Skip to content
OpenAdvisories

Archive

10 August 2008

Vulnerabilities first published on this day (UTC), newest first.

24 results · Feed

  • Unscored —
    CVE-2008-3583 Public exploit

    Buffer overflow in the HTML parser in IntelliTamper 2.07 allows remote attackers to execute arbitrary code via a long U…

  • Unscored —
    CVE-2008-3581 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Qsoft K-Links allows remote attackers to inject arbitrary web …

  • Unscored —

    Buffer overflow in the TruncateString function in src/gfx.cpp in OpenTTD before 0.6.2 allows remote attackers to cause …

  • Unscored —

    Buffer overflow in src/openttd.cpp in OpenTTD before 0.6.2 allows local users to execute arbitrary code via a large fil…

  • Unscored —

    Calacode @Mail 5.41 on Linux does not require administrative authentication for build-plesk-upgrade.php, which allows r…

  • Unscored —
    CVE-2008-3580 Public exploit

    Multiple SQL injection vulnerabilities in Qsoft K-Links allow remote attackers to execute arbitrary SQL commands via (1…

  • Unscored —
    CVE-2008-3582 Public exploit

    SQL injection vulnerability in login.php in Keld PHP-MySQL News Script 0.7.1 allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2008-3578 Public exploit

    HydraIRC 0.3.164 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and applica…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in index.php in Pligg 9.9.5 allows remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2008-3575 Public exploit

    PHP remote file inclusion vulnerability in modules/calendar/minicalendar.php in ezContents CMS allows remote attackers …

  • Unscored —
    CVE-2008-3273 Public exploit EPSS 47%

    JBoss Enterprise Application Platform (aka JBossEAP or EAP) before 4.2.0.CP03, and 4.3.0 before 4.3.0.CP01, allows remo…

  • Unscored —
    CVE-2008-3566 Public exploit

    Cross-site scripting (XSS) vulnerability in ZoneO-soft freeForum 1.7 allows remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2008-3565 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Meeting Room Booking System (MRBS) 1.2.6 allow remote attackers …

  • Unscored —
    CVE-2008-3561 Public exploit

    SQL injection vulnerability in s03.php in Powergap Shopsystem, when magic_quotes_gpc is disabled, allows remote attacke…

  • Unscored —
    CVE-2008-3563 Public exploit

    Multiple SQL injection vulnerabilities in Plogger 3.0 and earlier allow remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2008-3573 Public exploit

    The CAPTCHA implementation in (1) Pligg 9.9.5 and possibly (2) Francisco Burzi PHP-Nuke 8.1 provides a critical random …

  • Unscored —
    CVE-2008-3570 Public exploit

    PHP remote file inclusion vulnerability in index.php in Africa Be Gone (ABG) 1.0a allows remote attackers to execute ar…

  • Unscored —
    CVE-2008-3569 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in XAMPP 1.6.7, when register_globals is enabled, allow remote atta…

  • Unscored —
    CVE-2008-3562 Public exploit

    Directory traversal vulnerability in index.php in the Contact module in Chupix CMS 0.1.0, when magic_quotes_gpc is disa…

  • Unscored —

    Cross-zone scripting vulnerability in the NowPlaying functionality in NullSoft Winamp before 5.541 allows remote attack…

  • Unscored —
    CVE-2008-3571 Public exploit EPSS 36%

    The Xerox Phaser 8400 allows remote attackers to cause a denial of service (reboot) via an empty UDP packet to port 190…

  • Unscored —
    CVE-2008-3564 Public exploit

    Multiple directory traversal vulnerabilities in index.php in Dayfox Blog 4 allow remote attackers to include and execut…

  • Unscored —
    CVE-2008-3568 Public exploit

    Absolute path traversal vulnerability in fckeditor/editor/filemanager/browser/default/connectors/php/connector.php in U…

  • Unscored —
    CVE-2008-3574 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Pluck 4.5.2, when register_globals is enabled, allow remote atta…