Skip to content
OpenAdvisories

Archive

23 September 2008

Vulnerabilities first published on this day (UTC), newest first.

← August 2008 2008 / September /23 October 2008 →
  1. 1 
  2. 217
  3. 328
  4. 436
  5. 522
  6. 6 
  7. 7 
  8. 8 
  9. 914
  10. 1039
  11. 1119
  12. 126
  13. 13 
  14. 14 
  15. 1523
  16. 1625
  17. 1711
  18. 1818
  19. 1926
  20. 20 
  21. 21 
  22. 2218
  23. 2317
  24. 2431
  25. 257
  26. 2619
  27. 2716
  28. 28 
  29. 2917
  30. 3041
All Critical High Medium Low Exploited only Public exploit

17 results · Feed

  • Unscored —
    CVE-2008-4188

    Unspecified vulnerability in the TYPO3 Secure Directory (kw_secdir) extension before 1.0.2 allows remote attackers to e…

  • Unscored —
    CVE-2008-4187 Public exploit

    Directory traversal vulnerability in index.php in ProActive CMS allows remote attackers to read arbitrary files via a .…

  • Unscored —
    CVE-2008-4182

    Cross-site scripting (XSS) vulnerability in imp/test.php in Horde Turba Contact Manager H3 2.2.1 and other versions bef…

  • Unscored —
    CVE-2008-4185 Public exploit

    SQL injection vulnerability in index.php in webCMS Portal Edition allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2008-4186 Public exploit

    SQL injection vulnerability in index.php in webCMS Portal Edition allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2008-4179 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in NooMS 1.1 allow remote attackers to inject arbitrary web script …

  • Unscored —
    CVE-2008-4180

    Unspecified vulnerability in db.php in NooMS 1.1 allows remote attackers to conduct brute force attacks against passwor…

  • Unscored —
    CVE-2008-4183 Public exploit

    IntegraMOD 1.4.x stores sensitive information under the web root with insufficient access control, which allows remote …

  • Unscored —
    CVE-2008-4184

    Cross-site scripting (XSS) vulnerability in index.php in webCMS Portal Edition allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2008-4176 Public exploit

    SQL injection vulnerability in izle.asp in FoT Video scripti 1.1 beta allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2008-4178 Public exploit

    SQL injection vulnerability in tr.php in DownlineGoldmine Special Category Addon, Downline Builder Pro, New Addon, and …

  • Unscored —
    CVE-2008-4174 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in Dynamic MP3 Lister 2.0.1 allow remote attackers to …

  • Unscored —
    CVE-2008-4181 Public exploit

    Directory traversal vulnerability in includes/xml.php in the Netenberg Fantastico De Luxe module before 2.10.4 r19 for …

  • Unscored —
    CVE-2008-4177 Public exploit

    SQL injection vulnerability in search.php in Pre Real Estate Listings allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2008-4175 Public exploit

    Multiple SQL injection vulnerabilities in Link Bid Script 1.5 allow remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2008-3661

    Drupal, probably 5.10 and 6.4, does not set the secure flag for the session cookie in an https session, which can cause…

  • Unscored —
    CVE-2008-3519

    The default configuration of the JBossAs component in Red Hat JBoss Enterprise Application Platform (aka JBossEAP or EA…