Skip to content
OpenAdvisories

Archive

27 July 2008

Vulnerabilities first published on this day (UTC), newest first.

10 results · Feed

  • Unscored —
    CVE-2008-3331 Public exploit

    Cross-site scripting (XSS) vulnerability in return_dynamic_filters.php in Mantis before 1.1.2 allows remote attackers t…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in MyBB 1.2.x before 1.2.14 allows remote attackers to inject arbitrary web sc…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in PunBB before 1.2.19 allow remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2008-3332 Public exploit

    Eval injection vulnerability in adm_config_set.php in Mantis before 1.1.2 allows remote authenticated administrators to…

  • Unscored —

    Unspecified vulnerability in PunBB before 1.2.19 allows remote attackers to inject arbitrary SMTP commands via unknown …

  • Unscored —

    Directory traversal vulnerability in core/lang_api.php in Mantis before 1.1.2 allows remote attackers to include and ex…

  • Medium 6.1

    Trac Cross-site Scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in the wiki engine in Trac before 0.10.5 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

  • Unscored —

    Unspecified vulnerability in Links before 2.1, when "only proxies" is enabled, has unknown impact and attack vectors re…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in services/obrowser/index.php in Horde 3.2 and Turba 2.2 allows remote attack…

  • Medium 6.1

    Trac Open Redirect vulnerability

    Open redirect vulnerability in the search script in Trac before 0.10.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the q parameter, possibly related to the quickjump function.