Archive
September 2008
Vulnerabilities first published in this month (UTC), newest first.
178 results · Clear filters · Feed
-
Unscored —CVE-2008-4366 Public exploit
Unrestricted file upload vulnerability in the image upload component in Camera Life 2.6.2b4 allows remote authenticated…
-
Unscored —CVE-2008-4361 Public exploit
Directory traversal vulnerability in PowerPortal 2.0.13 allows remote attackers to list and possibly read arbitrary fil…
-
Unscored —CVE-2008-4362 Public exploit
The Virtual Token driver (vdlptokn.sys) 1.0.2.43 in DESlock+ 3.2.7 allows local users to cause a denial of service (sys…
-
Unscored —CVE-2008-4364 Public exploit
SQL injection vulnerability in default.aspx in ParsaGostar ParsaWeb CMS allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2008-4363 Public exploit
DLMFENC.sys 1.0.0.28 in DESlock+ 3.2.7 allows local users to cause a denial of service (system crash) or potentially ex…
-
Unscored —CVE-2008-4356 Public exploit
Multiple SQL injection vulnerabilities in Kasseler CMS 1.1.0 and 1.2.0 allow remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2008-4349 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in news.php in s0nic Paranews 3.4 allow remote attackers to inject …
-
Unscored —CVE-2008-4350 Public exploit
SQL injection vulnerability in main.php in vbLOGIX Tutorial Script 1.0 and earlier allows remote attackers to execute a…
-
Unscored —CVE-2008-4355 Public exploit
SQL injection vulnerability in showprofil.php in Powie PSCRIPT Forum (aka PHP Forum or pForum) 1.30 and earlier allows …
-
Unscored —CVE-2008-4354 Public exploit
SQL injection vulnerability in the products module in NetArt Media iBoutique 4.0 allows remote attackers to execute arb…
-
Unscored —CVE-2008-4346 Public exploit
Directory traversal vulnerability in TalkBack 2.3.6 and 2.3.6.4 allows remote attackers to include and execute arbitrar…
-
Unscored —CVE-2008-4347 Public exploit
SQL injection vulnerability in newskom.php in Powie pNews 2.03 allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2008-4357 Public exploit
SQL injection vulnerability in linkto.php in Powie pLink 2.07 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2008-4352 Public exploit
SQL injection vulnerability in inc/pages/viewprofile.php in phpSmartCom 0.2 allows remote attackers to execute arbitrar…
-
Unscored —CVE-2008-4351 Public exploit
Directory traversal vulnerability in index.php in phpSmartCom 0.2 allows remote attackers to include and execute arbitr…
-
Unscored —CVE-2008-4345 Public exploit
SQL injection vulnerability in download.php in WebPortal CMS 0.7.4 and earlier allows remote attackers to execute arbit…
-
Unscored —CVE-2008-4353 Public exploit
SQL injection vulnerability in link.php in Linkarity allows remote attackers to execute arbitrary SQL commands via the …
-
Unscored —CVE-2008-4330 Public exploit
Directory traversal vulnerability in index.php in LanSuite 3.3.2 allows remote attackers to include and execute arbitra…
-
Unscored —CVE-2008-4333 Public exploit
Cross-site scripting (XSS) vulnerability in PHP infoBoard V.7 Plus allows remote attackers to inject arbitrary web scri…
-
Unscored —CVE-2008-4341 Public exploit
add.php in MyBlog 0.9.8 and earlier allows remote attackers to bypass authentication and gain administrative access by …
-
Unscored —CVE-2008-4335 Public exploit
SQL injection vulnerability in album.php in Atomic Photo Album (APA) 1.1.0pre4 allows remote attackers to execute arbit…
-
Unscored —CVE-2008-4336 Public exploit
Cross-site scripting (XSS) vulnerability in album.php in Atomic Photo Album (APA) 1.1.0pre4 allows remote attackers to …
-
Unscored —CVE-2008-4334 Public exploit
PHP infoBoard V.7 Plus allows remote attackers to bypass authentication and gain administrative access by setting the i…
-
Unscored —CVE-2008-4343 Public exploit
The Chilkat XML ChilkatUtil.CkData.1 ActiveX control (ChilkatUtil.dll) 3.0.3.0 and earlier allows remote attackers to c…
-
Unscored —CVE-2008-4344 Public exploit
SQL injection vulnerability in cat.php in 6rbScript allows remote attackers to execute arbitrary SQL commands via the C…
-
Unscored —CVE-2008-4329 Public exploit
PHP remote file inclusion vulnerability in cms/system/openengine.php in openEngine 2.0 beta4 and earlier allows remote …
-
Unscored —CVE-2008-4331 Public exploit
Directory traversal vulnerability in library/pagefunctions.inc.php in phpOCS 0.1 beta3 and earlier allows remote attack…
-
Unscored —CVE-2008-4340 Public exploit
Google Chrome 0.2.149.29 and 0.2.149.30 allows remote attackers to cause a denial of service (memory consumption) via a…
-
Unscored —CVE-2008-4332 Public exploit
SQL injection vulnerability in the showjavatopic function in func.php in PHP infoBoard V.7 Plus allows remote attackers…
-
Unscored —CVE-2008-4328 Public exploit
SQL injection vulnerability in site_search.php in EasyRealtorPRO 2008 allows remote attackers to execute arbitrary SQL …
-
Unscored —
NuMedia Soft NMS DVD Burning SDK Activex NMSDVDX.DVDEngineX.1 ActiveX control (NMSDVDX.dll) 1.013C and earlier, as used…
-
Unscored —
gdiplus.dll in GDI+ in Microsoft Windows XP SP3 does not properly handle crafted .ico files, which allows remote attack…
-
Unscored —CVE-2008-4323 Public exploit
Windows Explorer in Microsoft Windows XP SP3 allows user-assisted attackers to cause a denial of service (application c…
-
Unscored —CVE-2008-4324 Public exploit
The user interface event dispatcher in Mozilla Firefox 3.0.3 on Windows XP SP2 allows remote attackers to cause a denia…
-
Unscored —CVE-2008-4321 Public exploit
Buffer overflow in FlashGet (formerly JetCar) FTP 1.9 allows remote FTP servers to execute arbitrary code via a long re…
-
Unscored —
Stack-based buffer overflow in RealFlex Technologies Ltd. RealWin Server 2.0, as distributed by DATAC, allows remote at…
-
Unscored —
Observer 0.3.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the quer…
-
Unscored —CVE-2008-4320 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in OpenNMS before 1.5.94 allow remote attackers to inject arbitrary…
-
Unscored —CVE-2008-4319 Public exploit
fileadmin.php in Libra File Manager (aka Libra PHP File Manager) 1.18 and earlier allows remote attackers to bypass aut…
-
Unscored —CVE-2008-4192 Public exploit
The pserver_shutdown function in fence_egenera in cman 2.20080629 and 2.20080801 allows local users to overwrite arbitr…