Archive
27 October 2008
Vulnerabilities first published on this day (UTC), newest first.
16 results · Feed
-
Unscored —CVE-2008-4749 Public exploit
Multiple insecure method vulnerabilities in the VImpX.VImpAX ActiveX control (VImpX.ocx) 4.8.8.0 in DB Software Laborat…
-
Unscored —CVE-2008-4751 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in iPei Guestbook 2.0 allows remote attackers to inject arbitrary…
-
Unscored —CVE-2008-4752 Public exploit
TlNews 2.2 allows remote attackers to bypass authentication and gain administrative access by setting the tlNews_login …
-
Unscored —
Unspecified vulnerability in the search feature in Sun Java System LDAP JDK before 4.20 allows context-dependent attack…
-
Unscored —CVE-2008-4748 Public exploit
Format string vulnerability in the URI handler in KVirc 3.4.0, when set as the default application for processing IRC U…
-
Unscored —CVE-2008-4753 Public exploit
SQL injection vulnerability in EditUrl.php in AJ Square RSS Reader allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2008-4750 Public exploit
Stack-based buffer overflow in the VImpX.VImpAX ActiveX control (VImpX.ocx) 4.8.8.0 in DB Software Laboratory VImp X, p…
-
Unscored —CVE-2008-4754 Public exploit
SQL injection vulnerability in forum.php in Scripts for Sites (SFS) Ez Forum allows remote attackers to execute arbitra…
-
Unscored —
Multiple SQL injection vulnerabilities in Uniwin eCart Professional 2.0.17 allow remote attackers to execute arbitrary …
-
Unscored —CVE-2008-4740 Public exploit
Directory traversal vulnerability in templater.php in the ZZ_Templater module in TinyCMS 1.1.2, when register_globals i…
-
Unscored —CVE-2008-4744 Public exploit
SQL injection vulnerability in product_detail.php in DXShopCart 4.30mc allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2008-4741 Public exploit
Directory traversal vulnerability in index.php in FAR-PHP 1.00, when magic_quotes_gpc is disabled, allows remote attack…
-
Unscored —
Cross-site scripting (XSS) vulnerability in emailFriend.asp in Uniwin eCart Professional 2.0.17 allows remote attackers…
-
Unscored —CVE-2008-4743 Public exploit
SQL injection vulnerability in index.php in QuidaScript FAQ Management Script allows remote attackers to execute arbitr…
-
Unscored —CVE-2008-4742 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in interface/Login.php in TimeTrex 2.2.11 allow remote attackers to…
-
Unscored —CVE-2006-7234 Public exploit
Untrusted search path vulnerability in Lynx before 2.8.6rel.4 allows local users to execute arbitrary code via maliciou…