Skip to content
OpenAdvisories

Archive

2 July 2008

Vulnerabilities first published on this day (UTC), newest first.

34 results · Feed

  • Unscored —
    CVE-2008-2976 Public exploit

    Multiple directory traversal vulnerabilities in TinX/cms 1.1, when register_globals is enabled, allow remote attackers …

  • Unscored —
    CVE-2008-2972 Public exploit

    SQL injection vulnerability in index.php in KbLance allows remote attackers to execute arbitrary SQL commands via the c…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in phpMyAdmin before 2.11.7, when register_globals is enabled and .htaccess su…

  • Unscored —
    CVE-2008-2983 Public exploit

    SQL injection vulnerability in index.php in Demo4 CMS 01 Beta allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2008-2970 Public exploit

    Multiple session fixation vulnerabilities in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allow rem…

  • Unscored —
    CVE-2008-2961 Public exploit

    Multiple directory traversal vulnerabilities in view/index.php in CMS Mini 0.2.2 allow remote attackers to read arbitra…

  • Unscored —
    CVE-2008-2979 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in phpi/login.php in Ourvideo CMS 9.5 allow remote attackers to inj…

  • Unscored —
    CVE-2008-2968 Public exploit

    SQL injection vulnerability in rating.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allows re…

  • Unscored —
    CVE-2008-2969 Public exploit

    Directory traversal vulnerability in download.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, a…

  • Unscored —
    CVE-2008-2971 Public exploit

    SQL injection vulnerability in links-extern.php in CiBlog 3.1 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2008-2981 Public exploit

    PHP remote file inclusion vulnerability in admin/templates/template_thumbnail.php in HomePH Design 2.10 RC2, when regis…

  • Unscored —
    CVE-2008-2980 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in HomePH Design 2.10 RC2 allow remote attackers to inject arbitrar…

  • Unscored —
    CVE-2008-2963 Public exploit

    Multiple SQL injection vulnerabilities in MyBlog allow remote attackers to execute arbitrary SQL commands via the (1) v…

  • Unscored —
    CVE-2008-2964 Public exploit

    SQL injection vulnerability in guide.php in ResearchGuide 0.5 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2008-2967 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier,…

  • Unscored —
    CVE-2008-2982 Public exploit

    Multiple directory traversal vulnerabilities in HomePH Design 2.10 RC2, when register_globals is enabled, allow remote …

  • Unscored —
    CVE-2008-2990 Public exploit

    PHP remote file inclusion vulnerability in facileforms.frame.php in the FacileForms (com_facileforms) component 1.4.4 f…

  • Unscored —
    CVE-2008-2973 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in chathead.php in MM Chat 1.5 allow remote attackers to inject arb…

  • Unscored —
    CVE-2008-2985 Public exploit

    Directory traversal vulnerability in load_language.php in CMReams CMS 1.3.1.1 Beta 2, when register_globals is enabled,…

  • Unscored —
    CVE-2008-2986 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in phpDMCA 1.0.0 allow remote attackers to execute arbitrary PHP cod…

  • Unscored —
    CVE-2008-2959 Public exploit EPSS 25%

    Buffer overflow in a certain ActiveX control (vb6skit.dll) in Microsoft Visual Basic Enterprise Edition 6.0 SP6 might a…

  • Unscored —
    CVE-2008-2966 Public exploit

    Directory traversal vulnerability in viewprofile.php in JaxUltraBB 2.0 and earlier allows remote attackers to read arbi…

  • Unscored —
    CVE-2008-2974 Public exploit

    Directory traversal vulnerability in chatconfig.php in MM Chat 1.5, when register_globals is enabled, allows remote att…

  • Unscored —
    CVE-2008-2984 Public exploit

    Cross-site scripting (XSS) vulnerability in backend/umleitung.php in CMReams CMS 1.3.1.1 Beta 2 allows remote attackers…

  • Unscored —
    CVE-2008-2962 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in MyBlog allow remote attackers to inject arbitrary web script or …

  • Unscored —
    CVE-2008-2977 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Ourvideo CMS 9.5 allow remote attackers to execute arbitrary PHP …

  • Unscored —
    CVE-2008-2965 Public exploit

    Cross-site scripting (XSS) vulnerability in viewforum.php in JaxUltraBB (JUBB) 2.0 and earlier allows remote attackers …

  • Unscored —
    CVE-2008-2978 Public exploit

    Directory traversal vulnerability in phpi/rss.php in Ourvideo CMS 9.5, when register_globals is enabled, allows remote …

  • Unscored —
    CVE-2008-2989 Public exploit

    SQL injection vulnerability in index.php in HoMaP-CMS 0.1 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —

    Unrestricted file upload vulnerability in admin/upload.php in Benja CMS 0.1 allows remote attackers to upload and execu…

  • Unscored —
    CVE-2008-2975 Public exploit

    Cross-site scripting (XSS) vulnerability in admin/objects/obj_image.php in TinX/cms 1.1 allows remote attackers to inje…

  • Unscored —
    CVE-2008-2987 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Benja CMS 0.1 allow remote attackers to inject arbitrary web scr…

  • Unscored —

    Integer overflow in the sctp_getsockopt_local_addrs_old function in net/sctp/socket.c in the Stream Control Transmissio…

  • Unscored —

    The Linux kernel 2.6.24 and 2.6.25 before 2.6.25.9 allows local users to cause a denial of service (memory consumption)…