Archive
July 2008
Vulnerabilities first published in this month (UTC), newest first.
233 results · Clear filters · Feed
-
Unscored —CVE-2008-3131 Public exploit
SQL injection vulnerability in chatbox.php in pSys 0.7.0 Alpha, when magic_quotes_gpc is disabled, allows remote attack…
-
Unscored —CVE-2008-3127 Public exploit
PHP remote file inclusion vulnerability in hioxBannerRotate.php in HIOX Banner Rotator (HBR) 1.3, when register_globals…
-
Unscored —CVE-2008-3129 Public exploit
Multiple SQL injection vulnerabilities in index.php in Catviz 0.4 beta 1 allow remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2008-3140 Public exploit
The syslog dissector in Wireshark (formerly Ethereal) 1.0.0 allows remote attackers to cause a denial of service (appli…
-
Unscored —CVE-2008-3136 Public exploit
SQL injection vulnerability in catalogue.php in AShop Deluxe 4.x allows remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2008-3132 Public exploit
SQL injection vulnerability in the beamospetition (com_beamospetition) component for Joomla! allows remote attackers to…
-
Unscored —CVE-2008-3128 Public exploit
Directory traversal vulnerability in search.php in Pivot 1.40.5 allows remote attackers to read arbitrary files via a .…
-
Unscored —CVE-2008-3119 Public exploit
SQL injection vulnerability in index.php in DreamPics Builder allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2008-3124 Public exploit
SQL injection vulnerability in index.php in Mole Group Hotel Script 1.0 allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2008-3123 Public exploit
SQL injection vulnerability in index.php in Mole Group Real Estate Script 1.1 and earlier allows remote attackers to ex…
-
Unscored —CVE-2008-3125 Public exploit
SQL injection vulnerability in index.php in Mole Group Lastminute Script 4.0 allows remote attackers to execute arbitra…
-
Unscored —CVE-2008-3117 Public exploit
Unrestricted file upload vulnerability in update_profile.php in PHPmotion 2.0 and earlier allows remote authenticated u…
-
Unscored —CVE-2008-3118 Public exploit
SQL injection vulnerability in play.php in PHPmotion 2.0 and earlier allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2008-3116 Public exploit
Format string vulnerability in dx8render.dll in Snail Game (aka Suzhou Snail Electronic Company) 5th street (aka Hot St…
-
Unscored —CVE-2008-3088 Public exploit
Cross-site scripting (XSS) vulnerability in the Files module in Kasseler CMS 1.3.0 and 1.3.1 Lite allows remote attacke…
-
Unscored —CVE-2008-3087 Public exploit
Directory traversal vulnerability in Kasseler CMS 1.3.0 allows remote attackers to read arbitrary files via a .. (dot d…
-
Unscored —CVE-2008-3089 Public exploit
SQL injection vulnerability in user.html in Xpoze Pro 3.06 (aka Xpoze Pro CMS 2008) allows remote attackers to execute …
-
Unscored —CVE-2008-3093 Public exploit
Unrestricted file upload vulnerability in ImperialBB 2.3.5 and earlier allows remote authenticated users to upload and …
-
Unscored —CVE-2008-3080 Public exploit
Cross-site request forgery (CSRF) vulnerability in admin.php in myWebland myBloggie 2.1.6 allows remote attackers to pe…
-
Unscored —CVE-2008-3083 Public exploit
SQL injection vulnerability in Brightcode Weblinks (com_brightweblinks) component for Joomla! allows remote attackers t…
-
Unscored —CVE-2007-1899 Public exploit
Multiple SQL injection vulnerabilities in myWebland myBloggie 2.1.6 allow remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2007-3653 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Farsi Script (aka FaScript) FaName 1.0 allow remote attackers to…
-
Unscored —
The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Wind…
-
Unscored —
The Microsoft Office Snapshot Viewer ActiveX control in snapview.ocx 10.0.5529.0, as distributed in the standalone Snap…
-
Unscored —
The Page destructor in Page.cc in libpoppler in Poppler 0.8.4 and earlier deletes a pageWidgets object even if it is no…
-
Unscored —CVE-2008-3027 Public exploit
SQL injection vulnerability in get_article.php in VanGogh Web CMS 0.9 allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2008-3034 Public exploit
Multiple SQL injection vulnerabilities in RSS-aggregator 1.0 allow remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2008-3030 Public exploit
SQL injection vulnerability in default.asp in EfesTECH Shop 2.0 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2008-3025 Public exploit
SQL injection vulnerability in ad.php in plx Ad Trader 3.2 allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2008-3026 Public exploit
SQL injection vulnerability in index.php in OneClick CMS (aka Sisplet CMS) 2008-01-24 allows remote attackers to execut…
-
Unscored —CVE-2008-3033 Public exploit
RSS-aggregator 1.0 does not require administrative authentication for the admin/fonctions/ directory, which allows remo…
-
Unscored —CVE-2008-3035 Public exploit
SQL injection vulnerability in newThread.php in XchangeBoard 1.70 Final and earlier allows remote authenticated users t…
-
Unscored —CVE-2008-3036 Public exploit
Directory traversal vulnerability in index.php in CMS little 0.0.1 allows remote attackers to include and execute arbit…
-
Unscored —CVE-2008-3031 Public exploit
Directory traversal vulnerability in index.php in Simple PHP Agenda 2.2.4 and earlier allows remote attackers to includ…
-
Unscored —CVE-2008-3022 Public exploit
Multiple PHP remote file inclusion vulnerabilities in sablonlar/gunaysoft/gunaysoft.php in PHPortal 1.2 Beta allow remo…
-
Unscored —CVE-2008-3024 Public exploit
Stack-based buffer overflow in phgrafx in QNX Momentics (aka RTOS) 6.3.2 and earlier allows local users to gain privile…
-
Unscored —CVE-2008-2996 Public exploit
Multiple SQL injection vulnerabilities in index.php in Gravity Board X (GBX) 2.0 Beta, when magic_quotes_gpc is disable…
-
Unscored —CVE-2008-2993 Public exploit
Multiple directory traversal vulnerabilities in index.php in FOG Forum 0.8.1 allow remote attackers to include and exec…
-
Unscored —CVE-2008-2994 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in PHPEasyData 1.5.4 allow remote attackers to inject arbitrary web…
-
Unscored —CVE-2008-2995 Public exploit
Multiple SQL injection vulnerabilities in PHPEasyData 1.5.4 allow remote attackers to execute arbitrary SQL commands vi…