Skip to content
OpenAdvisories

Archive

4 September 2008

Vulnerabilities first published on this day (UTC), newest first.

8 results · Clear filters · Feed

  • Unscored —
    CVE-2008-3922 Public exploit EPSS 53%

    awstatstotals.php in AWStats Totals 1.0 through 1.14 allows remote attackers to execute arbitrary code via PHP sequence…

  • Unscored —
    CVE-2008-3926 Public exploit

    Multiple directory traversal vulnerabilities in Content Management Made Easy (CMME) 1.12 allow remote attackers to (1) …

  • Unscored —
    CVE-2008-3924 Public exploit

    The "Make a backup" functionality in Content Management Made Easy (CMME) 1.12 stores sensitive information under the we…

  • Unscored —
    CVE-2008-3925 Public exploit

    Cross-site request forgery (CSRF) vulnerability in admin.php in Content Management Made Easy (CMME) 1.12 allows remote …

  • Unscored —
    CVE-2008-3917 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2008-3923 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in statistics.php in Content Management Made Easy (CMME) 1.12 allow…

  • Unscored —
    CVE-2008-3918 Public exploit

    SQL injection vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2008-3906 Public exploit

    CRLF injection vulnerability in Sys.Web in Mono 2.0 and earlier allows remote attackers to inject arbitrary HTTP header…