Skip to content
OpenAdvisories

Archive

August 2008

Vulnerabilities first published in this month (UTC), newest first.

373 results · Feed

  • Unscored —
    CVE-2008-3765 Public exploit

    SQL injection vulnerability in code.php in Quick Poll Script allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2008-3752 Public exploit

    SQL injection vulnerability in tr.php in YourFreeWorld Ad-Exchange Script allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2008-3754 Public exploit

    SQL injection vulnerability in trl.php in YourFreeWorld Stylish Text Ads Script allows remote attackers to execute arbi…

  • Unscored —

    SQL injection vulnerability in details.php in YourFreeWorld Programs Rating Script allows remote attackers to execute a…

  • Unscored —
    CVE-2008-3750 Public exploit

    SQL injection vulnerability in tr.php in YourFreeWorld URL Rotator Script allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2008-3758 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Lussumo Vanilla 1.1.4 and earlier (1) allow remote attackers to …

  • Unscored —
    CVE-2008-3761 Public exploit

    hcmon.sys in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier, and V…

  • Unscored —
    CVE-2008-3762 Public exploit

    SQL injection vulnerability in onlinestatus_html.php in Turnkey PHP Live Helper 2.0.1 and earlier allows remote attacke…

  • Unscored —
    CVE-2008-3749 Public exploit

    SQL injection vulnerability in tr.php in YourFreeWorld Banner Management Script allows remote attackers to execute arbi…

  • Unscored —
    CVE-2008-3764 Public exploit

    Eval injection vulnerability in globalsoff.php in Turnkey PHP Live Helper 2.0.1 and earlier allows remote attackers to …

  • Unscored —

    SQL injection vulnerability in tr1.php in YourFreeWorld Forced Matrix Script allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2008-3748 Public exploit

    SQL injection vulnerability in view_group.php in Active PHP Bookmarks (APB) 1.1.02 and 1.2.06 allows remote attackers t…

  • Unscored —

    SQL injection vulnerability in tr.php in YourFreeWorld Short Url & Url Tracker Script allows remote attackers to execut…

  • Unscored —
    CVE-2008-3755 Public exploit

    SQL injection vulnerability in view.php in YourFreeWorld Classifieds Script allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2008-3756 Public exploit

    SQL injection vulnerability in tr.php in YourFreeWorld Viral Marketing Script allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2008-3720 Public exploit

    SQL injection vulnerability in index.php in DeeEmm CMS (DMCMS) 0.7.4 allows remote attackers to execute arbitrary SQL c…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in index.php in PHPizabi before 848 Core HotFix Pack 3 allows remote attackers…

  • Unscored —
    CVE-2008-3722 Public exploit

    SQL injection vulnerability in forum/neu.asp in fipsCMS 2.1 allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —

    Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1 stores sensitive information under the web…

  • Unscored —
    CVE-2008-3719 Public exploit

    SQL injection vulnerability in directory.php in SFS Affiliate Directory allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2008-3725 Public exploit

    SQL injection vulnerability in trr.php in YourFreeWorld Ad Board Script allows remote attackers to execute arbitrary SQ…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Nordicwind Document Management System (NOAH) before 3.2.2 allows remote att…

  • Unscored —

    SQL injection vulnerability in index.php in Papoo before 3.7.2 allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2008-3721 Public exploit

    PHP remote file inclusion vulnerability in user_language.php in DeeEmm CMS (DMCMS) 0.7.4 allows remote attackers to exe…

  • Unscored —
    CVE-2008-3732 Public exploit EPSS 13%

    Integer overflow in the Open function in modules/demux/tta.c in VLC Media Player 0.8.6i allows remote attackers to caus…

  • Unscored —
    CVE-2008-3723 Public exploit

    Directory traversal vulnerability in index.php in PHPizabi 0.848b C1 HFP3 allows remote authenticated administrators to…

  • Unscored —
    CVE-2008-3734 Public exploit EPSS 14%

    Format string vulnerability in Ipswitch WS_FTP Home 2007.0.0.2 and WS_FTP Professional 2007.1.0.0 allows remote FTP ser…

  • Unscored —
    CVE-2008-3718 Public exploit

    Multiple SQL injection vulnerabilities in cyberBB 0.6 allow remote authenticated users to execute arbitrary SQL command…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch …

  • Unscored —
    CVE-2008-3733 Public exploit

    Stack-based buffer overflow in EO Video (eo-video) 1.36 allows remote attackers to cause a denial of service (applicati…

  • Unscored —

    Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1 allows remote attackers to bypass authenti…

  • Unscored —

    Directory traversal vulnerability in Web Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1 allow…

  • Unscored —

    Unspecified vulnerability in Serv-U File Server 7.0.0.1, and other versions before 7.2.0.1, allows remote authenticated…

  • Unscored —
    CVE-2008-3711 Public exploit

    SQL injection vulnerability in index.php in PHPArcadeScript (PHP Arcade Script) 4.0 allows remote attackers to execute …

  • Unscored —
    CVE-2008-3713 Public exploit

    SQL injection vulnerability in product.php in PHPBasket allows remote attackers to execute arbitrary SQL commands via t…

  • Unscored —

    Stack-based buffer overflow in the CLogger::WriteFormated function in echoware/Logger.cpp in EchoVNC Linux before 1.1.2…

  • Unscored —

    Multiple PHP remote file inclusion vulnerabilities in CyBoards PHP Lite 1.21 allow remote attackers to execute arbitrar…

  • Unscored —
    CVE-2008-3715 Public exploit

    Cross-site scripting (XSS) vulnerability in inc-core-admin-editor-previouscolorsjs.php in the FlexCMS 2.5 and earlier, …

  • Unscored —
    CVE-2008-3706 Public exploit

    SQL injection vulnerability in bannerclick.php in ZEEJOBSITE 2.0 allows remote attackers to execute arbitrary SQL comma…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in CyBoards PHP Lite 1.21 allow remote attackers to inject arbitrar…