Archive
July 2008
Vulnerabilities first published in this month (UTC), newest first.
233 results · Clear filters · Feed
-
Unscored —CVE-2008-3201 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Pagefusion 1.5 allow remote attackers to inject arb…
-
Unscored —CVE-2008-3204 Public exploit
SQL injection vulnerability in tops_top.php in E-topbiz Million Pixels 3 allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2008-3203 Public exploit
js/pages/pages_data.php in AuraCMS 2.2 through 2.2.2 does not perform authentication, which allows remote attackers to …
-
Unscored —CVE-2008-3205 Public exploit
Directory traversal vulnerability in index.php in Easy-Script Wysi Wiki Wyg 1.0 allows remote attackers to read arbitra…
-
Unscored —CVE-2008-3202 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Xomol CMS 1.2 allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2008-3190 Public exploit
Directory traversal vulnerability in list.php in 1Scripts CodeDB 1.1.1 allows remote attackers to include and execute a…
-
Unscored —CVE-2008-3192 Public exploit
Directory traversal vulnerability in index.php in jSite 1.0 OE allows remote attackers to include and execute arbitrary…
-
Unscored —CVE-2008-3191 Public exploit
Multiple SQL injection vulnerabilities in usercp.php in mForum 0.1a, when magic_quotes_gpc is disabled, allow remote at…
-
Unscored —CVE-2008-3189 Public exploit
SQL injection vulnerability in dreamnews-rss.php in DreamNews Manager allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2008-3193 Public exploit
SQL injection vulnerability in jSite 1.0 OE allows remote attackers to execute arbitrary SQL commands via the page para…
-
Unscored —CVE-2008-3194 Public exploit
Multiple directory traversal vulnerabilities in data/inc/themes/predefined_variables.php in pluck 4.5.1 allow remote at…
-
Unscored —
Unspecified vulnerability in the Oracle Internet Directory component in Oracle Application Server 9.0.4.3, 10.1.2.3, an…
-
Unscored —CVE-2008-3185 Public exploit
SQL injection vulnerability in index.php in Relative Real Estate Systems 3.0 and earlier allows remote attackers to exe…
-
Unscored —CVE-2008-3186 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Chipmunk Blog (Blogger) allow remote attackers to inject arbitra…
-
Unscored —CVE-2008-3179 Public exploit
Directory traversal vulnerability in website.php in Web 2 Business (W2B) phpDatingClub (aka Dating Club) 3.7 allows rem…
-
Unscored —CVE-2008-3183 Public exploit
PHP remote file inclusion vulnerability in ktmlpro/includes/ktedit/toolbar.php in gapicms 9.0.2 allows remote attackers…
-
Unscored —CVE-2008-3178 Public exploit
Unrestricted file upload vulnerability in upload_pictures.php in WebXell Editor 0.1.3 allows remote attackers to execut…
-
Unscored —CVE-2008-3182 Public exploit
Stack-based buffer overflow in DAP.exe in Download Accelerator Plus (DAP) 7.0.1.3, 8.6.6.3, and other 8.x versions allo…
-
Unscored —CVE-2008-3180 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in upload/file/language_menu.php in ContentNow CMS 1.4.1 allow remo…
-
Unscored —CVE-2008-3181 Public exploit
Unrestricted file upload vulnerability in upload.php in ContentNow CMS 1.4.1 allows remote authenticated users to execu…
-
Unscored —CVE-2008-3184 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in vBulletin 3.6.10 PL2 and earlier, and 3.7.2 and earlier 3.7.x ve…
-
Unscored —CVE-2008-3165 Public exploit
Directory traversal vulnerability in rss.php in fuzzylime (cms) 3.01a and earlier, when magic_quotes_gpc is disabled, a…
-
Unscored —CVE-2008-3162 Public exploit
Stack-based buffer overflow in the str_read_packet function in libavformat/psxstr.c in FFmpeg before r13993 allows remo…
-
Unscored —CVE-2008-3167 Public exploit
Multiple PHP remote file inclusion vulnerabilities in BoonEx Dolphin 6.1.2, when register_globals is enabled, allow rem…
-
Unscored —CVE-2008-3166 Public exploit
PHP remote file inclusion vulnerability in modules/global/inc/content.inc.php in BoonEx Ray 3.5, when register_globals …
-
Unscored —CVE-2008-3163 Public exploit
Directory traversal vulnerability in dodosmail.php in DodosMail 2.5 allows remote attackers to include and execute arbi…
-
Unscored —CVE-2008-3164 Public exploit
Directory traversal vulnerability in blog.php in fuzzylime (cms) 3.01, when magic_quotes_gpc is disabled, allows remote…
-
Unscored —CVE-2008-3161 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in jsp/common/system/debug.jsp in IBM Maximo 4.1 and 5.2 allow remo…
-
Unscored —
Integer signedness error in Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows remote attackers to exec…
-
Unscored —CVE-2008-2304 Public exploit
Buffer overflow in Apple Core Image Fun House 2.0 and earlier in CoreImage Examples in Xcode tools before 3.1 allows us…
-
Unscored —CVE-2008-3154 Public exploit
SQL injection vulnerability in index.php in WebBlizzard CMS allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2008-3151 Public exploit
SQL injection vulnerability in the 4ndvddb 0.91 module for PHP-Nuke allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2008-3158 Public exploit
Unspecified vulnerability in NWFS.SYS in Novell Client for Windows 4.91 SP4 has unknown impact and attack vectors, poss…
-
Unscored —CVE-2008-3153 Public exploit
SQL injection vulnerability in Triton CMS Pro allows remote attackers to execute arbitrary SQL commands via the X-Forwa…
-
Unscored —CVE-2008-3152 Public exploit
SQL injection vulnerability in directory.php in SmartPPC and SmartPPC Pro allows remote attackers to execute arbitrary …
-
Unscored —CVE-2008-3156 Public exploit
The ActiveScan ActiveX Control (as2guiie.dll) in Panda ActiveScan before 1.02.00 allows remote attackers to download an…
-
Unscored —CVE-2008-3155 Public exploit
Stack-based buffer overflow in the ActiveX control (as2guiie.dll) in Panda ActiveScan before 1.02.00 allows remote atta…
-
Unscored —CVE-2008-3150 Public exploit
Directory traversal vulnerability in index.php in Neutrino Atomic Edition 0.8.4 allows remote attackers to read and mod…
-
Unscored —CVE-2008-3148 Public exploit
Stack-based buffer overflow in (1) OllyDBG 1.10 and (2) ImpREC 1.7f allows user-assisted attackers to execute arbitrary…
-
Unscored —CVE-2008-3133 Public exploit
SQL injection vulnerability in admin/index.php in BareNuked CMS 1.1.0, when magic_quotes_gpc is disabled, allows remote…