Skip to content
OpenAdvisories

Archive

15 September 2008

Vulnerabilities first published on this day (UTC), newest first.

← August 2008 2008 / September /15 October 2008 →
  1. 1 
  2. 217
  3. 328
  4. 436
  5. 522
  6. 6 
  7. 7 
  8. 8 
  9. 914
  10. 1039
  11. 1119
  12. 126
  13. 13 
  14. 14 
  15. 1523
  16. 1625
  17. 1711
  18. 1818
  19. 1926
  20. 20 
  21. 21 
  22. 2218
  23. 2317
  24. 2431
  25. 257
  26. 2619
  27. 2716
  28. 28 
  29. 2917
  30. 3041
All Critical High Medium Low Exploited only Public exploit

23 results · Feed

  • Unscored —
    CVE-2008-4085

    plaiter in Plait before 1.6 allows local users to overwrite arbitrary files via a symlink attack on (1) cut.$$, (2) hea…

    plait Debian
  • Unscored —
    CVE-2008-4093 Public exploit

    SQL injection vulnerability in memberstats.php in YourOwnBux 3.1 and 3.2 beta, when magic_quotes_gpc is disabled, allow…

  • Unscored —
    CVE-2008-4092 Public exploit

    SQL injection vulnerability in printfeature.php in myPHPNuke (MPN) before 1.8.8_8rc2 allows remote attackers to execute…

  • Unscored —
    CVE-2008-4082 Public exploit

    SQL injection vulnerability in the Tasks plugin in Brim 2.0.0, when magic_quotes_gpc is disabled, allows remote authent…

  • Unscored —
    CVE-2008-4088 Public exploit

    SQL injection vulnerability in print.php in myPHPNuke (MPN) before 1.8.8_8rc2 allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2008-4083 Public exploit

    Cross-site scripting (XSS) vulnerability in the Bookmarks plugin in Brim 2.0 allows remote authenticated users to injec…

  • Unscored —
    CVE-2008-4084 Public exploit

    SQL injection vulnerability in staticpages/easyclassifields/index.php in MyioSoft EasyClassifields 3.0 allows remote at…

  • Unscored —
    CVE-2008-4087 Public exploit

    Stack-based buffer overflow in Acoustica Beatcraft 1.02 Build 19 allows user-assisted attackers to cause a denial of se…

  • Unscored —
    CVE-2008-4089 Public exploit

    Cross-site scripting (XSS) vulnerability in print.php in myPHPNuke (MPN) before 1.8.8_8rc2 allows remote attackers to i…

  • Unscored —
    CVE-2008-4090 Public exploit

    SQL injection vulnerability in index.php in PHP Coupon Script 4.0 allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2008-4086 Public exploit

    SQL injection vulnerability in index.php in Reciprocal Links Manager 1.1 allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2008-4091 Public exploit

    SQL injection vulnerability in index.php in Web Directory Script 1.5.3 allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2008-4072 Public exploit

    Multiple SQL injection vulnerabilities in index.php in phsBlog 0.2 allow remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2008-4077

    The CGI scripts in (1) LedgerSMB (LSMB) before 1.2.15 and (2) SQL-Ledger 2.8.17 and earlier allow remote attackers to c…

    sql-ledger Debian
  • Unscored —
    CVE-2008-4073 Public exploit

    SQL injection vulnerability in index.php in Zanfi Autodealers CMS AutOnline allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2008-4079

    Cross-site scripting (XSS) vulnerability in Movable Type (MT) 4.x through 4.20, and 3.36 and earlier; Movable Type Ente…

  • Unscored —
    CVE-2008-4076

    Cross-site scripting (XSS) vulnerability in (1) Tor World Tor Board 1.3 and earlier, (2) Topics BBS 1.11 and earlier, (…

  • Unscored —
    CVE-2008-4071 Public exploit EPSS 19%

    A certain ActiveX control in Adobe Acrobat 9, when used with Microsoft Windows Vista and Internet Explorer 7, allows re…

  • Unscored —
    CVE-2008-4078

    SQL injection vulnerability in the AR/AP transaction report in (1) LedgerSMB (LSMB) before 1.2.15 and (2) SQL-Ledger 2.…

    sql-ledger Debian
  • Unscored —
    CVE-2008-4074 Public exploit

    SQL injection vulnerability in index.php in Zanfi Autodealers CMS AutOnline allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2008-4080 Public exploit

    SQL injection vulnerability in Stash 1.0.3, when magic_quotes_gpc is disabled, allows remote attackers to execute arbit…

  • Unscored —
    CVE-2008-4081 Public exploit

    admin/login.php in Stash 1.0.3 allows remote attackers to bypass authentication and gain administrative access by setti…

  • Unscored —
    CVE-2008-4075 Public exploit

    Directory traversal vulnerability in index.php in D-iscussion Board 3.01 allows remote attackers to read arbitrary file…