Skip to content
OpenAdvisories

Archive

22 October 2008

Vulnerabilities first published on this day (UTC), newest first.

19 results · Clear filters · Feed

  • Unscored —
    CVE-2008-4700 Public exploit

    SQL injection vulnerability in admin.php in Libera CMS 1.12 and earlier, when magic_quotes_gpc is disabled, allows remo…

  • Unscored —
    CVE-2008-4701 Public exploit

    SQL injection vulnerability in admin.php in Libera CMS 1.12, when magic_quotes_gpc is disabled, allows remote attackers…

  • Unscored —
    CVE-2008-4702 Public exploit

    Multiple directory traversal vulnerabilities in PhpWebGallery 1.3.4 allow remote attackers to include and execute arbit…

  • Unscored —
    CVE-2008-4699 Public exploit EPSS 27%

    Insecure method vulnerability in the ActiveX control (PAWWeb11.ocx) in Peachtree Accounting 2004 allows remote attacker…

  • Unscored —
    CVE-2008-4687 Public exploit EPSS 67%

    manage_proj_page.php in Mantis before 1.1.4 allows remote authenticated users to execute arbitrary code via a sort para…

  • Unscored —
    CVE-2008-4686 Public exploit

    Multiple integer overflows in ty.c in the TY demux plugin (aka the TiVo demuxer) in VideoLAN VLC media player, probably…

  • Unscored —
    CVE-2008-4682 Public exploit

    wtap.c in Wireshark 0.99.7 through 1.0.3 allows remote attackers to cause a denial of service (application abort) via a…

  • Unscored —
    CVE-2008-4675 Public exploit

    SQL injection vulnerability in index.php in PHPcounter 1.3.2 and earlier allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2008-4666 Public exploit

    SQL injection vulnerability in webboard.php in Ultimate Webboard 3.00 allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2008-4668 Public exploit Scanner template EPSS 21%

    Directory traversal vulnerability in the Image Browser (com_imagebrowser) 0.1.5 component for Joomla! allows remote att…

  • Unscored —
    CVE-2008-4671 Public exploit

    Cross-site scripting (XSS) vulnerability in wp-admin/wp-blogs.php in Wordpress MU (WPMU) before 2.6 allows remote attac…

  • Unscored —
    CVE-2008-4670 Public exploit

    Cross-site scripting (XSS) vulnerability in search.php in Ed Pudol Clickbank Portal allows remote attackers to inject a…

  • Unscored —
    CVE-2008-4669 Public exploit

    Cross-site scripting (XSS) vulnerability in search.php in Dan Fletcher Recipe Script allows remote attackers to inject …

  • Unscored —
    CVE-2008-4667 Public exploit

    Directory traversal vulnerability in rss.php in ArabCMS 2.0 beta 1 allows remote attackers to include and execute arbit…

  • Unscored —
    CVE-2008-4674 Public exploit

    SQL injection vulnerability in realestate-index.php in Conkurent Real Estate Manager 1.01 allows remote attackers to ex…

  • Unscored —
    CVE-2008-4665 Public exploit

    SQL injection vulnerability in PG Matchmaking allows remote attackers to execute arbitrary SQL commands via the id para…

  • Unscored —
    CVE-2008-4672 Public exploit

    Cross-site scripting (XSS) vulnerability in search_results.php in buymyscripts Lyrics Script allows remote attackers to…

  • Unscored —
    CVE-2008-4673 Public exploit

    PHP remote file inclusion vulnerability in panel/common/theme/default/header_setup.php in WebBiscuits Software Events C…

  • Unscored —
    CVE-2008-4664 Public exploit

    Heap-based buffer overflow in QvodInsert.QvodCtrl.1 ActiveX control (QvodInsert.dll) in QVOD Player before 2.1.5 build …