Archive
October 2008
Vulnerabilities first published in this month (UTC), newest first.
540 results · Feed
-
Unscored —
jhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to overwrite arbitrary files via a symlink attack …
-
Unscored —
Cross-site scripting (XSS) vulnerability in cpCommerce before 1.2.4 allows remote attackers to inject arbitrary web scr…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in cpCommerce before 1.2.4 allow remote attackers to inject arbitra…
-
Unscored —
qioadmin in the Quick I/O for Database feature in Symantec Veritas File System (VxFS) on HP-UX, and before 5.0 MP3 on S…
-
Unscored —
The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows attackers to execute arbitrary comma…
-
Unscored —
The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to delete arbitrary file…
-
Unscored —
qiomkfile in the Quick I/O for Database feature in Symantec Veritas File System (VxFS) on HP-UX, and before 5.0 MP3 on …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the management interface in HP SiteScope 9.0 build 911 allows remote attack…
-
Unscored —
Open redirect vulnerability in exchweb/bin/redir.asp in Microsoft Outlook Web Access (OWA) for Exchange Server 2003 SP2…
-
Unscored —
SQL injection vulnerability in Node Vote 5.x before 5.x-1.1 and 6.x before 6.x-1.0, a module for Drupal, when "Allow us…
-
Unscored —CVE-2008-4627 Public exploit
SQL injection vulnerability in the rGallery plugin 1.09 for WoltLab Burning Board (WBB) allows remote attackers to exec…
-
Unscored —CVE-2008-4620 Public exploit
SQL injection vulnerability in Meeting Room Booking System (MRBS) before 1.4 allows remote attackers to execute arbitra…
-
Unscored —
Multiple unspecified vulnerabilities in Midgard Components (MidCOM) Framework before 8.09.1 have unknown impact and att…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Movable Type 4 through 4.21 allows remote attackers to inject arbitrary web…
-
Unscored —
Stack-based buffer overflow in the Message::AddToString function in message/Message.cpp in MUSCLE before 4.40 allows re…
-
Unscored —CVE-2008-4624 Public exploit
PHP remote file inclusion vulnerability in init.php in Fast Click SQL Lite 1.1.7, when register_globals is enabled, all…
-
Unscored —CVE-2008-4628 Public exploit
SQL injection vulnerability in del.php in myWebland miniBloggie 1.0 allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2008-4632 Public exploit
Multiple directory traversal vulnerabilities in index.php in Kure 0.6.3, when magic_quotes_gpc is disabled, allow remot…
-
Unscored —CVE-2008-4621 Public exploit
SQL injection vulnerability in bannerclick.php in ZeeScripts Zeeproperty allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2008-4625 Public exploit
SQL injection vulnerability in stnl_iframe.php in the ShiftThis Newsletter (st_newsletter) plugin for WordPress allows …
-
Unscored —
Unspecified vulnerability in Hisanaga Electric Co, Ltd. hisa_cart 1.29 and earlier, a module for XOOPS, allows remote a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Usagi Project MyNETS 1.2.0 and earlier allows remote attackers to inject ar…
-
Unscored —CVE-2008-4623 Public exploit
SQL injection vulnerability in the DS-Syndicate (com_ds-syndicate) component 1.1.1 for Joomla allows remote attackers t…
-
Unscored —CVE-2008-4626 Public exploit
Directory traversal vulnerability in index.php in Fritz Berger yet another php photo album - next generation (yappa-ng)…
-
Unscored —CVE-2008-4622 Public exploit
The isLoggedIn function in fastnews-code.php in phpFastNews 1.0.0 allows remote attackers to bypass authentication and …
-
Unscored —
The Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.27 does not properly hand…
-
Unscored —
The RPC subsystem in Sun Solaris 9 allows remote attackers to cause a denial of service (daemon crash) via a crafted re…
-
Unscored —CVE-2008-4617 Public exploit
SQL injection vulnerability in the actualite module 1.0 for Joomla! allows remote attackers to execute arbitrary SQL co…
-
Unscored —
Unspecified vulnerability in i_utils.asp in PortalApp before 4.01a has unknown impact and attack vectors.
-
Unscored —CVE-2008-4612 Public exploit
Cross-site scripting (XSS) vulnerability in PortalApp 4.0 allows remote attackers to inject arbitrary web script or HTM…
-
Unscored —CVE-2008-4613 Public exploit
SQL injection vulnerability in forums.asp in PortalApp 4.0 allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2008-4616 Public exploit
The SpamBam plugin for WordPress allows remote attackers to bypass restrictions and add blog comments by using server-s…
-
Unscored —CVE-2008-4614 Public exploit
PortalApp 4.0 does not require authentication for (1) forums.asp and (2) content.asp, which allows remote attackers to …
-
Unscored —CVE-2008-4611 Public exploit
SQL injection vulnerability in index.php in PHP Arsivimiz Php Ziyaretci Defteri allows remote attackers to execute arbi…
-
Unscored —CVE-2008-4610 Public exploit
MPlayer allows remote attackers to cause a denial of service (application crash) via (1) a malformed AAC file, as demon…
-
Unscored —
The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and pr…
-
Unscored —
The i915 driver in (1) drivers/char/drm/i915_dma.c in the Linux kernel 2.6.24 on Debian GNU/Linux and (2) sys/dev/pci/d…
-
Unscored —
MPlayer, possibly 1.0rc1, allows remote attackers to cause a denial of service (SIGSEGV and application crash) via (1) …
-
Unscored —CVE-2008-4605 Public exploit
SQL injection vulnerability in CafeEngine allows remote attackers to execute arbitrary SQL commands via the id paramete…
-
Unscored —CVE-2008-4603 Public exploit
SQL injection vulnerability in search.php in iGaming CMS 2.0 Alpha 1 allows remote attackers to execute arbitrary SQL c…