Archive
August 2008
Vulnerabilities first published in this month (UTC), newest first.
164 results · Clear filters · Feed
-
Unscored —
Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 does not properly res…
-
Unscored —CVE-2008-3649 Public exploit
SQL injection vulnerability in categorydetail.php in Article Friendly Standard allows remote attackers to execute arbit…
-
Unscored —
Heap-based buffer overflow in the InternalOpenColorProfile function in mscms.dll in Microsoft Windows Image Color Manag…
-
Medium —
Apache Tomcat Directory Traversal vulnerability
Directory traversal vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when allowLinking and UTF-8 are enabled, allows remote attackers to read arbitrary files via encoded directory traversal sequences in the …
-
Unscored —CVE-2008-3599 Public exploit
SQL injection vulnerability in image.php in OpenImpro 1.1 allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2008-3598 Public exploit
Multiple SQL injection vulnerabilities in psipuss 1.0 allow remote attackers to execute arbitrary SQL commands via (1) …
-
Unscored —CVE-2008-3602 Public exploit
admin/wr_admin.php in PHP-Ring Webring System (aka uPHP_ring_website) 0.9.1 allows remote attackers to bypass authentic…
-
Unscored —CVE-2008-3601 Public exploit
SQL injection vulnerability in index.php in Quicksilver Forums 1.4.1 allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2008-3604 Public exploit
SQL injection vulnerability in bannerclick.php in ZeeBuddy 2.1 allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2008-3607 Public exploit
The IMAP server in NoticeWare Email Server NG 4.6.3 and earlier allows remote attackers to cause a denial of service (d…
-
Unscored —CVE-2008-3603 Public exploit
SQL injection vulnerability in index.php in Vacation Rental Script 3.0 allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2008-3606 Public exploit
Heap-based buffer overflow in the IMAP service in Qbik WinGate 6.2.2.1137 and earlier allows remote authenticated users…
-
Unscored —CVE-2008-3595 Public exploit
PHP remote file inclusion vulnerability in examples/txtSQLAdmin/startup.php in txtSQL 2.2 Final allows remote attackers…
-
Unscored —CVE-2008-3588 Public exploit
Multiple SQL injection vulnerabilities in phsBlog 0.1.1 allow remote attackers to execute arbitrary SQL commands via th…
-
Unscored —CVE-2008-3586 Public exploit
SQL injection vulnerability in the EZ Store (com_ezstore) component for Joomla! allows remote attackers to execute arbi…
-
Unscored —CVE-2008-3594 Public exploit
SQL injection vulnerability in viewdetails.php in MagicScripts E-Store Kit-1, E-Store Kit-2, E-Store Kit-1 Pro PayPal E…
-
Unscored —CVE-2008-3587 Public exploit
Cross-site scripting (XSS) vulnerability in result.php in Chris Bunting Homes 4 Sale allows remote attackers to inject …
-
Unscored —CVE-2008-3585 Public exploit
Multiple SQL injection vulnerabilities in PozScripts GreenCart PHP Shopping Cart allow remote attackers to execute arbi…
-
Unscored —CVE-2008-3590 Public exploit
Multiple SQL injection vulnerabilities in admin/login.asp in E. Z. Poll 2 allow remote attackers to execute arbitrary S…
-
Unscored —CVE-2008-3591 Public exploit
SQL injection vulnerability in lib/class.admin.php in Twentyone Degrees Symphony 1.7.01 and earlier allows remote attac…
-
Unscored —CVE-2008-3592 Public exploit
Unrestricted file upload vulnerability in the File Manager in the admin panel in Twentyone Degrees Symphony 1.7.01 and …
-
Unscored —CVE-2008-3593 Public exploit
Directory traversal vulnerability in index.php in SyzygyCMS 0.3 allows remote attackers to include and execute arbitrar…
-
Unscored —CVE-2008-3589 Public exploit
Directory traversal vulnerability in download.php in moziloCMS 1.10.1, when magic_quotes_gpc is disabled, allows remote…
-
Unscored —CVE-2008-3583 Public exploit
Buffer overflow in the HTML parser in IntelliTamper 2.07 allows remote attackers to execute arbitrary code via a long U…
-
Unscored —CVE-2008-3581 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Qsoft K-Links allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2008-3580 Public exploit
Multiple SQL injection vulnerabilities in Qsoft K-Links allow remote attackers to execute arbitrary SQL commands via (1…
-
Unscored —CVE-2008-3582 Public exploit
SQL injection vulnerability in login.php in Keld PHP-MySQL News Script 0.7.1 allows remote attackers to execute arbitra…
-
Unscored —CVE-2008-3578 Public exploit
HydraIRC 0.3.164 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and applica…
-
Unscored —CVE-2008-3575 Public exploit
PHP remote file inclusion vulnerability in modules/calendar/minicalendar.php in ezContents CMS allows remote attackers …
-
Unscored —
JBoss Enterprise Application Platform (aka JBossEAP or EAP) before 4.2.0.CP03, and 4.3.0 before 4.3.0.CP01, allows remo…
-
Unscored —CVE-2008-3566 Public exploit
Cross-site scripting (XSS) vulnerability in ZoneO-soft freeForum 1.7 allows remote attackers to inject arbitrary web sc…
-
Unscored —CVE-2008-3565 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Meeting Room Booking System (MRBS) 1.2.6 allow remote attackers …
-
Unscored —CVE-2008-3561 Public exploit
SQL injection vulnerability in s03.php in Powergap Shopsystem, when magic_quotes_gpc is disabled, allows remote attacke…
-
Unscored —CVE-2008-3563 Public exploit
Multiple SQL injection vulnerabilities in Plogger 3.0 and earlier allow remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2008-3573 Public exploit
The CAPTCHA implementation in (1) Pligg 9.9.5 and possibly (2) Francisco Burzi PHP-Nuke 8.1 provides a critical random …
-
Unscored —CVE-2008-3570 Public exploit
PHP remote file inclusion vulnerability in index.php in Africa Be Gone (ABG) 1.0a allows remote attackers to execute ar…
-
Unscored —CVE-2008-3569 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in XAMPP 1.6.7, when register_globals is enabled, allow remote atta…
-
Unscored —CVE-2008-3562 Public exploit
Directory traversal vulnerability in index.php in the Contact module in Chupix CMS 0.1.0, when magic_quotes_gpc is disa…
-
Unscored —
The Xerox Phaser 8400 allows remote attackers to cause a denial of service (reboot) via an empty UDP packet to port 190…
-
Unscored —CVE-2008-3564 Public exploit
Multiple directory traversal vulnerabilities in index.php in Dayfox Blog 4 allow remote attackers to include and execut…