Skip to content
OpenAdvisories

Archive

July 2008

Vulnerabilities first published in this month (UTC), newest first.

← June 2008 2008 / July August 2008 →
  1. 113
  2. 234
  3. 39
  4. 4 
  5. 5 
  6. 6 
  7. 757
  8. 815
  9. 943
  10. 1026
  11. 1112
  12. 12 
  13. 13 
  14. 1426
  15. 1554
  16. 169
  17. 1712
  18. 1830
  19. 19 
  20. 20 
  21. 2117
  22. 2212
  23. 23 
  24. 2417
  25. 2531
  26. 26 
  27. 2710
  28. 2822
  29. 295
  30. 3027
  31. 3139
All Critical High Medium Low Exploited only Public exploit

520 results · Feed

  • Unscored —
    CVE-2008-3355 Public exploit

    SQL injection vulnerability in sitemap.xml.php in Camera Life 2.6.2 allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2008-3351 Public exploit

    SQL injection vulnerability in atomPhotoBlog.php in Atom PhotoBlog 1.0.9.1 and 1.1.5b1 allows remote attackers to execu…

  • Unscored —
    CVE-2007-5400

    Heap-based buffer overflow in the Shockwave Flash (SWF) frame handling in RealNetworks RealPlayer 10.5 Build 6.0.12.148…

  • Unscored —
    CVE-2008-3344

    Multiple cross-site scripting (XSS) vulnerabilities in staticpages/easyecards/index.php in MyioSoft EasyE-Cards 3.5 tri…

  • Unscored —
    CVE-2008-3345 Public exploit

    SQL injection vulnerability in staticpages/easyecards/index.php in MyioSoft EasyE-Cards 3.5 trial edition (tr) and 3.10…

  • Unscored —
    CVE-2008-3343 Public exploit

    SQL injection vulnerability in staticpages/easypublish/index.php in MyioSoft EasyPublish 3.0tr (trial edition) allows r…

  • Unscored —
    CVE-2008-3347 Public exploit

    SQL injection vulnerability in staticpages/easycalendar/index.php in MyioSoft EasyDynamicPages 3.0 trial edition (tr) a…

  • Unscored —
    CVE-2008-3341

    Multiple SQL injection vulnerabilities in search_result.cfm in Jobbex JobSite allow remote attackers to execute arbitra…

  • Unscored —
    CVE-2008-3339

    search_result.cfm in Jobbex JobSite allows remote attackers to obtain sensitive information via unspecified vectors tha…

  • Unscored —
    CVE-2008-3340

    Cross-site scripting (XSS) vulnerability in search_result.cfm in Jobbex JobSite allows remote attackers to inject arbit…

  • Unscored —
    CVE-2008-3348

    Cross-site scripting (XSS) vulnerability in staticpages/easycalendar/index.php in MyioSoft EasyDynamicPages 3.0 trial e…

  • Unscored —
    CVE-2008-3342

    Cross-site scripting (XSS) vulnerability in staticpages/easypublish/index.php in MyioSoft EasyPublish 3.0tr allows remo…

  • Unscored —
    CVE-2008-3346 Public exploit

    SQL injection vulnerability in product_detail.php in ShopCart DX allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2008-3331 Public exploit

    Cross-site scripting (XSS) vulnerability in return_dynamic_filters.php in Mantis before 1.1.2 allows remote attackers t…

  • Unscored —
    CVE-2008-3334

    Cross-site scripting (XSS) vulnerability in MyBB 1.2.x before 1.2.14 allows remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2008-3336

    Multiple cross-site scripting (XSS) vulnerabilities in PunBB before 1.2.19 allow remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2008-3332 Public exploit

    Eval injection vulnerability in adm_config_set.php in Mantis before 1.1.2 allows remote authenticated administrators to…

  • Unscored —
    CVE-2008-3335

    Unspecified vulnerability in PunBB before 1.2.19 allows remote attackers to inject arbitrary SMTP commands via unknown …

  • Unscored —
    CVE-2008-3333

    Directory traversal vulnerability in core/lang_api.php in Mantis before 1.1.2 allows remote attackers to include and ex…

  • Medium 6.1
    CVE-2008-3328

    Trac Cross-site Scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in the wiki engine in Trac before 0.10.5 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

    trac trac Debian PyPI
  • Unscored —
    CVE-2008-3329

    Unspecified vulnerability in Links before 2.1, when "only proxies" is enabled, has unknown impact and attack vectors re…

    links2 Debian
  • Unscored —
    CVE-2008-3330

    Cross-site scripting (XSS) vulnerability in services/obrowser/index.php in Horde 3.2 and Turba 2.2 allows remote attack…

  • Medium 6.1
    CVE-2008-2951

    Trac Open Redirect vulnerability

    Open redirect vulnerability in the search script in Trac before 0.10.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the q parameter, possibly related to the quickjump function.

    trac trac Debian PyPI
  • Unscored —
    CVE-2008-3315 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.8.10 allow remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2008-3310 Public exploit

    SQL injection vulnerability in default.asp in Pre Survey Poll allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2008-3309 Public exploit

    SQL injection vulnerability in info_book.asp in DigiLeave 1.2 and earlier allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2008-3320 Public exploit

    admin/index.php in Maian Guestbook 3.2 and earlier allows remote attackers to bypass authentication and gain administra…

  • Unscored —
    CVE-2008-3305 Public exploit

    Cross-site scripting (XSS) vulnerability in mensaje.php in C. Desseno YouTube Blog (ytb) 0.1 allows remote attackers to…

  • Unscored —
    CVE-2008-3306 Public exploit

    SQL injection vulnerability in info.php in C. Desseno YouTube Blog (ytb) 0.1 allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2008-3326

    Cross-site scripting (XSS) vulnerability in blog/edit.php in Moodle 1.6.x before 1.6.7 and 1.7.x before 1.7.5 allows re…

  • Unscored —
    CVE-2008-3307 Public exploit

    SQL injection vulnerability in todos.php in C. Desseno YouTube Blog (ytb) 0.1 allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2008-3313 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in CreaCMS 1.0 allow remote attackers to execute arbitrary PHP code …

  • Unscored —
    CVE-2008-3318 Public exploit

    admin/index.php in Maian Weblog 4.0 and earlier allows remote attackers to bypass authentication and gain administrativ…

  • Unscored —
    CVE-2008-3321 Public exploit

    admin/index.php in Maian Uploader 4.0 and earlier allows remote attackers to bypass authentication and gain administrat…

  • Unscored —
    CVE-2008-3327

    Moodle 1.6.5, when display_errors is enabled, allows remote attackers to obtain sensitive information via a direct requ…

  • Unscored —
    CVE-2008-3316

    Cross-site scripting (XSS) vulnerability in the search feature in the Forum plugin before 2.7.1 for Geeklog allows remo…

  • Unscored —
    CVE-2008-3314 Public exploit

    ZDaemon 1.08.07 and earlier allows remote attackers to cause a denial of service (daemon crash) via a crafted type 6 co…

  • Unscored —
    CVE-2008-3319 Public exploit

    admin/index.php in Maian Links 3.1 and earlier allows remote attackers to bypass authentication and gain administrative…

  • Unscored —
    CVE-2008-3317 Public exploit

    admin/index.php in Maian Search 1.1 and earlier allows remote attackers to bypass authentication and gain administrativ…

  • Unscored —
    CVE-2008-3325

    Cross-site request forgery (CSRF) vulnerability in Moodle 1.6.x before 1.6.7 and 1.7.x before 1.7.5 allows remote attac…