Skip to content
OpenAdvisories

Archive

22 September 2008

Vulnerabilities first published on this day (UTC), newest first.

10 results · Clear filters · Feed

  • Unscored —
    CVE-2008-4167 Public exploit

    useradmin.php in Easy Photo Gallery (aka Ezphotogallery) 2.1 does not require administrative authentication, which allo…

  • Unscored —
    CVE-2008-4173 Public exploit

    SQL injection vulnerability in ProArcadeScript 1.3 allows remote attackers to execute arbitrary SQL commands via the ra…

  • Unscored —
    CVE-2008-4172 Public exploit

    SQL injection vulnerability in page.php in Cars & Vehicle (aka Cars-Vehicle Script) allows remote attackers to execute …

  • Unscored —
    CVE-2008-4169 Public exploit

    SQL injection vulnerability in detaillist.php in iScripts EasyIndex, possibly 1.0, allows remote attackers to execute a…

  • Unscored —
    CVE-2008-4166 Public exploit

    Integer overflow in the JavaScript engine in Avant Browser 11.7 Build 9 and earlier allows remote attackers to cause a …

  • Unscored —
    CVE-2008-4164 Public exploit

    cron.php in MemHT Portal 3.9.0 and earlier allows remote attackers to obtain sensitive information via a direct request…

  • Unscored —
    CVE-2008-4161 Public exploit

    SQL injection vulnerability in search_inv.php in Assetman 2.5b allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2008-4159 Public exploit

    SQL injection vulnerability in index.php in Jaw Portal and Zanfi CMS lite and allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2008-4158 Public exploit

    Multiple directory traversal vulnerabilities in index.php in Zanfi CMS lite 1.2 allow remote attackers to include and e…

  • Unscored —
    CVE-2008-4157 Public exploit

    SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 1.1 allows remote attackers to execute arbitrary SQL …