Skip to content
OpenAdvisories

Archive

July 2008

Vulnerabilities first published in this month (UTC), newest first.

← June 2008 2008 / July August 2008 →
  1. 113
  2. 234
  3. 39
  4. 4 
  5. 5 
  6. 6 
  7. 757
  8. 815
  9. 943
  10. 1026
  11. 1112
  12. 12 
  13. 13 
  14. 1426
  15. 1554
  16. 169
  17. 1712
  18. 1830
  19. 19 
  20. 20 
  21. 2117
  22. 2212
  23. 23 
  24. 2417
  25. 2531
  26. 26 
  27. 2710
  28. 2822
  29. 295
  30. 3027
  31. 3139
All Critical High Medium Low Exploited only Public exploit

233 results · Clear filters · Feed

  • Unscored —
    CVE-2008-3430 Public exploit

    Buffer overflow in the CoVideoWindow.ocx ActiveX control 5.0.907.1 in Eyeball MessengerSDK, as used in products such as…

  • Unscored —
    CVE-2008-3417 Public exploit

    SQL injection vulnerability in home/index.asp in fipsCMS light 2.1 and earlier allows remote attackers to execute arbit…

  • Unscored —
    CVE-2008-3414 Public exploit

    SQL injection vulnerability in line2.php in SiteAdmin allows remote attackers to execute arbitrary SQL commands via the…

  • Unscored —
    CVE-2008-3408 Public exploit

    Stack-based buffer overflow in CoolPlayer 2.18, and possibly other versions, allows user-assisted remote attackers to e…

  • Unscored —
    CVE-2008-3412 Public exploit

    SQL injection vulnerability in Comsenz EPShop (aka ECShop) before 3.0 allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2008-3418 Public exploit

    SQL injection vulnerability in browse.php in TriO 2.1 and earlier allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2008-3413 Public exploit

    SQL injection vulnerability in category.php in Greatclone GC Auction Platinum allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2008-3419 Public exploit

    SQL injection vulnerability in ugroups.php in Youtuber Clone allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2008-3416 Public exploit

    SQL injection vulnerability in modules/members.php in IceBB before 1.0-rc9.3 allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2008-3415 Public exploit

    Directory traversal vulnerability in common.php in CMScout 2.05, when .htaccess is not supported, allows remote attacke…

  • Unscored —
    CVE-2008-3409 Public exploit EPSS 11%

    Buffer overflow in Unreal Tournament 3 1.3beta4 and earlier allows remote attackers to cause a denial of service (memor…

  • Unscored —
    CVE-2008-3420 Public exploit

    Multiple SQL injection vulnerabilities in Mobius for Mimsy XG 1 1.4.4.1 and earlier allow remote attackers to execute a…

  • Unscored —
    CVE-2008-3403 Public exploit

    SQL injection vulnerability in mojoClassified.cgi in MojoPersonals allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2008-3406 Public exploit

    SQL injection vulnerability in showcat.php in phpLinkat 0.1 allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2008-3398 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in XRMS CRM 1.99.2 allow remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2008-3402 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in HIOX Browser Statistics (HBS) 2.0 allow remote attackers to execu…

  • Unscored —
    CVE-2008-3404 Public exploit

    Cross-site scripting (XSS) vulnerability in guestbook.js.php in MJGuest 6.8 GT allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2008-3396 Public exploit

    Unreal Tournament 2004 (UT2004) 3369 and earlier allows remote attackers to cause a denial of service (NULL pointer der…

  • Unscored —
    CVE-2008-3407 Public exploit

    phpLinkat 0.1 allows remote attackers to bypass authentication and access unspecified pages under admin/ by sending a l…

  • Unscored —
    CVE-2008-3405 Public exploit

    Directory traversal vulnerability in index.php in Ricardo Amaral nzFotolog 0.4.1 allows remote attackers to include and…

  • Unscored —
    CVE-2008-3399 Public exploit

    PHP remote file inclusion vulnerability in activities/workflow-activities.php in XRMS CRM 1.99.2, when register_globals…

  • Unscored —
    CVE-2008-3400 Public exploit

    XRMS CRM 1.99.2 allows remote attackers to obtain configuration information via a direct request to tests/info.php, whi…

  • Unscored —
    CVE-2008-3390 Public exploit

    Directory traversal vulnerability in libraries/general.init.php in Minishowcase Image Gallery 09b136, when register_glo…

  • Unscored —
    CVE-2008-3401 Public exploit

    PHP remote file inclusion vulnerability in hioxRandomAd.php in HIOX Random Ad (HRA) 1.3 allows remote attackers to exec…

  • Unscored —
    CVE-2008-3391 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Web Wiz Forum 9.5 allow remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2008-3388 Public exploit

    Multiple SQL injection vulnerabilities in Def-Blog 1.0.3 allow remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2008-3386 Public exploit

    SQL injection vulnerability in album.php in AlstraSoft Video Share Enterprise 4.51 allows remote attackers to execute a…

  • Unscored —
    CVE-2008-3385 Public exploit

    Directory traversal vulnerability in include/head_chat.inc.php in php Help Agent 1.0 and 1.1 Full allows remote attacke…

  • Unscored —
    CVE-2008-3387 Public exploit

    SQL injection vulnerability in show.php in PHPFootball 1.6 allows remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2008-3383 Public exploit

    SQL injection vulnerability in mojoAuto.cgi in MojoAuto allows remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2008-3384 Public exploit

    Multiple directory traversal vulnerabilities in help/help.php in Interact Learning Community Environment Interact 2.4.1…

  • Unscored —
    CVE-2008-3382 Public exploit

    SQL injection vulnerability in mojoClassified.cgi in MojoClassifieds 2.0 allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2008-3380 Public exploit

    Cross-site scripting (XSS) vulnerability in ajaxp_backend.php in MyioSoft EasyBookMarker 4.0 trial edition (tr) allows …

  • Unscored —
    CVE-2008-3378 Public exploit

    SQL injection vulnerability in comment.php in Fizzmedia 1.51.2 allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2008-3372 Public exploit

    SQL injection vulnerability in search_form.php in Getacoder Clone allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2008-3371 Public exploit

    Directory traversal vulnerability in install/help.php in TalkBack 2.3.5, and other versions before 2.3.6.2, allows remo…

  • Unscored —
    CVE-2008-3369 Public exploit

    SQL injection vulnerability in products_rss.php in ViArt Shop 3.5 and earlier allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2008-3377 Public exploit

    SQL injection vulnerability in picture.php in phpTest 0.6.3 allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2008-3368 Public exploit

    PHP remote file inclusion vulnerability in tools/packages/import.php in ATutor 1.6.1 pl1 and earlier allows remote auth…

  • Unscored —
    CVE-2008-3370 Public exploit

    SQL injection vulnerability in the CUA Login Module in EMC Centera Universal Access (CUA) 4.0_4735.p4 allows remote att…