Skip to content
OpenAdvisories

Archive

30 July 2008

Vulnerabilities first published on this day (UTC), newest first.

27 results · Feed

  • Unscored —
    CVE-2008-3388 Public exploit

    Multiple SQL injection vulnerabilities in Def-Blog 1.0.3 allow remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2008-3386 Public exploit

    SQL injection vulnerability in album.php in AlstraSoft Video Share Enterprise 4.51 allows remote attackers to execute a…

  • Unscored —
    CVE-2008-3385 Public exploit

    Directory traversal vulnerability in include/head_chat.inc.php in php Help Agent 1.0 and 1.1 Full allows remote attacke…

  • Medium 6.1

    MoinMoin Multiple cross-site scripting (XSS) vulnerabilities

    Multiple cross-site scripting (XSS) vulnerabilities in macro/AdvancedSearch.py in moin (and MoinMoin) 1.6.3 and 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • Unscored —
    CVE-2008-3387 Public exploit

    SQL injection vulnerability in show.php in PHPFootball 1.6 allows remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2008-3383 Public exploit

    SQL injection vulnerability in mojoAuto.cgi in MojoAuto allows remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2008-3384 Public exploit

    Multiple directory traversal vulnerabilities in help/help.php in Interact Learning Community Environment Interact 2.4.1…

  • Unscored —
    CVE-2008-3382 Public exploit

    SQL injection vulnerability in mojoClassified.cgi in MojoClassifieds 2.0 allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2008-3380 Public exploit

    Cross-site scripting (XSS) vulnerability in ajaxp_backend.php in MyioSoft EasyBookMarker 4.0 trial edition (tr) allows …

  • Unscored —
    CVE-2008-3378 Public exploit

    SQL injection vulnerability in comment.php in Fizzmedia 1.51.2 allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2008-3372 Public exploit

    SQL injection vulnerability in search_form.php in Getacoder Clone allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2008-3371 Public exploit

    Directory traversal vulnerability in install/help.php in TalkBack 2.3.5, and other versions before 2.3.6.2, allows remo…

  • Unscored —
    CVE-2008-3369 Public exploit

    SQL injection vulnerability in products_rss.php in ViArt Shop 3.5 and earlier allows remote attackers to execute arbitr…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Snark VisualPic 0.3.1 allows remote attackers to inject arbitrary web scrip…

  • Unscored —
    CVE-2008-3377 Public exploit

    SQL injection vulnerability in picture.php in phpTest 0.6.3 allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2008-3368 Public exploit

    PHP remote file inclusion vulnerability in tools/packages/import.php in ATutor 1.6.1 pl1 and earlier allows remote auth…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in RTE_popup_link.asp in Web Wiz Rich Text Editor (RTE) 3.x and 4.x before 4.0…

  • Unscored —
    CVE-2008-3370 Public exploit

    SQL injection vulnerability in the CUA Login Module in EMC Centera Universal Access (CUA) 4.0_4735.p4 allows remote att…

  • Unscored —

    Multiple unspecified vulnerabilities in JamRoom before 3.4.0 have unknown impact and attack vectors.

  • Unscored —

    The files parsing engine in Grisoft AVG Anti-Virus before 8.0.156 allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2008-3365 Public exploit

    Directory traversal vulnerability in index.php in Pixelpost 1.7.1 on Windows, when register_globals is enabled, allows …

  • Unscored —
    CVE-2008-3375 Public exploit

    The jrCookie function in includes/jamroom-misc.inc.php in JamRoom before 3.4.0 allows remote attackers to bypass authen…

  • Unscored —
    CVE-2008-3374 Public exploit

    SQL injection vulnerability in ajax.php in Gregarius 0.5.4 and earlier allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2008-3366 Public exploit

    SQL injection vulnerability in story.php in Pligg CMS Beta 9.9.0 allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2008-3362 Public exploit EPSS 17%

    Unrestricted file upload vulnerability in upload.php in the Giulio Ganci Wp Downloads Manager module 0.2 for WordPress …

  • Unscored —
    CVE-2008-3364 Public exploit EPSS 33%

    Buffer overflow in the ObjRemoveCtrl Class ActiveX control in OfficeScanRemoveCtrl.dll 7.3.0.1020 in Trend Micro Office…

  • Unscored —
    CVE-2008-3363 Public exploit

    Directory traversal vulnerability in user_portal.php in the Dokeos E-Learning System 1.8.5 on Windows allows remote att…