Archive
25 November 2008
Vulnerabilities first published on this day (UTC), newest first.
9 results · Clear filters · Feed
-
Unscored —CVE-2008-5229 Public exploit
Stack-based buffer overflow in Microsoft Device IO Control in iphlpapi.dll in Microsoft Windows Vista Gold and SP1 allo…
-
Unscored —CVE-2008-5222 Public exploit
SQL injection vulnerability in login.asp in Dvbbs 8.2.0 allows remote attackers to execute arbitrary SQL commands via t…
-
Unscored —CVE-2008-5225 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Xerox DocuShare 6 and earlier allow remote attackers to inject a…
-
Unscored —CVE-2008-5226 Public exploit
SQL injection vulnerability in the MambAds (com_mambads) component 1.0 RC1 Beta and 1.0 RC1 for Mambo allows remote att…
-
Unscored —CVE-2008-5223 Public exploit
SQL injection vulnerability in index.php in Airvae Commerce 3.0 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2008-5219 Public exploit
The password change feature (admin/cp.php) in VideoScript 4.0.1.50 and earlier does not check for administrative authen…
-
Unscored —CVE-2008-5221 Public exploit
The account_save action in admin/userinfo.php in wPortfolio 0.3 and earlier does not require authentication and does no…
-
Unscored —CVE-2008-5218 Public exploit
ScriptsEz FREEze Greetings 1.0 stores pwd.txt under the web root with insufficient access control, which allows remote …
-
Unscored —
Unrestricted file upload vulnerability in admin/upload_form.php in wPortfolio 0.3 and earlier allows remote attackers t…