Archive
September 2008
Vulnerabilities first published in this month (UTC), newest first.
450 results · Feed
-
Unscored —CVE-2008-4203 Public exploit
SQL injection vulnerability in cn_users.php in CzarNews 1.20 and earlier allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2008-4204 Public exploit
SQL injection vulnerability in city.asp in SoftAcid Hotel Reservation System (HRS) allows remote attackers to execute a…
-
Unscored —CVE-2008-4206 Public exploit
PHP remote file inclusion vulnerability in config.php in Attachmax Dolphin 2.1.0 and earlier, when register_globals is …
-
Unscored —CVE-2008-3098 Public exploit
Cross-site scripting (XSS) vulnerability in admin/usercheck.php in fuzzylime (cms) before 3.03 allows remote attackers …
-
Unscored —
Squirrelmail 1.4.15 does not set the secure flag for the session cookie in an https session, which can cause the cookie…
-
Unscored —
extract-table.pl in Emacspeak 26 and 28 allows local users to overwrite arbitrary files via a symlink attack on the ext…
-
Unscored —
Stack-based buffer overflow in SecurityGateway.dll in Alt-N Technologies SecurityGateway 1.0.1 allows remote attackers …
-
Unscored —CVE-2008-4190 Public exploit
The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbit…
-
Unscored —CVE-2008-4194 Public exploit
The p_exec_query function in src/dns_query.c in pdnsd before 1.2.7-par allows remote attackers to cause a denial of ser…
-
Unscored —
Heap-based buffer overflow in the decodeMP4file function (frontend/main.c) in FAAD2 2.6.1 and earlier allows remote att…
-
Unscored —
Mantis 1.1.x through 1.1.2 and 1.2.x through 1.2.0a2 does not set the secure flag for the session cookie in an https se…
-
Unscored —
Unspecified vulnerability in the TYPO3 Secure Directory (kw_secdir) extension before 1.0.2 allows remote attackers to e…
-
Unscored —CVE-2008-4187 Public exploit
Directory traversal vulnerability in index.php in ProActive CMS allows remote attackers to read arbitrary files via a .…
-
Unscored —
Cross-site scripting (XSS) vulnerability in imp/test.php in Horde Turba Contact Manager H3 2.2.1 and other versions bef…
-
Unscored —CVE-2008-4185 Public exploit
SQL injection vulnerability in index.php in webCMS Portal Edition allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2008-4186 Public exploit
SQL injection vulnerability in index.php in webCMS Portal Edition allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2008-4179 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in NooMS 1.1 allow remote attackers to inject arbitrary web script …
-
Unscored —
Unspecified vulnerability in db.php in NooMS 1.1 allows remote attackers to conduct brute force attacks against passwor…
-
Unscored —CVE-2008-4183 Public exploit
IntegraMOD 1.4.x stores sensitive information under the web root with insufficient access control, which allows remote …
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in webCMS Portal Edition allows remote attackers to inject arbitr…
-
Unscored —CVE-2008-4176 Public exploit
SQL injection vulnerability in izle.asp in FoT Video scripti 1.1 beta allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2008-4178 Public exploit
SQL injection vulnerability in tr.php in DownlineGoldmine Special Category Addon, Downline Builder Pro, New Addon, and …
-
Unscored —CVE-2008-4174 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Dynamic MP3 Lister 2.0.1 allow remote attackers to …
-
Unscored —CVE-2008-4181 Public exploit
Directory traversal vulnerability in includes/xml.php in the Netenberg Fantastico De Luxe module before 2.10.4 r19 for …
-
Unscored —CVE-2008-4177 Public exploit
SQL injection vulnerability in search.php in Pre Real Estate Listings allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2008-4175 Public exploit
Multiple SQL injection vulnerabilities in Link Bid Script 1.5 allow remote attackers to execute arbitrary SQL commands …
-
Unscored —
Drupal, probably 5.10 and 6.4, does not set the secure flag for the session cookie in an https session, which can cause…
-
Unscored —
The default configuration of the JBossAs component in Red Hat JBoss Enterprise Application Platform (aka JBossEAP or EA…
-
Unscored —CVE-2008-4167 Public exploit
useradmin.php in Easy Photo Gallery (aka Ezphotogallery) 2.1 does not require administrative authentication, which allo…
-
Unscored —CVE-2008-4173 Public exploit
SQL injection vulnerability in ProArcadeScript 1.3 allows remote attackers to execute arbitrary SQL commands via the ra…
-
Unscored —
Cross-site scripting (XSS) vulnerability in verify_login.jsp in Pro2col Stingray FTS allows remote attackers to inject …
-
Unscored —
SQL injection vulnerability in xmlout.php in Invision Power Board (IP.Board or IPB) 2.2.x and 2.3.x allows remote attac…
-
Unscored —
create_account.php in osCommerce 2.2 RC 2a allows remote attackers to obtain sensitive information via an invalid dob p…
-
Unscored —CVE-2008-4172 Public exploit
SQL injection vulnerability in page.php in Cars & Vehicle (aka Cars-Vehicle Script) allows remote attackers to execute …
-
Unscored —
admin/user/create_user.php in Kolab Groupware Server 1.0.0 places a user password in an HTTP GET request, which allows …
-
Unscored —CVE-2008-4169 Public exploit
SQL injection vulnerability in detaillist.php in iScripts EasyIndex, possibly 1.0, allows remote attackers to execute a…
-
Unscored —CVE-2008-4166 Public exploit
Integer overflow in the JavaScript engine in Avant Browser 11.7 Build 9 and earlier allows remote attackers to cause a …
-
Unscored —
Unspecified vulnerability in the UFS module in Sun Solaris 8 through 10 and OpenSolaris allows local users to cause a d…
-
Unscored —
Unspecified vulnerability in ISC BIND 9.3.5-P2-W1, 9.4.2-P2-W1, and 9.5.0-P2-W1 on Windows allows remote attackers to c…
-
Unscored —CVE-2008-4164 Public exploit
cron.php in MemHT Portal 3.9.0 and earlier allows remote attackers to obtain sensitive information via a direct request…