Archive
November 2008
Vulnerabilities first published in this month (UTC), newest first.
163 results · Clear filters · Feed
-
Unscored —CVE-2008-5284 Public exploit
The web server in IEA Software RadiusNT and RadiusX 5.1.38 and other versions before 5.1.44, Emerald 5.0.49 and other v…
-
Unscored —
Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0.1 allow remote attackers to execute arbitrary code …
-
Unscored —CVE-2008-5283 Public exploit
Google Hack Honeypot (GHH) File Upload Manager 1.3 allows remote attackers to delete uploaded files via unknown vectors…
-
Unscored —CVE-2008-5280 Public exploit
The Local ZIM Server in Zilab Chat and Instant Messaging (ZIM) Server 2.0 and 2.1 allows remote attackers to cause a de…
-
Unscored —CVE-2008-5281 Public exploit
Heap-based buffer overflow in Titan FTP Server 6.05 build 550 allows remote attackers to execute arbitrary code via a l…
-
Unscored —CVE-2008-5271 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Fred Stuurman SyndeoCMS 2.6.0 allows remote attackers to injec…
-
Unscored —CVE-2008-5264 Public exploit
Cross-site scripting (XSS) vulnerability in searcher.exe in Tornado Knowledge Retrieval System 4.2 and earlier allows r…
-
Unscored —CVE-2008-5265 Public exploit
Directory traversal vulnerability in index.php in TNT Forum 0.9.4, when magic_quotes_gpc is disabled, allows remote att…
-
Unscored —CVE-2008-5274 Public exploit
Todd Woolums ASP News Management 2.2 allows remote attackers to obtain news items via a direct request to (1) rss.asp, …
-
Unscored —CVE-2008-5270 Public exploit
SQL injection vulnerability in view.topics.php in Yuhhu Superstar 2008 allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2008-5268 Public exploit
SQL injection vulnerability in content/forums/reply.asp in ASPPortal allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2008-5272 Public exploit
Multiple directory traversal vulnerabilities in Fred Stuurman SyndeoCMS 2.6.0 allow remote authenticated users to read …
-
Unscored —CVE-2008-5273 Public exploit
SQL injection vulnerability in viewnews.asp in Todd Woolums ASP News Management 2.2 allows remote attackers to execute …
-
Unscored —CVE-2008-5266 Public exploit
Cross-site scripting (XSS) vulnerability in configuration/httpListenerEdit.jsf in the GlassFish 2 UR2 b04 webadmin inte…
-
Unscored —CVE-2008-5269 Public exploit
SQL injection vulnerability in index.php in pSys 0.7.0 alpha allows remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2008-5267 Public exploit
SQL injection vulnerability in answer.php in Experts 1.0.0, when magic_quotes_gpc is disabled, allows remote attackers …
-
Unscored —
Buffer overflow in the CallHTMLHelp method in the Microsoft Windows Media Services ActiveX control in nskey.dll 4.1.00.…
-
Unscored —CVE-2008-5229 Public exploit
Stack-based buffer overflow in Microsoft Device IO Control in iphlpapi.dll in Microsoft Windows Vista Gold and SP1 allo…
-
Unscored —CVE-2008-5222 Public exploit
SQL injection vulnerability in login.asp in Dvbbs 8.2.0 allows remote attackers to execute arbitrary SQL commands via t…
-
Unscored —CVE-2008-5225 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Xerox DocuShare 6 and earlier allow remote attackers to inject a…
-
Unscored —CVE-2008-5226 Public exploit
SQL injection vulnerability in the MambAds (com_mambads) component 1.0 RC1 Beta and 1.0 RC1 for Mambo allows remote att…
-
Unscored —CVE-2008-5223 Public exploit
SQL injection vulnerability in index.php in Airvae Commerce 3.0 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2008-5219 Public exploit
The password change feature (admin/cp.php) in VideoScript 4.0.1.50 and earlier does not check for administrative authen…
-
Unscored —CVE-2008-5221 Public exploit
The account_save action in admin/userinfo.php in wPortfolio 0.3 and earlier does not require authentication and does no…
-
Unscored —CVE-2008-5218 Public exploit
ScriptsEz FREEze Greetings 1.0 stores pwd.txt under the web root with insufficient access control, which allows remote …
-
Unscored —
Unrestricted file upload vulnerability in admin/upload_form.php in wPortfolio 0.3 and earlier allows remote attackers t…
-
Unscored —CVE-2008-5212 Public exploit
SQL injection vulnerability in classifide_ad.php in AJ Auction 6.2.1 and earlier allows remote attackers to execute arb…
-
Unscored —CVE-2008-5210 Public exploit
Multiple PHP remote file inclusion vulnerabilities in PhpBlock A8.5 allow remote attackers to execute arbitrary PHP cod…
-
Unscored —CVE-2008-5209 Public exploit
Directory traversal vulnerability in modules/download/get_file.php in Admidio 1.4.8 allows remote attackers to read arb…
-
Unscored —CVE-2008-5214 Public exploit
Cross-site scripting (XSS) vulnerability in service/calendrier.php in ClanLite 2.2006.05.20 allows remote attackers to …
-
Unscored —CVE-2008-5216 Public exploit
SQL injection vulnerability in category_list.php in AJ Square ZeusCart 2.0 and earlier allows remote attackers to execu…
-
Unscored —CVE-2008-5208 Public exploit
SQL injection vulnerability in sub_votepic.php in the Datsogallery (com_datsogallery) module 1.6 for Joomla! allows rem…
-
Unscored —CVE-2008-5217 Public exploit
Directory traversal vulnerability in index.php in txtCMS 0.3, when register_globals is enabled and magic_quotes_gpc is …
-
Unscored —CVE-2008-5213 Public exploit
SQL injection vulnerability in featured_article.php in AJ Article 1.0 allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2008-5211 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in Sphider 1.3.4, when the search suggestion feature is enabled,…
-
Unscored —CVE-2008-5215 Public exploit
SQL injection vulnerability in service/profil.php in ClanLite 2.2006.05.20 allows remote attackers to execute arbitrary…
-
Unscored —CVE-2008-5198 Public exploit
SQL injection vulnerability in memberlist.php in Acmlmboard 1.A2 allows remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2008-5197 Public exploit
SQL injection vulnerability in classifieds.php in PHP-Fusion allows remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2008-5192 Public exploit
SQL injection vulnerability in forum.asp in W1L3D4 Philboard 1.14 and 1.2 allows remote attackers to execute arbitrary …
-
Unscored —
Multiple SQL injection vulnerabilities in SePortal 2.4 allow remote attackers to execute arbitrary SQL commands via the…