Archive
September 2008
Vulnerabilities first published in this month (UTC), newest first.
178 results · Clear filters · Feed
-
Unscored —CVE-2008-4210 Public exploit
fs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when there is a write to a f…
-
Unscored —CVE-2008-4120 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in FlatPress 0.804 allow remote attackers to inject arbitrary web s…
-
Unscored —CVE-2008-4302 Public exploit
fs/splice.c in the splice subsystem in the Linux kernel before 2.6.22.2 does not properly handle a failure of the add_t…
-
Unscored —
Microsoft Windows Mobile 6.0 on HTC Wiza 200 and HTC MDA 8125 devices does not properly handle the first attempt to est…
-
Unscored —CVE-2008-4241 Public exploit
SQL injection vulnerability in CJ Ultra Plus 1.0.4 and earlier allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2008-4245 Public exploit
The Admin Control Panel in Rianxosencabos CMS 0.9 does not require administrator privileges, which allows remote authen…
-
Unscored —CVE-2008-4244 Public exploit
Rianxosencabos CMS 0.9 allows remote attackers to bypass authentication and gain administrative access by setting the u…
-
Unscored —CVE-2008-4247 Public exploit
ftpd in OpenBSD 4.3, FreeBSD 7.0, NetBSD 4.0, Solaris, and possibly other operating systems interprets long commands fr…
-
Unscored —CVE-2008-4243 Public exploit
Directory traversal vulnerability in ImageServer (aka UTImageServer) in WebAdmin before 1.7 for Epic Games Unreal Tourn…
-
Unscored —
Stack-based buffer overflow in the URL parsing implementation in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1…
-
Unscored —CVE-2008-4205 Public exploit
SQL injection vulnerability in search.php Attachmax Dolphin 2.1.0 and earlier allows remote attackers to execute arbitr…
-
Unscored —CVE-2008-4207 Public exploit
Attachmax Dolphin 2.1.0 and earlier does not properly protect info.php in the main folder, which allows remote attacker…
-
Unscored —CVE-2008-4202 Public exploit
SQL injection vulnerability in index.php in Gonafish LinksCaffePRO 4.5 allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2008-4203 Public exploit
SQL injection vulnerability in cn_users.php in CzarNews 1.20 and earlier allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2008-4204 Public exploit
SQL injection vulnerability in city.asp in SoftAcid Hotel Reservation System (HRS) allows remote attackers to execute a…
-
Unscored —CVE-2008-4206 Public exploit
PHP remote file inclusion vulnerability in config.php in Attachmax Dolphin 2.1.0 and earlier, when register_globals is …
-
Unscored —CVE-2008-3098 Public exploit
Cross-site scripting (XSS) vulnerability in admin/usercheck.php in fuzzylime (cms) before 3.03 allows remote attackers …
-
Unscored —
Stack-based buffer overflow in SecurityGateway.dll in Alt-N Technologies SecurityGateway 1.0.1 allows remote attackers …
-
Unscored —CVE-2008-4190 Public exploit
The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbit…
-
Unscored —CVE-2008-4194 Public exploit
The p_exec_query function in src/dns_query.c in pdnsd before 1.2.7-par allows remote attackers to cause a denial of ser…
-
Unscored —CVE-2008-4187 Public exploit
Directory traversal vulnerability in index.php in ProActive CMS allows remote attackers to read arbitrary files via a .…
-
Unscored —CVE-2008-4185 Public exploit
SQL injection vulnerability in index.php in webCMS Portal Edition allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2008-4186 Public exploit
SQL injection vulnerability in index.php in webCMS Portal Edition allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2008-4179 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in NooMS 1.1 allow remote attackers to inject arbitrary web script …
-
Unscored —CVE-2008-4183 Public exploit
IntegraMOD 1.4.x stores sensitive information under the web root with insufficient access control, which allows remote …
-
Unscored —CVE-2008-4176 Public exploit
SQL injection vulnerability in izle.asp in FoT Video scripti 1.1 beta allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2008-4178 Public exploit
SQL injection vulnerability in tr.php in DownlineGoldmine Special Category Addon, Downline Builder Pro, New Addon, and …
-
Unscored —CVE-2008-4174 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Dynamic MP3 Lister 2.0.1 allow remote attackers to …
-
Unscored —CVE-2008-4181 Public exploit
Directory traversal vulnerability in includes/xml.php in the Netenberg Fantastico De Luxe module before 2.10.4 r19 for …
-
Unscored —CVE-2008-4177 Public exploit
SQL injection vulnerability in search.php in Pre Real Estate Listings allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2008-4175 Public exploit
Multiple SQL injection vulnerabilities in Link Bid Script 1.5 allow remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2008-4167 Public exploit
useradmin.php in Easy Photo Gallery (aka Ezphotogallery) 2.1 does not require administrative authentication, which allo…
-
Unscored —CVE-2008-4173 Public exploit
SQL injection vulnerability in ProArcadeScript 1.3 allows remote attackers to execute arbitrary SQL commands via the ra…
-
Unscored —CVE-2008-4172 Public exploit
SQL injection vulnerability in page.php in Cars & Vehicle (aka Cars-Vehicle Script) allows remote attackers to execute …
-
Unscored —CVE-2008-4169 Public exploit
SQL injection vulnerability in detaillist.php in iScripts EasyIndex, possibly 1.0, allows remote attackers to execute a…
-
Unscored —CVE-2008-4166 Public exploit
Integer overflow in the JavaScript engine in Avant Browser 11.7 Build 9 and earlier allows remote attackers to cause a …
-
Unscored —CVE-2008-4164 Public exploit
cron.php in MemHT Portal 3.9.0 and earlier allows remote attackers to obtain sensitive information via a direct request…
-
Unscored —CVE-2008-4161 Public exploit
SQL injection vulnerability in search_inv.php in Assetman 2.5b allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2008-4159 Public exploit
SQL injection vulnerability in index.php in Jaw Portal and Zanfi CMS lite and allows remote attackers to execute arbitr…
-
Unscored —CVE-2008-4158 Public exploit
Multiple directory traversal vulnerabilities in index.php in Zanfi CMS lite 1.2 allow remote attackers to include and e…