Skip to content
OpenAdvisories

Archive

28 November 2008

Vulnerabilities first published on this day (UTC), newest first.

11 results · Clear filters · Feed

  • Unscored —
    CVE-2008-5271 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Fred Stuurman SyndeoCMS 2.6.0 allows remote attackers to injec…

  • Unscored —
    CVE-2008-5264 Public exploit

    Cross-site scripting (XSS) vulnerability in searcher.exe in Tornado Knowledge Retrieval System 4.2 and earlier allows r…

  • Unscored —
    CVE-2008-5265 Public exploit

    Directory traversal vulnerability in index.php in TNT Forum 0.9.4, when magic_quotes_gpc is disabled, allows remote att…

  • Unscored —
    CVE-2008-5274 Public exploit

    Todd Woolums ASP News Management 2.2 allows remote attackers to obtain news items via a direct request to (1) rss.asp, …

  • Unscored —
    CVE-2008-5270 Public exploit

    SQL injection vulnerability in view.topics.php in Yuhhu Superstar 2008 allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2008-5268 Public exploit

    SQL injection vulnerability in content/forums/reply.asp in ASPPortal allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2008-5272 Public exploit

    Multiple directory traversal vulnerabilities in Fred Stuurman SyndeoCMS 2.6.0 allow remote authenticated users to read …

  • Unscored —
    CVE-2008-5273 Public exploit

    SQL injection vulnerability in viewnews.asp in Todd Woolums ASP News Management 2.2 allows remote attackers to execute …

  • Unscored —
    CVE-2008-5266 Public exploit

    Cross-site scripting (XSS) vulnerability in configuration/httpListenerEdit.jsf in the GlassFish 2 UR2 b04 webadmin inte…

  • Unscored —
    CVE-2008-5269 Public exploit

    SQL injection vulnerability in index.php in pSys 0.7.0 alpha allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2008-5267 Public exploit

    SQL injection vulnerability in answer.php in Experts 1.0.0, when magic_quotes_gpc is disabled, allows remote attackers …