Archive
September 2008
Vulnerabilities first published in this month (UTC), newest first.
178 results · Clear filters · Feed
-
Unscored —CVE-2008-4091 Public exploit
SQL injection vulnerability in index.php in Web Directory Script 1.5.3 allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2008-4072 Public exploit
Multiple SQL injection vulnerabilities in index.php in phsBlog 0.2 allow remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2008-4073 Public exploit
SQL injection vulnerability in index.php in Zanfi Autodealers CMS AutOnline allows remote attackers to execute arbitrar…
-
Unscored —
A certain ActiveX control in Adobe Acrobat 9, when used with Microsoft Windows Vista and Internet Explorer 7, allows re…
-
Unscored —CVE-2008-4074 Public exploit
SQL injection vulnerability in index.php in Zanfi Autodealers CMS AutOnline allows remote attackers to execute arbitrar…
-
Unscored —CVE-2008-4080 Public exploit
SQL injection vulnerability in Stash 1.0.3, when magic_quotes_gpc is disabled, allows remote attackers to execute arbit…
-
Unscored —CVE-2008-4081 Public exploit
admin/login.php in Stash 1.0.3 allows remote attackers to bypass authentication and gain administrative access by setti…
-
Unscored —CVE-2008-4075 Public exploit
Directory traversal vulnerability in index.php in D-iscussion Board 3.01 allows remote attackers to read arbitrary file…
-
Unscored —CVE-2008-3823 Public exploit
Cross-site scripting (XSS) vulnerability in MIME/MIME/Contents.php in the MIME library in Horde 3.2.x before 3.2.2 allo…
-
Unscored —CVE-2008-3824 Public exploit
Cross-site scripting (XSS) vulnerability in (1) Text_Filter/Filter/xss.php in Horde 3.1.x before 3.1.9 and 3.2.x before…
-
Unscored —
Heap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2 before 2.7.0 allows context-d…
-
Unscored —CVE-2008-4053 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in the Bluemoon PopnupBLOG module 3.20 and 3.30 for XO…
-
Unscored —CVE-2008-4048 Public exploit
Heap-based buffer overflow in a certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPP…
-
Unscored —CVE-2008-4055 Public exploit
SQL injection vulnerability in tops_top.php in Million Pixel Ad Script (Million Pixel Script) allows remote attackers t…
-
Unscored —CVE-2008-4054 Public exploit
SQL injection vulnerability in indir.php in Kolifa.net Download Script 1.2 allows remote attackers to execute arbitrary…
-
Unscored —CVE-2008-4049 Public exploit
A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remo…
-
Unscored —CVE-2008-4044 Public exploit
SQL injection vulnerability in article/readarticle.php in AJ Square aj-hyip (aka AJ HYIP Acme) allows remote attackers …
-
Unscored —CVE-2008-4041 Public exploit
The IMAP server in Softalk Mail Server (formerly WorkgroupMail) 8.5.1.431 allows remote authenticated users to cause a …
-
Unscored —CVE-2008-4056 Public exploit
Cross-site scripting (XSS) vulnerability in admin/login.php in Matterdaddy Market 1.1 allows remote attackers to inject…
-
Unscored —CVE-2008-4043 Public exploit
Multiple SQL injection vulnerabilities in AJ Square AJ HYIP Acme allow remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2008-4039 Public exploit
SQL injection vulnerability in index.php in Spice Classifieds allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2008-4046 Public exploit
SQL injection vulnerability in index.php in eliteCMS 1.0 allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2008-4050 Public exploit
A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remo…
-
Unscored —CVE-2008-4051 Public exploit
Cross-site scripting (XSS) vulnerability in surveyresults.asp in Smart Survey 1.0 allows remote attackers to inject arb…
-
Unscored —CVE-2008-2326 Public exploit
mDNSResponder in the Bonjour Namespace Provider in Apple Bonjour for Windows before 1.0.5 allows attackers to cause a d…
-
Unscored —
gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold a…
-
Unscored —CVE-2008-3963 Public exploit
MySQL 5.0 before 5.0.66, 5.1 before 5.1.26, and 6.0 before 6.0.6 does not properly handle a b'' (b single-quote single-…
-
Unscored —
Stack-based buffer overflow in the WMEncProfileManager ActiveX control in wmex.dll in Microsoft Windows Media Encoder 9…
-
Unscored —
Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista G…
-
Unscored —
The Microsoft Windows Image Acquisition Logger ActiveX control allows remote attackers to force the download of arbitra…
-
Unscored —
orgchart.exe in Microsoft Organization Chart 2.00 allows user-assisted attackers to cause a denial of service (applicat…
-
Unscored —CVE-2008-3952 Public exploit
SQL injection vulnerability in questions.php in EsFaq 2.0 allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2008-3951 Public exploit
SQL injection vulnerability in view_ann.php in Vastal I-Tech Agent Zone (aka The Real Estate Script) allows remote atta…
-
Unscored —CVE-2008-3955 Public exploit
SQL injection vulnerability in index.php in Masir Camp E-Shop Module 3.0 and earlier allows remote attackers to execute…
-
Unscored —CVE-2008-3954 Public exploit
SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange allows remote attackers to execute a…
-
Unscored —CVE-2008-3953 Public exploit
SQL injection vulnerability in keyword_search_action.php in Vastal I-Tech Shaadi Zone 1.0.9 allows remote attackers to …
-
Unscored —CVE-2008-3664 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in XRMS allow remote attackers to inject arbitrary web script or HT…
-
Unscored —CVE-2008-3531 Public exploit
Stack-based buffer overflow in sys/kern/vfs_mount.c in the kernel in FreeBSD 7.0 and 7.1, when vfs.usermount is enabled…
-
Unscored —CVE-2008-3941 Public exploit
Cross-site scripting (XSS) vulnerability in BizDirectory 2.04 and earlier allows remote attackers to inject arbitrary w…
-
Unscored —CVE-2008-3945 Public exploit
SQL injection vulnerability in index.php in Words tag 1.2 allows remote attackers to execute arbitrary SQL commands via…