Archive
July 2008
Vulnerabilities first published in this month (UTC), newest first.
233 results · Clear filters · Feed
-
Unscored —CVE-2008-3300 Public exploit
AlphAdmin CMS 1.0.5/03 allows remote attackers to bypass authentication and gain administrative access by setting the a…
-
Unscored —CVE-2008-3302 Public exploit
SQL injection vulnerability in admin/delete.php in BilboBlog 0.2.1, when magic_quotes_gpc is disabled, allows remote au…
-
Unscored —CVE-2008-3299 Public exploit
eSyndiCat 1.6 allows remote attackers to bypass authentication and gain administrative access by setting the admin_lng …
-
Unscored —CVE-2008-3301 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in BilboBlog 0.2.1 allow remote authenticated administrators to inj…
-
Unscored —CVE-2008-3296 Public exploit
Directory traversal vulnerability in modules/system/admin.php in XOOPS 2.0.18 1 allows remote attackers to include and …
-
Unscored —CVE-2008-3292 Public exploit
constants.inc in EZWebAlbum 1.0 allows remote attackers to bypass authentication and gain administrator privileges by s…
-
Unscored —CVE-2008-3293 Public exploit
Directory traversal vulnerability in download.php in EZWebAlbum allows remote attackers to read arbitrary files via the…
-
Unscored —CVE-2008-3291 Public exploit
SQL injection vulnerability in index.php in AproxEngine (aka Aprox CMS Engine) 5.1.0.4 allows remote attackers to execu…
-
Unscored —CVE-2008-3286 Public exploit
SWAT 4 1.1 and earlier allows remote attackers to cause a denial of service (daemon crash) via a (1) VERIFYCONTENT or (…
-
Unscored —CVE-2008-3285 Public exploit
The Filesys::SmbClientParser module 2.7 and earlier for Perl allows remote SMB servers to execute arbitrary code via a …
-
Unscored —CVE-2008-3267 Public exploit
SQL injection vulnerability in mojoJobs.cgi in MojoJobs allows remote attackers to execute arbitrary SQL commands via t…
-
Unscored —CVE-2008-3266 Public exploit
SQL injection vulnerability in picture_pic_bv.asp in SoftAcid Hotel Reservation System (HRS) Multi allows remote attack…
-
Unscored —
WRPCServer.exe in WinSoftMagic WinRemotePC (WRPC) Lite 2008 and Full 2008 allows remote attackers to cause a denial of …
-
Unscored —CVE-2008-3265 Public exploit
SQL injection vulnerability in the DT Register (com_dtregister) 2.2.3 component for Joomla! allows remote attackers to …
-
Unscored —
The IAX2 protocol implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x before 1.4.21.2; Busines…
-
Unscored —CVE-2008-3261 Public exploit
Open redirect vulnerability in claroline/redirector.php in Claroline before 1.8.10 allows remote attackers to redirect …
-
Unscored —CVE-2008-3260 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Claroline before 1.8.10 allow remote attackers to inject arbitra…
-
Unscored —
Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic Server) 1…
-
Unscored —CVE-2008-3256 Public exploit
SQL injection vulnerability in folder.php in Siteframe CMS 3.2.3 and earlier, and Siteframe Beaumont 5.0.5 and earlier,…
-
Unscored —CVE-2008-3254 Public exploit
SQL injection vulnerability in index.php in preCMS 1 allows remote attackers to execute arbitrary SQL commands via the …
-
Unscored —CVE-2008-3250 Public exploit
SQL injection vulnerability in index.php in Arctic Issue Tracker 2.0.0 allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2008-3251 Public exploit
Multiple SQL injection vulnerabilities in tplSoccerSite 1.0 allow remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2008-3240 Public exploit
SQL injection vulnerability in index.php in AlstraSoft Affiliate Network Pro allows remote attackers to execute arbitra…
-
Unscored —CVE-2008-3241 Public exploit
SQL injection vulnerability in players-detail.php in UltraStats 0.2.136, 0.2.140, and 0.2.142 allows remote attackers t…
-
Unscored —CVE-2008-3237 Public exploit
Cross-site scripting (XSS) vulnerability in forward_to_friend.php in ITechBids 7.0 Gold allows remote attackers to inje…
-
Unscored —CVE-2008-3238 Public exploit
Multiple SQL injection vulnerabilities in ITechBids 7.0 Gold allow remote attackers to execute arbitrary SQL commands v…
-
Unscored —
Heap-based buffer overflow in the PPMedia Class ActiveX control in PPMPlayer.dll in PPMate 2.3.1.93 allows remote attac…
-
Unscored —CVE-2008-3245 Public exploit
SQL injection vulnerability in phpHoo3.php in phpHoo3 4.3.9, 4.3.10, 4.4.8, and 5.2.6 allows remote attackers to execut…
-
Unscored —CVE-2008-3239 Public exploit
Unrestricted file upload vulnerability in the writeLogEntry function in system/v_cron_proc.php in PHPizabi 0.848b C1 HF…
-
Unscored —CVE-2008-3233 Public exploit
Cross-site scripting (XSS) vulnerability in WordPress before 2.6, SVN development versions only, allows remote attacker…
-
Unscored —CVE-2008-3234 Public exploit
sshd in OpenSSH 4 on Debian GNU/Linux, and the 20070303 OpenSSH snapshot, allows remote authenticated users to obtain a…
-
Unscored —CVE-2008-3207 Public exploit
PHP remote file inclusion vulnerability in cms/modules/form.lib.php in Pragyan CMS 2.6.2, when register_globals is enab…
-
Unscored —CVE-2008-3209 Public exploit
Heap-based buffer overflow in the OpenGifFile function in BiGif.dll in Black Ice Document Imaging SDK 10.95 allows remo…
-
Unscored —CVE-2008-3210 Public exploit
rutil/dns/DnsStub.cxx in ReSIProcate 1.3.2, as used by repro, allows remote attackers to cause a denial of service (dae…
-
Unscored —CVE-2008-3213 Public exploit
SQL injection vulnerability in secciones/tablon/tablon.php in WebCMS Portal Edition allows remote attackers to execute …
-
Unscored —CVE-2008-3212 Public exploit
Multiple SQL injection vulnerabilities in Scripteen Free Image Hosting Script 1.2.1 allow remote attackers to execute a…
-
Unscored —CVE-2008-3208 Public exploit
Simple DNS Plus 4.1, 5.0, and possibly other versions before 5.1.101 allows remote attackers to cause a denial of servi…
-
Unscored —CVE-2008-3211 Public exploit
Scripteen Free Image Hosting Script 1.2 and 1.2.1 allows remote attackers to bypass authentication and gain administrat…
-
Unscored —CVE-2008-3206 Public exploit
SQL injection vulnerability in browse.groups.php in Yuhhu Pubs Black Cat allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2008-3200 Public exploit
SQL injection vulnerability in vlc_forum.php in Avlc Forum as of 20080715 allows remote attackers to execute arbitrary …