Archive
August 2008
Vulnerabilities first published in this month (UTC), newest first.
164 results · Clear filters · Feed
-
Unscored —CVE-2008-3756 Public exploit
SQL injection vulnerability in tr.php in YourFreeWorld Viral Marketing Script allows remote attackers to execute arbitr…
-
Unscored —CVE-2008-3720 Public exploit
SQL injection vulnerability in index.php in DeeEmm CMS (DMCMS) 0.7.4 allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2008-3722 Public exploit
SQL injection vulnerability in forum/neu.asp in fipsCMS 2.1 allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2008-3719 Public exploit
SQL injection vulnerability in directory.php in SFS Affiliate Directory allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2008-3725 Public exploit
SQL injection vulnerability in trr.php in YourFreeWorld Ad Board Script allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2008-3721 Public exploit
PHP remote file inclusion vulnerability in user_language.php in DeeEmm CMS (DMCMS) 0.7.4 allows remote attackers to exe…
-
Unscored —
Integer overflow in the Open function in modules/demux/tta.c in VLC Media Player 0.8.6i allows remote attackers to caus…
-
Unscored —CVE-2008-3723 Public exploit
Directory traversal vulnerability in index.php in PHPizabi 0.848b C1 HFP3 allows remote authenticated administrators to…
-
Unscored —
Format string vulnerability in Ipswitch WS_FTP Home 2007.0.0.2 and WS_FTP Professional 2007.1.0.0 allows remote FTP ser…
-
Unscored —CVE-2008-3718 Public exploit
Multiple SQL injection vulnerabilities in cyberBB 0.6 allow remote authenticated users to execute arbitrary SQL command…
-
Unscored —CVE-2008-3733 Public exploit
Stack-based buffer overflow in EO Video (eo-video) 1.36 allows remote attackers to cause a denial of service (applicati…
-
Unscored —CVE-2008-3711 Public exploit
SQL injection vulnerability in index.php in PHPArcadeScript (PHP Arcade Script) 4.0 allows remote attackers to execute …
-
Unscored —CVE-2008-3713 Public exploit
SQL injection vulnerability in product.php in PHPBasket allows remote attackers to execute arbitrary SQL commands via t…
-
Unscored —CVE-2008-3715 Public exploit
Cross-site scripting (XSS) vulnerability in inc-core-admin-editor-previouscolorsjs.php in the FlexCMS 2.5 and earlier, …
-
Unscored —CVE-2008-3706 Public exploit
SQL injection vulnerability in bannerclick.php in ZEEJOBSITE 2.0 allows remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2008-3714 Public exploit
Cross-site scripting (XSS) vulnerability in awstats.pl in AWStats 6.8 allows remote attackers to inject arbitrary web s…
-
Unscored —CVE-2008-3708 Public exploit
Multiple directory traversal vulnerabilities in dotCMS 1.6.0.9 allow remote attackers to read arbitrary files via a .. …
-
Unscored —CVE-2008-3712 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Mambo 4.6.2 and 4.6.5, when register_globals is enabled, allow r…
-
Unscored —
Heap-based buffer overflow in the MaskedEdit ActiveX control in Msmask32.ocx 6.0.81.69, and possibly other versions bef…
-
Unscored —CVE-2008-2936 Public exploit
Postfix before 2.3.15, 2.4 before 2.4.8, 2.5 before 2.5.4, and 2.6 before 2.6-20080814, when the operating system suppo…
-
Unscored —
Format string vulnerability in the window_error function in yelp-window.c in yelp in Gnome after 2.19.90 and before 2.2…
-
Unscored —CVE-2008-3700 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Kayako SupportSuite 3.20.02 and earlier allow remote attackers t…
-
Unscored —CVE-2008-3701 Public exploit
SQL injection vulnerability in staff/index.php in Kayako SupportSuite 3.20.02 and earlier allows remote authenticated u…
-
Unscored —CVE-2008-3702 Public exploit
Multiple stack-based buffer overflows in the Animation GIF ActiveX control in JComSoft AniGIF.ocx 1.12 and 2.47, as use…
-
Unscored —
The regular expression engine (regex.c) in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, a…
-
Unscored —CVE-2008-3682 Public exploit
SQL injection vulnerability in dpage.php in YPN PHP Realty allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2008-3680 Public exploit
The decryption function in Flagship Industries Ventrilo 3.0.2 and earlier allows remote attackers to cause a denial of …
-
Unscored —CVE-2008-3675 Public exploit
Directory traversal vulnerability in classes/imgsize.php in Gelato 0.95 allows remote attackers to read arbitrary files…
-
Unscored —CVE-2008-3679 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in IDevSpot PhpLinkExchange 1.01 allow remote attacker…
-
Unscored —CVE-2008-3676 Public exploit
Unspecified vulnerability in the IMAP server in hMailServer 4.4.1 allows remote authenticated users to cause a denial o…
-
Unscored —CVE-2008-3681 Public exploit
components/com_user/models/reset.php in Joomla! 1.5 through 1.5.5 does not properly validate reset tokens, which allows…
-
Unscored —CVE-2008-3673 Public exploit
SQL injection vulnerability in browsecats.php in PozScripts Classified Ads allows remote attackers to execute arbitrary…
-
Unscored —CVE-2008-3674 Public exploit
SQL injection vulnerability in ugroups.php in PozScripts TubeGuru Video Sharing Script allows remote attackers to execu…
-
Unscored —CVE-2008-3670 Public exploit
SQL injection vulnerability in authordetail.php in Article Friendly Pro allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2008-3669 Public exploit
SQL injection vulnerability in comments.php in ZeeScripts Reviews Opinions Rating Posting Engine Web-Site PHP Script (a…
-
Unscored —CVE-2008-3672 Public exploit
SQL injection vulnerability in showcategory.php in PozScripts Classified Ads allows remote attackers to execute arbitra…
-
Unscored —CVE-2008-3667 Public exploit
Stack-based buffer overflow in Maxthon Browser 2.0 and earlier allows remote attackers to execute arbitrary code via a …
-
Unscored —CVE-2008-3668 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the Yogurt Social Network module 3.2 rc1 for XOOPS allow remote …
-
Unscored —
Algorithmic complexity vulnerability in the WEBrick::HTTPUtils.split_header_value function in WEBrick::HTTP::DefaultFil…
-
Unscored —
The dl module in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 does…