Archive
October 2008
Vulnerabilities first published in this month (UTC), newest first.
268 results · Clear filters · Feed
-
Unscored —CVE-2008-4628 Public exploit
SQL injection vulnerability in del.php in myWebland miniBloggie 1.0 allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2008-4632 Public exploit
Multiple directory traversal vulnerabilities in index.php in Kure 0.6.3, when magic_quotes_gpc is disabled, allow remot…
-
Unscored —CVE-2008-4621 Public exploit
SQL injection vulnerability in bannerclick.php in ZeeScripts Zeeproperty allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2008-4625 Public exploit
SQL injection vulnerability in stnl_iframe.php in the ShiftThis Newsletter (st_newsletter) plugin for WordPress allows …
-
Unscored —CVE-2008-4623 Public exploit
SQL injection vulnerability in the DS-Syndicate (com_ds-syndicate) component 1.1.1 for Joomla allows remote attackers t…
-
Unscored —CVE-2008-4626 Public exploit
Directory traversal vulnerability in index.php in Fritz Berger yet another php photo album - next generation (yappa-ng)…
-
Unscored —CVE-2008-4622 Public exploit
The isLoggedIn function in fastnews-code.php in phpFastNews 1.0.0 allows remote attackers to bypass authentication and …
-
Unscored —
The RPC subsystem in Sun Solaris 9 allows remote attackers to cause a denial of service (daemon crash) via a crafted re…
-
Unscored —CVE-2008-4617 Public exploit
SQL injection vulnerability in the actualite module 1.0 for Joomla! allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2008-4612 Public exploit
Cross-site scripting (XSS) vulnerability in PortalApp 4.0 allows remote attackers to inject arbitrary web script or HTM…
-
Unscored —CVE-2008-4613 Public exploit
SQL injection vulnerability in forums.asp in PortalApp 4.0 allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2008-4616 Public exploit
The SpamBam plugin for WordPress allows remote attackers to bypass restrictions and add blog comments by using server-s…
-
Unscored —CVE-2008-4614 Public exploit
PortalApp 4.0 does not require authentication for (1) forums.asp and (2) content.asp, which allows remote attackers to …
-
Unscored —CVE-2008-4611 Public exploit
SQL injection vulnerability in index.php in PHP Arsivimiz Php Ziyaretci Defteri allows remote attackers to execute arbi…
-
Unscored —CVE-2008-4610 Public exploit
MPlayer allows remote attackers to cause a denial of service (application crash) via (1) a malformed AAC file, as demon…
-
Unscored —
The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and pr…
-
Unscored —CVE-2008-4605 Public exploit
SQL injection vulnerability in CafeEngine allows remote attackers to execute arbitrary SQL commands via the id paramete…
-
Unscored —CVE-2008-4603 Public exploit
SQL injection vulnerability in search.php in iGaming CMS 2.0 Alpha 1 allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2008-4599 Public exploit
SQL injection vulnerability in category.php in Mosaic Commerce allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2008-4602 Public exploit
Directory traversal vulnerability in index.php in Post Affiliate Pro 2.0 allows remote authenticated users to read and …
-
Unscored —CVE-2008-4601 Public exploit
Cross-site scripting (XSS) vulnerability in the login feature in Habari CMS 0.5.1 allows remote attackers to inject arb…
-
Unscored —CVE-2008-4600 Public exploit
configure.php in PokerMax Poker League Tournament Script 0.13 allows remote attackers to bypass authentication and gain…
-
Unscored —CVE-2008-4604 Public exploit
SQL injection vulnerability in index.php in Easy CafeEngine 1.1 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2008-4606 Public exploit
Multiple SQL injection vulnerabilities in IP Reg 0.4 and earlier allow remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2008-4591 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in admin/include/isadmin.inc.php in PhpWebGallery 1.3.4 allow remot…
-
Unscored —CVE-2008-4592 Public exploit
Directory traversal vulnerability in index.php in Sports Clubs Web Panel 0.0.1 allows remote attackers to include and e…
-
Unscored —CVE-2008-4590 Public exploit
Multiple SQL injection vulnerabilities in Stash 1.0.3 allow remote attackers to execute arbitrary SQL commands via (1) …
-
Unscored —
Insecure method vulnerability in the MSVNClientDownloadManager61Lib.DownloadManager.1 ActiveX control (ISDM.exe 6.1.100…
-
Unscored —CVE-2008-4588 Public exploit
Stack-based buffer overflow in the FTP server in Etype Eserv 3.x, possibly 3.26, allows remote attackers to cause a den…
-
Unscored —CVE-2008-4583 Public exploit
Insecure method vulnerability in the Chilkat FTP 2.0 ActiveX component (ChilkatCert.dll) allows remote attackers to ove…
-
Unscored —CVE-2008-4586 Public exploit
Insecure method vulnerability in the MVSNCLientWebAgent61.WebAgent.1 ActiveX control (isusweb.dll 6.1.100.61372) in Mac…
-
Unscored —CVE-2008-4584 Public exploit
Insecure method vulnerability in Chilkat Mail 7.8 ActiveX control (ChilkatCert.dll) allows remote attackers to overwrit…
-
Unscored —
Mozilla Firefox 3.0.1 through 3.0.3, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13, when running on Wind…
-
Unscored —CVE-2008-4574 Public exploit
SQL injection vulnerability in default.asp in Ayco Okul Portali allows remote attackers to execute arbitrary SQL comman…
-
Unscored —
GuildFTPd 0.999.14, and possibly other versions, allows remote attackers to cause a denial of service (crash) and possi…
-
Unscored —CVE-2008-4569 Public exploit
SQL injection vulnerability in xlacomments.asp in XIGLA Software Absolute Poll Manager XE 4.1 allows remote attackers t…
-
Unscored —CVE-2008-4570 Public exploit
SQL injection vulnerability in index.php in Real Estate Classifieds allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2008-4573 Public exploit
SQL injection vulnerability in kategori.asp in MunzurSoft Wep Portal W3 allows remote attackers to execute arbitrary SQ…
-
Unscored —
Microsoft Host Integration Server (HIS) 2000, 2004, and 2006 does not limit RPC access to administrative functions, whi…
-
Unscored —CVE-2008-3464 Public exploit
afd.sys in the Ancillary Function Driver (AFD) component in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP…