Skip to content
OpenAdvisories

Archive

June 2008

Vulnerabilities first published in this month (UTC), newest first.

437 results · Feed

  • Unscored —
    CVE-2008-2889 Public exploit

    Directory traversal vulnerability in the FTP client in AceBIT WISE-FTP 4.1.0 and 5.5.8 allows remote FTP servers to cre…

  • Unscored —
    CVE-2008-2896 Public exploit

    Directory traversal vulnerability in index.php in FireAnt 1.3 allows remote attackers to include and execute arbitrary …

  • Unscored —
    CVE-2008-2894 Public exploit

    Directory traversal vulnerability in the FTP client in NCH Software Classic FTP 1.02 for Windows allows remote FTP serv…

  • Unscored —
    CVE-2008-2892 Public exploit

    SQL injection vulnerability in the EXP Shop (com_expshop) component 1.0 for Joomla! allows remote attackers to execute …

  • Unscored —
    CVE-2008-2900 Public exploit

    SQL injection vulnerability in item.php in PHPAuction 3.2 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2008-2893 Public exploit

    SQL injection vulnerability in news.php in AJ Square aj-hyip (aka AJ HYIP Acme) allows remote attackers to execute arbi…

  • Unscored —
    CVE-2008-2886 Public exploit

    PHP remote file inclusion vulnerability in include/plugins/jrBrowser/purchase.php in Jamroom 3.3.0 through 3.3.5, when …

  • Unscored —
    CVE-2008-2890 Public exploit

    Multiple SQL injection vulnerabilities in Online Fantasy Football League (OFFL) 0.2.6 and earlier allow remote attacker…

  • Unscored —
    CVE-2008-2895 Public exploit

    Directory traversal vulnerability in index.php in AproxEngine 5.1.0.4 allows remote attackers to include and execute ar…

  • Unscored —
    CVE-2008-2897 Public exploit

    SQL injection vulnerability in index.php in PageSquid CMS 0.3 Beta allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2008-2884 Public exploit

    PHP remote file inclusion vulnerability in display.php in RSS-aggregator allows remote attackers to execute arbitrary P…

  • Unscored —
    CVE-2008-2885 Public exploit

    PHP remote file inclusion vulnerability in src/browser/resource/categories/resource_categories_view.php in Open Digital…

  • Unscored —
    CVE-2008-2888 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in MiGCMS 2.0.5, when register_globals is enabled, allow remote atta…

  • Unscored —
    CVE-2008-2887 Public exploit

    Directory traversal vulnerability in index.php in chaozz@work FubarForum 1.5 allows remote attackers to include and exe…

  • Unscored —
    CVE-2008-2891 Public exploit

    SQL injection vulnerability in index.php in eMuSOFT emuCMS 0.3 allows remote attackers to execute arbitrary SQL command…

  • Unscored —

    Unspecified vulnerability in includes/classes/page.php in j00lean-CMS 1.03 has unknown impact and attack vectors.

  • Unscored —
    CVE-2008-2882 Public exploit

    upgrade.asp in sHibby sHop 2.2 and earlier does not require administrative authentication, which allows remote attacker…

  • Unscored —

    Heap-based buffer overflow in the IBM AFP Viewer Plug-in 2.0.7.1 and 3.2.1.1 allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2008-2871 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in template2.php in PEGames allow remote attackers to inject arbitr…

  • Unscored —

    The Real-Time Information Server (RIS) Data Collector service in Cisco Unified Communications Manager (CUCM) 5.x before…

  • Unscored —
    CVE-2008-2873 Public exploit

    sHibby sHop 2.2 and earlier stores sensitive information under the web root with insufficient access control, which all…

  • Unscored —
    CVE-2008-2874 Public exploit

    SQL injection vulnerability in index.php in Softbiz Jokes & Funny Pics Script allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2008-2875 Public exploit

    SQL injection vulnerability in index.php in Webdevindo-CMS 1.0.0 allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2008-2881 Public exploit

    Relative Real Estate Systems 3.0 and earlier stores passwords in cleartext in a MySQL database, which allows context-de…

  • Unscored —
    CVE-2008-2872 Public exploit

    SQL injection vulnerability in default.asp in sHibby sHop 2.2 and earlier allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2008-2870 Public exploit

    Multiple SQL injection vulnerabilities in ShareCMS 0.1 Beta allow remote attackers to execute arbitrary SQL commands vi…

  • Unscored —

    Benja CMS 0.1 does not require authentication for access to admin/, which allows remote attackers to add or delete a me…

  • Unscored —
    CVE-2008-2869 Public exploit

    SQL injection vulnerability in out.php in E-topbiz Link ADS 1 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —

    The Real-Time Information Server (RIS) Data Collector service in Cisco Unified Communications Manager (CUCM) before 4.2…

  • Unscored —
    CVE-2008-2868 Public exploit

    SQL injection vulnerability in detail.asp in DUware DUcalendar 1.0 and possibly earlier allows remote attackers to exec…

  • Unscored —
    CVE-2008-2877 Public exploit

    PHP remote file inclusion vulnerability in admin/include/lib.module.php in cmsWorks 2.2 RC4, when register_globals is e…

  • Unscored —
    CVE-2008-2878 Public exploit

    Open redirect vulnerability in rss_getfile.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allo…

  • Unscored —

    The Computer Telephony Integration (CTI) Manager service in Cisco Unified Communications Manager (CUCM) 5.x before 5.1(…

  • Unscored —
    CVE-2008-2876 Public exploit

    Directory traversal vulnerability in index.php in mUnky 0.0.1 allows remote attackers to include and execute arbitrary …

  • Unscored —
    CVE-2008-2867 Public exploit

    SQL injection vulnerability in adclick.php in E-topbiz Viral DX 1 2.07 allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2008-2883 Public exploit

    PHP remote file inclusion vulnerability in include/plugins/jrBrowser/payment.php in Jamroom 3.3.0 through 3.3.5 allows …

  • Unscored —

    Untrusted search path vulnerability in a certain Red Hat build script for Standards Based Linux Instrumentation for Man…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the search functionality in MindTouch DekiWiki before 8.05.1 allows remote …

  • Unscored —
    CVE-2008-2842 Public exploit

    Cross-site scripting (XSS) vulnerability in edit/showmedia.asp in doITLive CMS 2.50 and earlier allows remote attackers…

  • Unscored —
    CVE-2008-2641 EPSS 24%

    Unspecified vulnerability in Adobe Reader and Acrobat 7.0.9 and earlier, and 8.0 through 8.1.2, allows remote attackers…