Archive
July 2008
Vulnerabilities first published in this month (UTC), newest first.
520 results · Feed
-
Unscored —CVE-2008-3312 Public exploit
Directory traversal vulnerability in lemon_includes/FCKeditor/editor/filemanager/browser/browser.php in Lemon CMS 1.10 …
-
Unscored —CVE-2008-3308 Public exploit
PHP remote file inclusion vulnerability in cuenta/cuerpo.php in C. Desseno YouTube Blog (ytb) 0.1, when register_global…
-
Unscored —CVE-2008-3322 Public exploit
admin/index.php in Maian Recipe 1.2 and earlier allows remote attackers to bypass authentication and gain administrativ…
-
Unscored —CVE-2008-3311 Public exploit
PHP remote file inclusion vulnerability in config.php in Adam Scheinberg Flip 3.0 allows remote attackers to execute ar…
-
Unscored —CVE-2008-3304 Public exploit
BilboBlog 0.2.1 allows remote attackers to obtain sensitive information via (1) an enable_cache=false query string to f…
-
Unscored —CVE-2008-3295 Public exploit
Cross-site scripting (XSS) vulnerability in modules/system/admin.php in XOOPS 2.0.18.1 allows remote attackers to injec…
-
Unscored —
SocialEngine (SE) before 2.83 grants certain write privileges for templates, which allows remote authenticated administ…
-
Unscored —CVE-2008-3303 Public exploit
admin/login.php in BilboBlog 0.2.1, when register_globals is enabled, allows remote attackers to bypass authentication …
-
Unscored —CVE-2008-3300 Public exploit
AlphAdmin CMS 1.0.5/03 allows remote attackers to bypass authentication and gain administrative access by setting the a…
-
Unscored —CVE-2008-3302 Public exploit
SQL injection vulnerability in admin/delete.php in BilboBlog 0.2.1, when magic_quotes_gpc is disabled, allows remote au…
-
Unscored —
Multiple SQL injection vulnerabilities in SocialEngine (SE) before 2.83 allow remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2008-3299 Public exploit
eSyndiCat 1.6 allows remote attackers to bypass authentication and gain administrative access by setting the admin_lng …
-
Unscored —CVE-2008-3301 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in BilboBlog 0.2.1 allow remote authenticated administrators to inj…
-
Unscored —CVE-2008-3296 Public exploit
Directory traversal vulnerability in modules/system/admin.php in XOOPS 2.0.18 1 allows remote attackers to include and …
-
Unscored —CVE-2008-3292 Public exploit
constants.inc in EZWebAlbum 1.0 allows remote attackers to bypass authentication and gain administrator privileges by s…
-
Unscored —CVE-2008-3293 Public exploit
Directory traversal vulnerability in download.php in EZWebAlbum allows remote attackers to read arbitrary files via the…
-
Unscored —
src/configure.in in Vim 5.0 through 7.1, when used for a build with Python support, does not ensure that the Makefile-c…
-
Unscored —CVE-2008-3291 Public exploit
SQL injection vulnerability in index.php in AproxEngine (aka Aprox CMS Engine) 5.1.0.4 allows remote attackers to execu…
-
Unscored —
EMC Dantz Retrospect Backup Client 7.5.116 sends the password hash in cleartext at an unspecified point, which allows r…
-
Unscored —
retroclient.exe in EMC Dantz Retrospect Backup Client 7.5.116 allows remote attackers to cause a denial of service (dae…
-
Unscored —CVE-2008-3286 Public exploit
SWAT 4 1.1 and earlier allows remote attackers to cause a denial of service (daemon crash) via a (1) VERIFYCONTENT or (…
-
Unscored —CVE-2008-3285 Public exploit
The Filesys::SmbClientParser module 2.7 and earlier for Perl allows remote SMB servers to execute arbitrary code via a …
-
Unscored —
The Server Authentication Module in EMC Dantz Retrospect Backup Server 7.5.508 uses a "weak hash algorithm," which make…
-
Unscored —
retroclient.exe in EMC Dantz Retrospect Backup Client 7.5.116 allows remote attackers to cause a denial of service (dae…
-
Unscored —CVE-2008-3267 Public exploit
SQL injection vulnerability in mojoJobs.cgi in MojoJobs allows remote attackers to execute arbitrary SQL commands via t…
-
Unscored —CVE-2008-3266 Public exploit
SQL injection vulnerability in picture_pic_bv.asp in SoftAcid Hotel Reservation System (HRS) Multi allows remote attack…
-
Unscored —
The LDT implementation in the Linux kernel 2.6.25.x before 2.6.25.11 on x86_64 platforms uses an incorrect size for ldt…
-
Unscored —
WRPCServer.exe in WinSoftMagic WinRemotePC (WRPC) Lite 2008 and Full 2008 allows remote attackers to cause a denial of …
-
Unscored —CVE-2008-3265 Public exploit
SQL injection vulnerability in the DT Register (com_dtregister) 2.2.3 component for Joomla! allows remote attackers to …
-
Unscored —
Unspecified vulnerability in phpScheduleIt 1.2.0 through 1.2.9, when useLogonName is enabled, allows remote attackers w…
-
Unscored —
The FWDOWNL firmware-download implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x before 1.4.2…
-
Unscored —
The IAX2 protocol implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x before 1.4.21.2; Busines…
-
Unscored —CVE-2008-3261 Public exploit
Open redirect vulnerability in claroline/redirector.php in Claroline before 1.8.10 allows remote attackers to redirect …
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in Claroline before 1.8.10 allows remote attackers to change passwords,…
-
Unscored —CVE-2008-3260 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Claroline before 1.8.10 allow remote attackers to inject arbitra…
-
Unscored —
Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic Server) 1…
-
Unscored —
Cross-site scripting (XSS) vulnerability in LunarNight Laboratory WebProxy 1.7.8 and earlier allows remote attackers to…
-
Unscored —
Multiple SQL injection vulnerabilities in Zoph before 0.7.0.5 allow remote attackers to execute arbitrary SQL commands …
-
Unscored —
libxcrypt in SUSE openSUSE 11.0 uses the DES algorithm when the configuration specifies the MD5 algorithm, which makes …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the XenAPI HTTP interfaces in Citrix XenServer Express, Standard, and Enter…