Archive
September 2008
Vulnerabilities first published in this month (UTC), newest first.
178 results · Clear filters · Feed
-
Unscored —CVE-2008-4157 Public exploit
SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 1.1 allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2008-4156 Public exploit
SQL injection vulnerability in print.php in CustomCms (CCMS) Gaming Portal 4.0, when magic_quotes_gpc is disabled, allo…
-
Unscored —CVE-2008-4154 Public exploit
SQL injection vulnerability in living-e webEdition CMS allows remote attackers to execute arbitrary SQL commands via th…
-
Unscored —CVE-2008-4155 Public exploit
Multiple directory traversal vulnerabilities in EasySite 2.3 allow remote attackers to read arbitrary files or list dir…
-
Unscored —CVE-2008-4150 Public exploit
SQL injection vulnerability in picture_category.php in Diesel Joke Site allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2008-4136 Public exploit
Michael Roth Software Personal FTP Server (PFT) 6.0f allows remote attackers to cause a denial of service (service cras…
-
Unscored —
PHP remote file inclusion vulnerability in skin_shop/standard/3_plugin_twindow/twindow_notice.php in TECHNOTE 7 allows …
-
Unscored —CVE-2008-4144 Public exploit
SQL injection vulnerability in index.php in ACG-ScriptShop E-Gold Script Shop allows remote attackers to execute arbitr…
-
Unscored —CVE-2008-4139 Public exploit
Cross-site scripting (XSS) vulnerability in admin.php in OpenSolution Quick.Cms.Lite 2.1 allows remote attackers to inj…
-
Unscored —CVE-2008-4141 Public exploit
Multiple PHP remote file inclusion vulnerabilities in x10Media x10 Automatic MP3 Script 1.5.5 allow remote attackers to…
-
Unscored —CVE-2008-4142 Public exploit
SQL injection vulnerability in article.php in E-Php CMS allows remote attackers to execute arbitrary SQL commands via t…
-
Unscored —CVE-2008-4137 Public exploit
PHP remote file inclusion vulnerability in footer.php in PHP-Crawler 0.8 allows remote attackers to execute arbitrary P…
-
Unscored —CVE-2008-4146 Public exploit
Addalink 1.0 beta 4 and earlier allows remote attackers to (1) approve web-site additions via a modified approved field…
-
Unscored —CVE-2008-4140 Public exploit
Cross-site scripting (XSS) vulnerability in admin.php in Quick.Cart 3.1 allows remote attackers to inject arbitrary web…
-
Unscored —CVE-2008-4151 Public exploit
Directory traversal vulnerability in collect.php in CYASK 3.x allows remote attackers to read arbitrary files via a .. …
-
Unscored —CVE-2008-4145 Public exploit
SQL injection vulnerability in user_read_links.php in Addalink 1.0 beta 4 and earlier, when magic_quotes_gpc is disable…
-
Unscored —CVE-2008-4134 Public exploit
PHP remote file inclusion vulnerability in manager/static/view.php in phpRealty 0.03 and earlier, and possibly other ve…
-
Unscored —CVE-2008-4135 Public exploit
Symbian OS S60 3rd edition on the Nokia E90 Communicator 07.40.1.2 Ra-6 and Nseries N82 allows remote attackers to caus…
-
Unscored —CVE-2008-4133 Public exploit
The web proxy service on the D-Link DIR-100 with firmware 1.12 and earlier does not properly filter web requests with l…
-
Unscored —CVE-2008-4131 Public exploit
Multiple unspecified vulnerabilities in Sun Solaris 8 through 10 allow local users to gain privileges via vectors relat…
-
High 8.1
Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on th…
KEV Jul 13, 2026 -
Unscored —CVE-2008-4101 Public exploit
Vim 3.0 through 7.x before 7.2.010 does not properly escape characters, which allows user-assisted attackers to (1) exe…
-
Unscored —
libraries/database_interface.lib.php in phpMyAdmin before 2.11.9.1 allows remote authenticated users to execute arbitra…
-
Unscored —
A certain Debian patch for OpenSSH before 4.3p2-9etch3 on etch; before 4.6p1-1 on sid and lenny; and on other distribut…
-
Unscored —
Buffer overflow in Apple QuickTime 7.5.5 and iTunes 8.0 allows remote attackers to cause a denial of service (browser c…
-
Unscored —CVE-2008-3195 Public exploit
Directory traversal vulnerability in bin/configure in TWiki before 4.2.3, when a certain step in the installation guide…
-
Unscored —CVE-2008-4115 Public exploit
TalkBack 2.3.6 allows remote attackers to obtain configuration information via a direct request to install/info.php, wh…
-
Unscored —
srv.sys in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP…
-
Unscored —CVE-2008-4113 Public exploit
The sctp_getsockopt_hmac_ident function in net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) impleme…
-
Unscored —CVE-2008-3950 Public exploit
Off-by-one error in the _web_drawInRect:withFont:ellipsis:alignment:measureOnly function in WebKit in Safari in Apple i…
-
Unscored —CVE-2008-4093 Public exploit
SQL injection vulnerability in memberstats.php in YourOwnBux 3.1 and 3.2 beta, when magic_quotes_gpc is disabled, allow…
-
Unscored —CVE-2008-4092 Public exploit
SQL injection vulnerability in printfeature.php in myPHPNuke (MPN) before 1.8.8_8rc2 allows remote attackers to execute…
-
Unscored —CVE-2008-4082 Public exploit
SQL injection vulnerability in the Tasks plugin in Brim 2.0.0, when magic_quotes_gpc is disabled, allows remote authent…
-
Unscored —CVE-2008-4088 Public exploit
SQL injection vulnerability in print.php in myPHPNuke (MPN) before 1.8.8_8rc2 allows remote attackers to execute arbitr…
-
Unscored —CVE-2008-4083 Public exploit
Cross-site scripting (XSS) vulnerability in the Bookmarks plugin in Brim 2.0 allows remote authenticated users to injec…
-
Unscored —CVE-2008-4084 Public exploit
SQL injection vulnerability in staticpages/easyclassifields/index.php in MyioSoft EasyClassifields 3.0 allows remote at…
-
Unscored —CVE-2008-4087 Public exploit
Stack-based buffer overflow in Acoustica Beatcraft 1.02 Build 19 allows user-assisted attackers to cause a denial of se…
-
Unscored —CVE-2008-4089 Public exploit
Cross-site scripting (XSS) vulnerability in print.php in myPHPNuke (MPN) before 1.8.8_8rc2 allows remote attackers to i…
-
Unscored —CVE-2008-4090 Public exploit
SQL injection vulnerability in index.php in PHP Coupon Script 4.0 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2008-4086 Public exploit
SQL injection vulnerability in index.php in Reciprocal Links Manager 1.1 allows remote attackers to execute arbitrary S…