Archive
August 2008
Vulnerabilities first published in this month (UTC), newest first.
164 results · Clear filters · Feed
-
Unscored —CVE-2008-3568 Public exploit
Absolute path traversal vulnerability in fckeditor/editor/filemanager/browser/default/connectors/php/connector.php in U…
-
Unscored —CVE-2008-3574 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Pluck 4.5.2, when register_globals is enabled, allow remote atta…
-
Unscored —CVE-2008-3556 Public exploit
Multiple SQL injection vulnerabilities in index.php in Battle.net Clan Script 1.5.2 allow remote attackers to execute a…
-
Unscored —CVE-2008-3557 Public exploit
Free Hosting Manager 1.2 and 2.0 allows remote attackers to bypass authentication and gain administrative access by set…
-
Unscored —CVE-2008-3559 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in KAPhotoservice allow remote attackers to inject arbitrary web sc…
-
Unscored —
Stack-based buffer overflow in the WebexUCFObject ActiveX control in atucfobj.dll in Cisco WebEx Meeting Manager before…
-
Unscored —CVE-2008-3560 Public exploit
Cross-site scripting (XSS) vulnerability in kshop_search.php in the Kshop module 2.22 for Xoops allows remote attackers…
-
Unscored —CVE-2008-3555 Public exploit
Directory traversal vulnerability in index.php in (1) WSN Forum 4.1.43 and earlier, (2) Gallery 4.1.30 and earlier, (3)…
-
Unscored —CVE-2008-3554 Public exploit
SQL injection vulnerability in index.php in Discuz! 6.0.1 allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —
Multiple stack-based buffer overflows in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o o…
-
Unscored —CVE-2008-3513 Public exploit
SQL injection vulnerability in the Book Catalog module 1.0 for PHP-Nuke allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2008-3509 Public exploit
LoveCMS 1.6.2 does not require administrative authentication for (1) addblock.php, (2) blocks.php, and (3) themes.php i…
-
Unscored —CVE-2008-3511 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Image Gallery (Photo Gallery) allow remote attackers to …
-
Unscored —CVE-2008-3507 Public exploit
SQL injection vulnerability in index.php in LiteNews 0.1 (aka 01), and possibly 1.2 and earlier, allows remote attacker…
-
Unscored —CVE-2008-3510 Public exploit
Cross-site scripting (XSS) vulnerability in livehelp_js.php in Crafty Syntax Live Help (CSLH) 2.14.6 allows remote atta…
-
Unscored —CVE-2008-3512 Public exploit
SQL injection vulnerability in the Kleinanzeigen module for PHP-Nuke allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2008-3508 Public exploit
LiteNews 0.1 (aka 01), and possibly 1.2 and earlier, allows remote attackers to bypass authentication and gain administ…
-
Unscored —CVE-2008-3494 Public exploit
8e6 R3000 Internet Filter 2.0.12.10 allows remote attackers to bypass intended restrictions via an extra HTTP Host head…
-
Unscored —CVE-2008-3495 Public exploit
SQL injection vulnerability in kategori.asp in Pcshey Portal allows remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2008-3505 Public exploit
Cross-site scripting (XSS) vulnerability in PolyPager 1.0 rc2 and earlier allows remote attackers to inject arbitrary w…
-
Unscored —CVE-2008-3497 Public exploit
SQL injection vulnerability in pages.php in MyPHP CMS 0.3.1 allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2008-3498 Public exploit
SQL injection vulnerability in the nBill (com_netinvoice) component 1.2.0 SP1 for Joomla! allows remote attackers to ex…
-
Unscored —CVE-2008-3493 Public exploit
vncviewer.exe in RealVNC Windows Client 4.1.2.0 allows remote VNC servers to cause a denial of service (application cra…
-
Unscored —CVE-2008-3506 Public exploit
SQL injection vulnerability in PolyPager 1.0 rc2 and earlier allows remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2008-3490 Public exploit
SQL injection vulnerability in members/mail.php in E-topbiz Online Dating 3 1.0 allows remote authenticated users to ex…
-
Unscored —CVE-2008-3491 Public exploit
SQL injection vulnerability in go.php in Scripts24 iPost 1.0.1 and iTGP 1.0.4 allows remote attackers to execute arbitr…
-
Unscored —CVE-2008-3486 Public exploit
Directory traversal vulnerability in the user_get_profile function in include/functions.inc.php in Coppermine Photo Gal…
-
Unscored —CVE-2008-3489 Public exploit
SQL injection vulnerability in checkCookie function in includes/functions.inc.php in PHPX 3.5.16 allows remote attacker…
-
Unscored —CVE-2008-3487 Public exploit
SQL injection vulnerability in profile.php in PHPAuction GPL Enhanced 2.51 allows remote attackers to execute arbitrary…
-
Unscored —CVE-2008-3484 Public exploit
SQL injection vulnerability in eStoreAff 0.1 allows remote attackers to execute arbitrary SQL commands via the cid para…
-
Unscored —CVE-2008-3483 Public exploit
Cross-site scripting (XSS) vulnerability in ScrewTurn Wiki 2.0.29 and 2.0.30 allows remote attackers to inject arbitrar…
-
Unscored —CVE-2008-3481 Public exploit
themes/sample/theme.php in Coppermine Photo Gallery (CPG) 1.4.18 and earlier allows remote attackers to obtain sensitiv…
-
High 8.8
The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the METHOD_NEITHER communica…
KEV Mar 3, 2022 -
Unscored —CVE-2008-3454 Public exploit
JnSHosts PHP Hosting Directory 2.0 allows remote attackers to bypass authentication and gain administrative access by s…
-
Unscored —CVE-2008-3455 Public exploit
PHP remote file inclusion vulnerability in include/admin.php in JnSHosts PHP Hosting Directory 2.0 allows remote attack…
-
Unscored —CVE-2008-3452 Public exploit
SQL injection vulnerability in the Calendar module in eNdonesia 8.4 allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2008-3447 Public exploit
The scanning engine in F-Prot Antivirus 6.2.1 4252 allows remote attackers to cause a denial of service (infinite loop)…
-
Unscored —CVE-2008-3448 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in common solutions csphonebook 1.02 allows remote attackers to i…
-
Unscored —CVE-2008-3445 Public exploit
SQL injection vulnerability in index.php in phpMyRealty (PMR) 2.0.0 allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2008-3446 Public exploit
Directory traversal vulnerability in inc/wysiwyg.php in LetterIt 2 allows remote attackers to include and execute arbit…