.25 and earlier allows remote attackers to execute arbitrary…
-
Unscored —CVE-2008-2628 Public exploit
SQL injection vulnerability in the eQuotes (com_equotes) component 0.9.4 for Joomla! allows remote attackers to execute…
-
Unscored —CVE-2008-2634 Public exploit
SQL injection vulnerability in index.asp in I-Pos Internet Pay Online Store 1.3 Beta and earlier allows remote attacker…
-
Unscored —CVE-2008-2632 Public exploit
SQL injection vulnerability in the acctexp (com_acctexp) component 0.12.x and earlier for Joomla! allows remote attacke…
-
Unscored —
The WordClient interface in Alt-N Technologies MDaemon 9.6.5 allows remote attackers to cause a denial of service (NULL…
-
Unscored —CVE-2008-2637 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in F5 FirePass SSL VPN 6.0.2 hotfix 3, and possibly earlier version…
-
Unscored —CVE-2008-2574 Public exploit
Unrestricted file upload vulnerability in admin/Editor/imgupload.php in FlashBlog 0.31 beta allows remote attackers to …
-
Unscored —CVE-2008-2566 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in PHP Address Book 3.1.5 and earlier allow remote attackers to inj…
-
Unscored —CVE-2008-2561 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in 427BB 2.3.1 allow remote attackers to inject arbitrary web scrip…
-
Unscored —CVE-2008-2562 Public exploit
SQL injection vulnerability in edCss.php in PowerPhlogger 2.2.5 and earlier allows remote authenticated users to execut…
-
Unscored —CVE-2008-2568 Public exploit
SQL injection vulnerability in the Simple Shop Galore (com_simpleshop) component 3.4 and earlier for Joomla! allows rem…
-
Unscored —CVE-2008-2560 Public exploit
SQL injection vulnerability in showpost.php in 427BB 2.3.1 allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2008-2565 Public exploit
Multiple SQL injection vulnerabilities in PHP Address Book 3.1.5 and earlier allow remote attackers to execute arbitrar…
-
Unscored —CVE-2008-2573 Public exploit
Stack-based buffer overflow in SFTP in freeSSHd 1.2.1 allows remote authenticated users to execute arbitrary code via a…
-
Unscored —CVE-2008-2569 Public exploit
SQL injection vulnerability in the EasyBook (com_easybook) component 1.1 for Joomla! allows remote attackers to execute…
-
Unscored —CVE-2008-2564 Public exploit
SQL injection vulnerability in the JotLoader (com_jotloader) component 1.2.1.a and earlier for Joomla! allows remote at…
-
Unscored —CVE-2008-2572 Public exploit
SQL injection vulnerability in php/leer_comentarios.php in FlashBlog allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2008-2556 Public exploit
SQL injection vulnerability in read.php in PHP Visit Counter 0.4 and earlier allows remote attackers to execute arbitra…
-
Unscored —CVE-2008-2555 Public exploit
SQL injection vulnerability in index.php in EasyWay CMS allows remote attackers to execute arbitrary SQL commands via t…
-
Unscored —CVE-2008-2554 Public exploit
Multiple SQL injection vulnerabilities in BP Blog 6.0 allow remote attackers to execute arbitrary SQL commands via the …
-
Unscored —CVE-2008-2542 Public exploit
Stack-based buffer overflow in the getline function in Ppm/ppm.C in NASA Ames Research Center BigView 1.8 allows user-a…
-
Unscored —
The DownloaderActiveX Control (DownloaderActiveX.ocx) in Icona SpA C6 Messenger 1.0.0.1 allows remote attackers to forc…
-
Unscored —
CRLF injection vulnerability in Akamai Download Manager ActiveX control before 2.2.3.6 allows remote attackers to force…
-
Unscored —CVE-2008-0953 Public exploit
The StartApp function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support be…
-
Unscored —CVE-2008-0952 Public exploit
The AppendStringToFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant …