25 July 2008

31 results · Feed

• Unscored —
  CVE-2008-3315 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.8.10 allow remote attackers to inject arbitrary web …

  Jul 25, 2008
• Unscored —
  CVE-2008-3310 Public exploit

  SQL injection vulnerability in default.asp in Pre Survey Poll allows remote attackers to execute arbitrary SQL commands…

  Jul 25, 2008
• Unscored —
  CVE-2008-3309 Public exploit

  SQL injection vulnerability in info_book.asp in DigiLeave 1.2 and earlier allows remote attackers to execute arbitrary …

  Jul 25, 2008
• Unscored —
  CVE-2008-3320 Public exploit

  admin/index.php in Maian Guestbook 3.2 and earlier allows remote attackers to bypass authentication and gain administra…

  Jul 25, 2008
• Unscored —
  CVE-2008-3305 Public exploit

  Cross-site scripting (XSS) vulnerability in mensaje.php in C. Desseno YouTube Blog (ytb) 0.1 allows remote attackers to…

  Jul 25, 2008
• Unscored —
  CVE-2008-3306 Public exploit

  SQL injection vulnerability in info.php in C. Desseno YouTube Blog (ytb) 0.1 allows remote attackers to execute arbitra…

  Jul 25, 2008
• Unscored —
  CVE-2008-3326

  Cross-site scripting (XSS) vulnerability in blog/edit.php in Moodle 1.6.x before 1.6.7 and 1.7.x before 1.7.5 allows re…

  Jul 25, 2008
• Unscored —
  CVE-2008-3307 Public exploit

  SQL injection vulnerability in todos.php in C. Desseno YouTube Blog (ytb) 0.1 allows remote attackers to execute arbitr…

  Jul 25, 2008
• Unscored —
  CVE-2008-3313 Public exploit

  Multiple PHP remote file inclusion vulnerabilities in CreaCMS 1.0 allow remote attackers to execute arbitrary PHP code …

  Jul 25, 2008
• Unscored —
  CVE-2008-3318 Public exploit

  admin/index.php in Maian Weblog 4.0 and earlier allows remote attackers to bypass authentication and gain administrativ…

  Jul 25, 2008
• Unscored —
  CVE-2008-3321 Public exploit

  admin/index.php in Maian Uploader 4.0 and earlier allows remote attackers to bypass authentication and gain administrat…

  Jul 25, 2008
• Unscored —
  CVE-2008-3327

  Moodle 1.6.5, when display_errors is enabled, allows remote attackers to obtain sensitive information via a direct requ…

  Jul 25, 2008
• Unscored —
  CVE-2008-3316

  Cross-site scripting (XSS) vulnerability in the search feature in the Forum plugin before 2.7.1 for Geeklog allows remo…

  Jul 25, 2008
• Unscored —
  CVE-2008-3314 Public exploit

  ZDaemon 1.08.07 and earlier allows remote attackers to cause a denial of service (daemon crash) via a crafted type 6 co…

  Jul 25, 2008
• Unscored —
  CVE-2008-3319 Public exploit

  admin/index.php in Maian Links 3.1 and earlier allows remote attackers to bypass authentication and gain administrative…

  Jul 25, 2008
• Unscored —
  CVE-2008-3317 Public exploit

  admin/index.php in Maian Search 1.1 and earlier allows remote attackers to bypass authentication and gain administrativ…

  Jul 25, 2008
• Unscored —
  CVE-2008-3325

  Cross-site request forgery (CSRF) vulnerability in Moodle 1.6.x before 1.6.7 and 1.7.x before 1.7.5 allows remote attac…

  Jul 25, 2008
• Unscored —
  CVE-2008-3312 Public exploit

  Directory traversal vulnerability in lemon_includes/FCKeditor/editor/filemanager/browser/browser.php in Lemon CMS 1.10 …

  Jul 25, 2008
• Unscored —
  CVE-2008-3308 Public exploit

  PHP remote file inclusion vulnerability in cuenta/cuerpo.php in C. Desseno YouTube Blog (ytb) 0.1, when register_global…

  Jul 25, 2008
• Unscored —
  CVE-2008-3322 Public exploit

  admin/index.php in Maian Recipe 1.2 and earlier allows remote attackers to bypass authentication and gain administrativ…

  Jul 25, 2008
• Unscored —
  CVE-2008-3311 Public exploit

  PHP remote file inclusion vulnerability in config.php in Adam Scheinberg Flip 3.0 allows remote attackers to execute ar…

  Jul 25, 2008
• Unscored —
  CVE-2008-3304 Public exploit

  BilboBlog 0.2.1 allows remote attackers to obtain sensitive information via (1) an enable_cache=false query string to f…

  Jul 25, 2008
• Unscored —
  CVE-2008-3295 Public exploit

  Cross-site scripting (XSS) vulnerability in modules/system/admin.php in XOOPS 2.0.18.1 allows remote attackers to injec…

  Jul 25, 2008
• Unscored —
  CVE-2008-3298

  SocialEngine (SE) before 2.83 grants certain write privileges for templates, which allows remote authenticated administ…

  Jul 25, 2008
• Unscored —
  CVE-2008-3303 Public exploit

  admin/login.php in BilboBlog 0.2.1, when register_globals is enabled, allows remote attackers to bypass authentication …

  Jul 25, 2008
• Unscored —
  CVE-2008-3300 Public exploit

  AlphAdmin CMS 1.0.5/03 allows remote attackers to bypass authentication and gain administrative access by setting the a…

  Jul 25, 2008
• Unscored —
  CVE-2008-3302 Public exploit

  SQL injection vulnerability in admin/delete.php in BilboBlog 0.2.1, when magic_quotes_gpc is disabled, allows remote au…

  Jul 25, 2008
• Unscored —
  CVE-2008-3297

  Multiple SQL injection vulnerabilities in SocialEngine (SE) before 2.83 allow remote attackers to execute arbitrary SQL…

  Jul 25, 2008
• Unscored —
  CVE-2008-3299 Public exploit

  eSyndiCat 1.6 allows remote attackers to bypass authentication and gain administrative access by setting the admin_lng …

  Jul 25, 2008
• Unscored —
  CVE-2008-3301 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in BilboBlog 0.2.1 allow remote authenticated administrators to inj…

  Jul 25, 2008
• Unscored —
  CVE-2008-3296 Public exploit

  Directory traversal vulnerability in modules/system/admin.php in XOOPS 2.0.18 1 allows remote attackers to include and …

  Jul 25, 2008