Skip to content
OpenAdvisories

Archive

25 July 2008

Vulnerabilities first published on this day (UTC), newest first.

← June 2008 2008 / July /25 August 2008 →
  1. 113
  2. 234
  3. 39
  4. 4 
  5. 5 
  6. 6 
  7. 757
  8. 815
  9. 943
  10. 1026
  11. 1112
  12. 12 
  13. 13 
  14. 1426
  15. 1554
  16. 169
  17. 1712
  18. 1830
  19. 19 
  20. 20 
  21. 2117
  22. 2212
  23. 23 
  24. 2417
  25. 2531
  26. 26 
  27. 2710
  28. 2822
  29. 295
  30. 3027
  31. 3139
All Critical High Medium Low Exploited only Public exploit

25 results · Clear filters · Feed

  • Unscored —
    CVE-2008-3315 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.8.10 allow remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2008-3310 Public exploit

    SQL injection vulnerability in default.asp in Pre Survey Poll allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2008-3309 Public exploit

    SQL injection vulnerability in info_book.asp in DigiLeave 1.2 and earlier allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2008-3320 Public exploit

    admin/index.php in Maian Guestbook 3.2 and earlier allows remote attackers to bypass authentication and gain administra…

  • Unscored —
    CVE-2008-3305 Public exploit

    Cross-site scripting (XSS) vulnerability in mensaje.php in C. Desseno YouTube Blog (ytb) 0.1 allows remote attackers to…

  • Unscored —
    CVE-2008-3306 Public exploit

    SQL injection vulnerability in info.php in C. Desseno YouTube Blog (ytb) 0.1 allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2008-3307 Public exploit

    SQL injection vulnerability in todos.php in C. Desseno YouTube Blog (ytb) 0.1 allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2008-3313 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in CreaCMS 1.0 allow remote attackers to execute arbitrary PHP code …

  • Unscored —
    CVE-2008-3318 Public exploit

    admin/index.php in Maian Weblog 4.0 and earlier allows remote attackers to bypass authentication and gain administrativ…

  • Unscored —
    CVE-2008-3321 Public exploit

    admin/index.php in Maian Uploader 4.0 and earlier allows remote attackers to bypass authentication and gain administrat…

  • Unscored —
    CVE-2008-3314 Public exploit

    ZDaemon 1.08.07 and earlier allows remote attackers to cause a denial of service (daemon crash) via a crafted type 6 co…

  • Unscored —
    CVE-2008-3319 Public exploit

    admin/index.php in Maian Links 3.1 and earlier allows remote attackers to bypass authentication and gain administrative…

  • Unscored —
    CVE-2008-3317 Public exploit

    admin/index.php in Maian Search 1.1 and earlier allows remote attackers to bypass authentication and gain administrativ…

  • Unscored —
    CVE-2008-3312 Public exploit

    Directory traversal vulnerability in lemon_includes/FCKeditor/editor/filemanager/browser/browser.php in Lemon CMS 1.10 …

  • Unscored —
    CVE-2008-3308 Public exploit

    PHP remote file inclusion vulnerability in cuenta/cuerpo.php in C. Desseno YouTube Blog (ytb) 0.1, when register_global…

  • Unscored —
    CVE-2008-3322 Public exploit

    admin/index.php in Maian Recipe 1.2 and earlier allows remote attackers to bypass authentication and gain administrativ…

  • Unscored —
    CVE-2008-3311 Public exploit

    PHP remote file inclusion vulnerability in config.php in Adam Scheinberg Flip 3.0 allows remote attackers to execute ar…

  • Unscored —
    CVE-2008-3304 Public exploit

    BilboBlog 0.2.1 allows remote attackers to obtain sensitive information via (1) an enable_cache=false query string to f…

  • Unscored —
    CVE-2008-3295 Public exploit

    Cross-site scripting (XSS) vulnerability in modules/system/admin.php in XOOPS 2.0.18.1 allows remote attackers to injec…

  • Unscored —
    CVE-2008-3303 Public exploit

    admin/login.php in BilboBlog 0.2.1, when register_globals is enabled, allows remote attackers to bypass authentication …

  • Unscored —
    CVE-2008-3300 Public exploit

    AlphAdmin CMS 1.0.5/03 allows remote attackers to bypass authentication and gain administrative access by setting the a…

  • Unscored —
    CVE-2008-3302 Public exploit

    SQL injection vulnerability in admin/delete.php in BilboBlog 0.2.1, when magic_quotes_gpc is disabled, allows remote au…

  • Unscored —
    CVE-2008-3299 Public exploit

    eSyndiCat 1.6 allows remote attackers to bypass authentication and gain administrative access by setting the admin_lng …

  • Unscored —
    CVE-2008-3301 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in BilboBlog 0.2.1 allow remote authenticated administrators to inj…

  • Unscored —
    CVE-2008-3296 Public exploit

    Directory traversal vulnerability in modules/system/admin.php in XOOPS 2.0.18 1 allows remote attackers to include and …