Archive
8 October 2008
Vulnerabilities first published on this day (UTC), newest first.
27 results · Feed
-
Unscored —CVE-2008-4502 Public exploit
Multiple PHP remote file inclusion vulnerabilities in DataFeedFile (DFF) PHP Framework API allow remote attackers to ex…
-
Unscored —CVE-2008-4494 Public exploit
SQL injection vulnerability in completed-advance.php in TorrentTrader Classic 1.08 and 1.04 and earlier allows remote a…
-
Unscored —CVE-2008-4495 Public exploit
SQL injection vulnerability in view_cat.php in PHP Auto Dealer 2.7 allows remote attackers to execute arbitrary SQL com…
-
Unscored —
Directory traversal vulnerability in the FTP server in Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote aut…
-
Unscored —CVE-2008-4499 Public exploit
Multiple directory traversal vulnerabilities in PHP Web Explorer 0.99b and earlier allow remote attackers to include an…
-
Unscored —CVE-2008-4498 Public exploit
SQL injection vulnerability in searchresults.php in PHP Autos 2.9.1 allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2008-4496 Public exploit
SQL injection vulnerability in view_cat.php in PHP Realtor 1.5 allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2008-4497 Public exploit
SQL injection vulnerability in event_detail.php in Built2Go Real Estate Listings 1.5 allows remote attackers to execute…
-
Unscored —
Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote authenticated users to cause a denial of service (CPU cons…
-
Unscored —
Microsoft PicturePusher ActiveX control (PipPPush.DLL 7.00.0709), as used in Microsoft Digital Image 2006 Starter Editi…
-
Unscored —
Unspecified vulnerability in the condor_ schedd daemon in Condor before 7.0.5 allows attackers to cause a denial of ser…
-
Unscored —
Stack-based buffer overflow in the condor_ schedd daemon in Condor before 7.0.5 allows attackers to cause a denial of s…
-
Unscored —
Unspecified vulnerability in Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8, when …
-
Unscored —
Unspecified vulnerability in Condor before 7.0.5 allows attackers to execute jobs as other users via unknown vectors.
-
Unscored —
Condor before 7.0.5 does not properly handle when the configuration specifies overlapping netmasks in allow or deny rul…
-
Unscored —
Apple Mail.app 3.5 on Mac OS X, when "Store draft messages on the server" is enabled, stores draft copies of S/MIME ema…
-
Unscored —CVE-2008-4492 Public exploit
SQL injection vulnerability in referrals.php in YourOwnBux 4.0 allows remote attackers to execute arbitrary SQL command…
-
Unscored —
The XML parser in Xerces-C++ before 3.0.0 allows context-dependent attackers to cause a denial of service (stack consum…
-
Unscored —
Directory traversal vulnerability in ap-save.php in Atarone CMS 1.2.0 allows remote attackers to include and execute ar…
-
Unscored —
Cross-site scripting (XSS) vulnerability in ap-pages.php in Atarone CMS 1.2.0 allows remote attackers to inject arbitra…
-
Unscored —CVE-2008-4484 Public exploit
main.php in Crux Gallery 1.32 and earlier allows remote attackers to gain administrative access by setting the name par…
-
Unscored —CVE-2008-4486 Public exploit
Directory traversal vulnerability in index.php in SAC.php (SACphp), as used in Yerba 6.3 and earlier, allows remote att…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the ICAP patience page in Blue Coat Security Gateway OS (SGOS) 4.2 before 4…
-
Unscored —
SQL injection vulnerability in ap-save.php in Atarone CMS 1.2.0 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2008-4483 Public exploit
Directory traversal vulnerability in index.php in Crux Gallery 1.32 and earlier, when magic_quotes_gpc is disabled, all…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Redmine 0.7.2 and earlier allows remote attackers to inject arbitrary web s…
-
Unscored —CVE-2008-4490 Public exploit
Directory traversal vulnerability in config.inc.php in phpAbook 0.8.8b and earlier, when magic_quotes_gpc is disabled, …