Skip to content
OpenAdvisories

Archive

July 2008

Vulnerabilities first published in this month (UTC), newest first.

← June 2008 2008 / July August 2008 →
  1. 113
  2. 234
  3. 39
  4. 4 
  5. 5 
  6. 6 
  7. 757
  8. 815
  9. 943
  10. 1026
  11. 1112
  12. 12 
  13. 13 
  14. 1426
  15. 1554
  16. 169
  17. 1712
  18. 1830
  19. 19 
  20. 20 
  21. 2117
  22. 2212
  23. 23 
  24. 2417
  25. 2531
  26. 26 
  27. 2710
  28. 2822
  29. 295
  30. 3027
  31. 3139
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Medium 6.1
    CVE-2008-3397

    Cross-site scripting (XSS) vulnerability in Runesoft Cerberus CMS before 3_1.4_0.9 allows remote attackers to inject ar…

  • Medium 6.1
    CVE-2008-3381

    MoinMoin Multiple cross-site scripting (XSS) vulnerabilities

    Multiple cross-site scripting (XSS) vulnerabilities in macro/AdvancedSearch.py in moin (and MoinMoin) 1.6.3 and 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

    moin PyPI
  • Medium 6.1
    CVE-2008-3328

    Trac Cross-site Scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in the wiki engine in Trac before 0.10.5 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

    trac trac Debian PyPI
  • Medium 6.1
    CVE-2008-2951

    Trac Open Redirect vulnerability

    Open redirect vulnerability in the search script in Trac before 0.10.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the q parameter, possibly related to the quickjump function.

    trac trac Debian PyPI
  • Medium —
    CVE-2008-3218

    Drupal vulnerable to Cross-site Scripting

    Multiple cross-site scripting (XSS) vulnerabilities in Drupal 6.x before 6.3 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) free tagging taxonomy terms, which are not properly handled on node preview pages, and (2) un…

    drupal/drupal Packagist
  • Medium —
    CVE-2008-3228

    Joomla! doesn't configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs

    Joomla! before 1.5.4 does not configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs, which has unknown impact and remote attack vectors.

    joomla/joomla-platform Packagist
  • Medium —
    CVE-2008-3226

    Joomla! allows attackers to access cached pages

    The file caching implementation in Joomla! before 1.5.4 allows attackers to access cached pages via unknown attack vectors.

    joomla/joomla-platform Packagist
  • Medium 6.1
    CVE-2008-2991 EPSS 17%

    Cross-site scripting (XSS) vulnerability in Adobe RoboHelp Server 6 and 7 allows remote attackers to inject arbitrary w…

  • Medium 5.3
    CVE-2007-3650

    myWebland myBloggie 2.1.6 allow remote attackers to obtain sensitive information via (1) an invalid year parameter to c…

  • Medium 5.3
    CVE-2007-3651

    class/page.php in Farsi Script (aka FaScript) FaName 1.0 allows remote attackers to obtain sensitive information via a …

  • Medium —
    CVE-2008-3032

    phpMyAdmin extension for TYPO3 has Cross-site Scripting vulnerability

    Cross-site scripting (XSS) vulnerability in the phpMyAdmin (phpmyadmin) extension 3.0.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

    mehrwert/phpmyadmin Packagist