Skip to content
OpenAdvisories

Archive

9 October 2008

Vulnerabilities first published on this day (UTC), newest first.

18 results · Clear filters · Feed

  • Unscored —
    CVE-2008-4518 Public exploit

    Multiple SQL injection vulnerabilities in Fastpublish CMS 1.9.9.9.9 d (1.9999 d) allow remote attackers to execute arbi…

  • Unscored —
    CVE-2008-4528 Public exploit

    Directory traversal vulnerability in notes.php in Phlatline's Personal Information Manager (pPIM) 1.01 allows remote at…

  • Unscored —
    CVE-2008-4526 Public exploit

    Multiple directory traversal vulnerabilities in CCMS 3.1 allow remote attackers to include and execute arbitrary local …

  • Unscored —
    CVE-2008-4527 Public exploit

    SQL injection vulnerability in recept.php in the Recepies (Recept) module 1.1 for PHP-Fusion allows remote attackers to…

  • Unscored —
    CVE-2008-4525 Public exploit

    SQL injection vulnerability in index.php in AmpJuke 0.7.5 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2008-4519 Public exploit

    Multiple directory traversal vulnerabilities in Fastpublish CMS 1.9999 d allow remote attackers to include and execute …

  • Unscored —
    CVE-2008-4522 Public exploit

    Multiple directory traversal vulnerabilities in JMweb MP3 Music Audio Search and Download Script allow remote attackers…

  • Unscored —
    CVE-2008-4521 Public exploit

    SQL injection vulnerability in thisraidprogress.php in the World of Warcraft tracker infusion (raidtracker_panel) modul…

  • Unscored —
    CVE-2008-4529 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in asiCMS alpha 0.208 allow remote attackers to execute arbitrary PH…

  • Unscored —
    CVE-2008-4517 Public exploit

    SQL injection vulnerability in leggi.php in geccBBlite 2.0 allows remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2008-4523 Public exploit

    SQL injection vulnerability in login.php in IP Reg 0.4 and earlier allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2008-4532 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in MaxiScript Website Directory allows remote attackers to inject…

  • High —
    CVE-2008-4524 Public exploit

    AdaptCMS SQL Injection vulnerability

    SQL injection vulnerability in the "Check User" feature (includes/check_user.php) in AdaptCMS Lite and AdaptCMS Pro 1.3 allows remote attackers to execute arbitrary SQL commands via the user_name parameter.

  • Unscored —
    CVE-2008-4514 Public exploit

    The HTML parser in KDE Konqueror 3.5.9 allows remote attackers to cause a denial of service (application crash) via a f…

  • Unscored —
    CVE-2008-4508 Public exploit

    Stack-based buffer overflow in the file parsing function in Tonec Internet Download Manager, possibly 5.14 and earlier,…

  • Unscored —
    CVE-2008-4509 Public exploit

    Unrestricted file upload vulnerability in processFiles.php in FOSS Gallery Admin and FOSS Gallery Public 1.0 beta allow…

  • Unscored —
    CVE-2008-4516 Public exploit

    SQL injection vulnerability in galerie.php in Galerie 3.2 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2008-4510 Public exploit

    Microsoft Windows Vista Home and Ultimate Edition SP1 and earlier allows local users to cause a denial of service (page…