19 September 2008

26 results · Feed

• Unscored —
  CVE-2008-4156 Public exploit

  SQL injection vulnerability in print.php in CustomCms (CCMS) Gaming Portal 4.0, when magic_quotes_gpc is disabled, allo…

  Sep 19, 2008
• Unscored —
  CVE-2008-4154 Public exploit

  SQL injection vulnerability in living-e webEdition CMS allows remote attackers to execute arbitrary SQL commands via th…

  Sep 19, 2008
• Unscored —
  CVE-2008-4155 Public exploit

  Multiple directory traversal vulnerabilities in EasySite 2.3 allow remote attackers to read arbitrary files or list dir…

  Sep 19, 2008
• Unscored —
  CVE-2008-4149

  Cross-site scripting (XSS) vulnerability in the Greg Holsclaw Link to Us module 5.x before 5.x-1.1 for Drupal allows re…

  Sep 19, 2008
• Unscored —
  CVE-2008-4148

  SQL injection vulnerability in the Mailhandler module 5.x before 5.x-1.4 and 6.x before 6.x-1.4, a module for Drupal, a…

  Web / CMS
  Sep 19, 2008
• Unscored —
  CVE-2008-4150 Public exploit

  SQL injection vulnerability in picture_category.php in Diesel Joke Site allows remote attackers to execute arbitrary SQ…

  Sep 19, 2008
• Unscored —
  CVE-2008-4136 Public exploit

  Michael Roth Software Personal FTP Server (PFT) 6.0f allows remote attackers to cause a denial of service (service cras…

  Sep 19, 2008
• Unscored —
  CVE-2008-4138 Public exploit EPSS 10%

  PHP remote file inclusion vulnerability in skin_shop/standard/3_plugin_twindow/twindow_notice.php in TECHNOTE 7 allows …

  Sep 19, 2008
• Unscored —
  CVE-2008-4153

  The Talk module 5.x before 5.x-1.3 and 6.x before 6.x-1.5, a module for Drupal, does not perform access checks for a no…

  Web / CMS
  Sep 19, 2008
• Unscored —
  CVE-2008-4144 Public exploit

  SQL injection vulnerability in index.php in ACG-ScriptShop E-Gold Script Shop allows remote attackers to execute arbitr…

  Sep 19, 2008
• Unscored —
  CVE-2008-4139 Public exploit

  Cross-site scripting (XSS) vulnerability in admin.php in OpenSolution Quick.Cms.Lite 2.1 allows remote attackers to inj…

  Sep 19, 2008
• Unscored —
  CVE-2008-4141 Public exploit

  Multiple PHP remote file inclusion vulnerabilities in x10Media x10 Automatic MP3 Script 1.5.5 allow remote attackers to…

  Sep 19, 2008
• Unscored —
  CVE-2008-4142 Public exploit

  SQL injection vulnerability in article.php in E-Php CMS allows remote attackers to execute arbitrary SQL commands via t…

  Sep 19, 2008
• Unscored —
  CVE-2008-4137 Public exploit

  PHP remote file inclusion vulnerability in footer.php in PHP-Crawler 0.8 allows remote attackers to execute arbitrary P…

  Sep 19, 2008
• Unscored —
  CVE-2008-4146 Public exploit

  Addalink 1.0 beta 4 and earlier allows remote attackers to (1) approve web-site additions via a modified approved field…

  Sep 19, 2008
• Unscored —
  CVE-2008-4147

  Cross-site scripting (XSS) vulnerability in the Mailsave module 5.x before 5.x-3.3 and 6.x before 6.x-1.3, a module for…

  Web / CMS
  Sep 19, 2008
• Unscored —
  CVE-2008-4140 Public exploit

  Cross-site scripting (XSS) vulnerability in admin.php in Quick.Cart 3.1 allows remote attackers to inject arbitrary web…

  Sep 19, 2008
• Unscored —
  CVE-2008-4152

  Cross-site scripting (XSS) vulnerability in the Talk module 5.x before 5.x-1.3 and 6.x before 6.x-1.5, a module for Dru…

  Web / CMS
  Sep 19, 2008
• Unscored —
  CVE-2008-4151 Public exploit

  Directory traversal vulnerability in collect.php in CYASK 3.x allows remote attackers to read arbitrary files via a .. …

  Sep 19, 2008
• Unscored —
  CVE-2008-4145 Public exploit

  SQL injection vulnerability in user_read_links.php in Addalink 1.0 beta 4 and earlier, when magic_quotes_gpc is disable…

  Sep 19, 2008
• Unscored —
  CVE-2008-4143

  SQL injection vulnerability in category_search.php in RazorCommerce Shopping Cart allows remote attackers to execute ar…

  Sep 19, 2008
• Unscored —
  CVE-2008-4134 Public exploit

  PHP remote file inclusion vulnerability in manager/static/view.php in phpRealty 0.03 and earlier, and possibly other ve…

  Sep 19, 2008
• Unscored —
  CVE-2008-4135 Public exploit

  Symbian OS S60 3rd edition on the Nokia E90 Communicator 07.40.1.2 Ra-6 and Nseries N82 allows remote attackers to caus…

  Sep 19, 2008
• Unscored —
  CVE-2008-4133 Public exploit

  The web proxy service on the D-Link DIR-100 with firmware 1.12 and earlier does not properly filter web requests with l…

  Sep 19, 2008
• Unscored —
  CVE-2008-4132

  Stack-based buffer overflow in the VSFlexGrid.VSFlexGridL ActiveX control in ComponentOne VSFlexGrid 7.0.1.151 and 8.0.…

  Sep 19, 2008
• Unscored —
  CVE-2008-4131 Public exploit

  Multiple unspecified vulnerabilities in Sun Solaris 8 through 10 allow local users to gain privileges via vectors relat…

  Sep 19, 2008