Skip to content
OpenAdvisories

Archive

19 August 2008

Vulnerabilities first published on this day (UTC), newest first.

13 results · Feed

  • Unscored —
    CVE-2008-3711 Public exploit

    SQL injection vulnerability in index.php in PHPArcadeScript (PHP Arcade Script) 4.0 allows remote attackers to execute …

  • Unscored —
    CVE-2008-3713 Public exploit

    SQL injection vulnerability in product.php in PHPBasket allows remote attackers to execute arbitrary SQL commands via t…

  • Unscored —

    Stack-based buffer overflow in the CLogger::WriteFormated function in echoware/Logger.cpp in EchoVNC Linux before 1.1.2…

  • Unscored —

    Multiple PHP remote file inclusion vulnerabilities in CyBoards PHP Lite 1.21 allow remote attackers to execute arbitrar…

  • Unscored —
    CVE-2008-3715 Public exploit

    Cross-site scripting (XSS) vulnerability in inc-core-admin-editor-previouscolorsjs.php in the FlexCMS 2.5 and earlier, …

  • Unscored —
    CVE-2008-3706 Public exploit

    SQL injection vulnerability in bannerclick.php in ZEEJOBSITE 2.0 allows remote attackers to execute arbitrary SQL comma…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in CyBoards PHP Lite 1.21 allow remote attackers to inject arbitrar…

  • Unscored —
    CVE-2008-3714 Public exploit

    Cross-site scripting (XSS) vulnerability in awstats.pl in AWStats 6.8 allows remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2008-3708 Public exploit

    Multiple directory traversal vulnerabilities in dotCMS 1.6.0.9 allow remote attackers to read arbitrary files via a .. …

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability in Harmoni before 1.6.0 allows remote attackers to make administrative …

  • Unscored —
    CVE-2008-3712 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Mambo 4.6.2 and 4.6.5, when register_globals is enabled, allow r…

  • Unscored —

    Harmoni before 1.6.0 does not require administrative privileges to list (1) user names or (2) asset ids, which allows r…

  • Unscored —

    Multiple directory traversal vulnerabilities in CyBoards PHP Lite 1.21 allow remote attackers to include and execute ar…