Archive
October 2008
Vulnerabilities first published in this month (UTC), newest first.
268 results · Clear filters · Feed
-
Unscored —CVE-2008-4711 Public exploit
SQL injection vulnerability in Joovili 3.0 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to e…
-
Unscored —CVE-2008-4713 Public exploit
SQL injection vulnerability in view.php in 212cafe Board 0.07 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2008-4703 Public exploit
SQL injection vulnerability in news.php in BosDev BosNews 4.0 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2008-4715 Public exploit
SQL injection vulnerability in the Jpad (com_jpad) 1.0 component for Joomla! allows remote attackers to execute arbitra…
-
Unscored —CVE-2008-4708 Public exploit
BbZL.PhP 0.92 allows remote attackers to bypass authentication and gain administrative access by setting the phorum_adm…
-
Unscored —CVE-2008-4700 Public exploit
SQL injection vulnerability in admin.php in Libera CMS 1.12 and earlier, when magic_quotes_gpc is disabled, allows remo…
-
Unscored —CVE-2008-4701 Public exploit
SQL injection vulnerability in admin.php in Libera CMS 1.12, when magic_quotes_gpc is disabled, allows remote attackers…
-
Unscored —CVE-2008-4702 Public exploit
Multiple directory traversal vulnerabilities in PhpWebGallery 1.3.4 allow remote attackers to include and execute arbit…
-
Unscored —
Insecure method vulnerability in the ActiveX control (PAWWeb11.ocx) in Peachtree Accounting 2004 allows remote attacker…
-
Unscored —
manage_proj_page.php in Mantis before 1.1.4 allows remote authenticated users to execute arbitrary code via a sort para…
-
Unscored —CVE-2008-4686 Public exploit
Multiple integer overflows in ty.c in the TY demux plugin (aka the TiVo demuxer) in VideoLAN VLC media player, probably…
-
Unscored —CVE-2008-4682 Public exploit
wtap.c in Wireshark 0.99.7 through 1.0.3 allows remote attackers to cause a denial of service (application abort) via a…
-
Unscored —CVE-2008-4675 Public exploit
SQL injection vulnerability in index.php in PHPcounter 1.3.2 and earlier allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2008-4666 Public exploit
SQL injection vulnerability in webboard.php in Ultimate Webboard 3.00 allows remote attackers to execute arbitrary SQL …
-
Unscored —
Directory traversal vulnerability in the Image Browser (com_imagebrowser) 0.1.5 component for Joomla! allows remote att…
-
Unscored —CVE-2008-4671 Public exploit
Cross-site scripting (XSS) vulnerability in wp-admin/wp-blogs.php in Wordpress MU (WPMU) before 2.6 allows remote attac…
-
Unscored —CVE-2008-4670 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in Ed Pudol Clickbank Portal allows remote attackers to inject a…
-
Unscored —CVE-2008-4669 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in Dan Fletcher Recipe Script allows remote attackers to inject …
-
Unscored —CVE-2008-4667 Public exploit
Directory traversal vulnerability in rss.php in ArabCMS 2.0 beta 1 allows remote attackers to include and execute arbit…
-
Unscored —CVE-2008-4674 Public exploit
SQL injection vulnerability in realestate-index.php in Conkurent Real Estate Manager 1.01 allows remote attackers to ex…
-
Unscored —CVE-2008-4665 Public exploit
SQL injection vulnerability in PG Matchmaking allows remote attackers to execute arbitrary SQL commands via the id para…
-
Unscored —CVE-2008-4672 Public exploit
Cross-site scripting (XSS) vulnerability in search_results.php in buymyscripts Lyrics Script allows remote attackers to…
-
Unscored —CVE-2008-4673 Public exploit
PHP remote file inclusion vulnerability in panel/common/theme/default/header_setup.php in WebBiscuits Software Events C…
-
Unscored —CVE-2008-4664 Public exploit
Heap-based buffer overflow in QvodInsert.QvodCtrl.1 ActiveX control (QvodInsert.dll) in QVOD Player before 2.1.5 build …
-
Unscored —CVE-2008-4662 Public exploit
Directory traversal vulnerability in admin.php in LokiCMS 0.3.4, when magic_quotes_gpc is disabled, allows remote attac…
-
Unscored —CVE-2008-4650 Public exploit
SQL injection vulnerability in viewevent.php in myEvent 1.6 allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2008-4643 Public exploit
SQL injection vulnerability in hits.php in myWebland myStats allows remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2008-4648 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Elxis CMS 2008.1 revision 2204 allows remote attackers to inje…
-
Unscored —CVE-2008-4653 Public exploit
SQL injection vulnerability in makale.php in Makale 0.26 and possibly other versions, a module for XOOPS, allows remote…
-
Unscored —CVE-2008-4649 Public exploit
Session fixation vulnerability in Elxis CMS 2008.1 revision 2204 allows remote attackers to hijack web sessions by sett…
-
Unscored —
Buffer overflow in the ActiveX control (DartFtp.dll) in Dart Communications PowerTCP FTP for ActiveX 2.0.2 0 allows rem…
-
Unscored —CVE-2008-4645 Public exploit
plugins/event_tracer/event_list.php in PhpWebGallery 1.7.2 and earlier allows remote authenticated administrators to ex…
-
Unscored —CVE-2008-4644 Public exploit
hits.php in myWebland myStats allows remote attackers to bypass IP address restrictions via a modified X-Forwarded-For …
-
Unscored —
Stack-based buffer overflow in the parse_master function in the Ty demux plugin (modules/demux/ty.c) in VLC Media Playe…
-
Unscored —CVE-2008-4651 Public exploit
Multiple SQL injection vulnerabilities in Jetbox CMS 2.1 allow remote authenticated users to execute arbitrary SQL comm…
-
Unscored —CVE-2008-4642 Public exploit
SQL injection vulnerability in profile.php in AstroSPACES 1.1.1 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —
Open redirect vulnerability in exchweb/bin/redir.asp in Microsoft Outlook Web Access (OWA) for Exchange Server 2003 SP2…
-
Unscored —CVE-2008-4627 Public exploit
SQL injection vulnerability in the rGallery plugin 1.09 for WoltLab Burning Board (WBB) allows remote attackers to exec…
-
Unscored —CVE-2008-4620 Public exploit
SQL injection vulnerability in Meeting Room Booking System (MRBS) before 1.4 allows remote attackers to execute arbitra…
-
Unscored —CVE-2008-4624 Public exploit
PHP remote file inclusion vulnerability in init.php in Fast Click SQL Lite 1.1.7, when register_globals is enabled, all…