Archive
July 2008
Vulnerabilities first published in this month (UTC), newest first.
233 results · Clear filters · Feed
-
Unscored —CVE-2008-3365 Public exploit
Directory traversal vulnerability in index.php in Pixelpost 1.7.1 on Windows, when register_globals is enabled, allows …
-
Unscored —CVE-2008-3375 Public exploit
The jrCookie function in includes/jamroom-misc.inc.php in JamRoom before 3.4.0 allows remote attackers to bypass authen…
-
Unscored —CVE-2008-3374 Public exploit
SQL injection vulnerability in ajax.php in Gregarius 0.5.4 and earlier allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2008-3366 Public exploit
SQL injection vulnerability in story.php in Pligg CMS Beta 9.9.0 allows remote attackers to execute arbitrary SQL comma…
-
Unscored —
Unrestricted file upload vulnerability in upload.php in the Giulio Ganci Wp Downloads Manager module 0.2 for WordPress …
-
Unscored —
Buffer overflow in the ObjRemoveCtrl Class ActiveX control in OfficeScanRemoveCtrl.dll 7.3.0.1020 in Trend Micro Office…
-
Unscored —CVE-2008-3363 Public exploit
Directory traversal vulnerability in user_portal.php in the Dokeos E-Learning System 1.8.5 on Windows allows remote att…
-
Unscored —CVE-2008-3360 Public exploit
Stack-based buffer overflow in the HTML parser in IntelliTamper 2.0.7 allows remote attackers to execute arbitrary code…
-
Unscored —CVE-2008-3100 Public exploit
Cross-site scripting (XSS) vulnerability in lib/owl.lib.php in Steve Bourgeois and Chris Vincent Owl Intranet Knowledge…
-
Unscored —CVE-2008-3361 Public exploit
Stack-based buffer overflow in IntelliTamper 2.07 allows remote web sites to execute arbitrary code via a long HTTP Ser…
-
Unscored —CVE-2008-3352 Public exploit
SQL injection vulnerability in index.php in Live Music Plus 1.1.0 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2008-3354 Public exploit
Multiple PHP remote file inclusion vulnerabilities in the Newbb Plus (newbb_plus) module 0.93 in RunCMS 1.6.1 allow rem…
-
Unscored —CVE-2008-3355 Public exploit
SQL injection vulnerability in sitemap.xml.php in Camera Life 2.6.2 allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2008-3351 Public exploit
SQL injection vulnerability in atomPhotoBlog.php in Atom PhotoBlog 1.0.9.1 and 1.1.5b1 allows remote attackers to execu…
-
Unscored —CVE-2008-3345 Public exploit
SQL injection vulnerability in staticpages/easyecards/index.php in MyioSoft EasyE-Cards 3.5 trial edition (tr) and 3.10…
-
Unscored —CVE-2008-3343 Public exploit
SQL injection vulnerability in staticpages/easypublish/index.php in MyioSoft EasyPublish 3.0tr (trial edition) allows r…
-
Unscored —CVE-2008-3347 Public exploit
SQL injection vulnerability in staticpages/easycalendar/index.php in MyioSoft EasyDynamicPages 3.0 trial edition (tr) a…
-
Unscored —CVE-2008-3346 Public exploit
SQL injection vulnerability in product_detail.php in ShopCart DX allows remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2008-3331 Public exploit
Cross-site scripting (XSS) vulnerability in return_dynamic_filters.php in Mantis before 1.1.2 allows remote attackers t…
-
Unscored —CVE-2008-3332 Public exploit
Eval injection vulnerability in adm_config_set.php in Mantis before 1.1.2 allows remote authenticated administrators to…
-
Unscored —CVE-2008-3315 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.8.10 allow remote attackers to inject arbitrary web …
-
Unscored —CVE-2008-3310 Public exploit
SQL injection vulnerability in default.asp in Pre Survey Poll allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2008-3309 Public exploit
SQL injection vulnerability in info_book.asp in DigiLeave 1.2 and earlier allows remote attackers to execute arbitrary …
-
Unscored —CVE-2008-3320 Public exploit
admin/index.php in Maian Guestbook 3.2 and earlier allows remote attackers to bypass authentication and gain administra…
-
Unscored —CVE-2008-3305 Public exploit
Cross-site scripting (XSS) vulnerability in mensaje.php in C. Desseno YouTube Blog (ytb) 0.1 allows remote attackers to…
-
Unscored —CVE-2008-3306 Public exploit
SQL injection vulnerability in info.php in C. Desseno YouTube Blog (ytb) 0.1 allows remote attackers to execute arbitra…
-
Unscored —CVE-2008-3307 Public exploit
SQL injection vulnerability in todos.php in C. Desseno YouTube Blog (ytb) 0.1 allows remote attackers to execute arbitr…
-
Unscored —CVE-2008-3313 Public exploit
Multiple PHP remote file inclusion vulnerabilities in CreaCMS 1.0 allow remote attackers to execute arbitrary PHP code …
-
Unscored —CVE-2008-3318 Public exploit
admin/index.php in Maian Weblog 4.0 and earlier allows remote attackers to bypass authentication and gain administrativ…
-
Unscored —CVE-2008-3321 Public exploit
admin/index.php in Maian Uploader 4.0 and earlier allows remote attackers to bypass authentication and gain administrat…
-
Unscored —CVE-2008-3314 Public exploit
ZDaemon 1.08.07 and earlier allows remote attackers to cause a denial of service (daemon crash) via a crafted type 6 co…
-
Unscored —CVE-2008-3319 Public exploit
admin/index.php in Maian Links 3.1 and earlier allows remote attackers to bypass authentication and gain administrative…
-
Unscored —CVE-2008-3317 Public exploit
admin/index.php in Maian Search 1.1 and earlier allows remote attackers to bypass authentication and gain administrativ…
-
Unscored —CVE-2008-3312 Public exploit
Directory traversal vulnerability in lemon_includes/FCKeditor/editor/filemanager/browser/browser.php in Lemon CMS 1.10 …
-
Unscored —CVE-2008-3308 Public exploit
PHP remote file inclusion vulnerability in cuenta/cuerpo.php in C. Desseno YouTube Blog (ytb) 0.1, when register_global…
-
Unscored —CVE-2008-3322 Public exploit
admin/index.php in Maian Recipe 1.2 and earlier allows remote attackers to bypass authentication and gain administrativ…
-
Unscored —CVE-2008-3311 Public exploit
PHP remote file inclusion vulnerability in config.php in Adam Scheinberg Flip 3.0 allows remote attackers to execute ar…
-
Unscored —CVE-2008-3304 Public exploit
BilboBlog 0.2.1 allows remote attackers to obtain sensitive information via (1) an enable_cache=false query string to f…
-
Unscored —CVE-2008-3295 Public exploit
Cross-site scripting (XSS) vulnerability in modules/system/admin.php in XOOPS 2.0.18.1 allows remote attackers to injec…
-
Unscored —CVE-2008-3303 Public exploit
admin/login.php in BilboBlog 0.2.1, when register_globals is enabled, allows remote attackers to bypass authentication …