Skip to content
OpenAdvisories

Archive

25 November 2008

Vulnerabilities first published on this day (UTC), newest first.

9 results · Clear filters · Feed

  • Unscored —
    CVE-2008-5229 Public exploit

    Stack-based buffer overflow in Microsoft Device IO Control in iphlpapi.dll in Microsoft Windows Vista Gold and SP1 allo…

  • Unscored —
    CVE-2008-5222 Public exploit

    SQL injection vulnerability in login.asp in Dvbbs 8.2.0 allows remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2008-5225 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Xerox DocuShare 6 and earlier allow remote attackers to inject a…

  • Unscored —
    CVE-2008-5226 Public exploit

    SQL injection vulnerability in the MambAds (com_mambads) component 1.0 RC1 Beta and 1.0 RC1 for Mambo allows remote att…

  • Unscored —
    CVE-2008-5223 Public exploit

    SQL injection vulnerability in index.php in Airvae Commerce 3.0 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2008-5219 Public exploit

    The password change feature (admin/cp.php) in VideoScript 4.0.1.50 and earlier does not check for administrative authen…

  • Unscored —
    CVE-2008-5221 Public exploit

    The account_save action in admin/userinfo.php in wPortfolio 0.3 and earlier does not require authentication and does no…

  • Unscored —
    CVE-2008-5218 Public exploit

    ScriptsEz FREEze Greetings 1.0 stores pwd.txt under the web root with insufficient access control, which allows remote …

  • Unscored —
    CVE-2008-5220 Public exploit EPSS 14%

    Unrestricted file upload vulnerability in admin/upload_form.php in wPortfolio 0.3 and earlier allows remote attackers t…