Archive
November 2008
Vulnerabilities first published in this month (UTC), newest first.
163 results · Clear filters · Feed
-
Unscored —CVE-2008-5190 Public exploit
SQL injection vulnerability in index.php in eSHOP100 allows remote attackers to execute arbitrary SQL commands via the …
-
Unscored —CVE-2008-5200 Public exploit
SQL injection vulnerability in the Xe webtv (com_xewebtv) component for Joomla! allows remote attackers to execute arbi…
-
Unscored —CVE-2008-5201 Public exploit
Directory traversal vulnerability in index.php in OTManager CMS 24a allows remote attackers to include and execute arbi…
-
Unscored —CVE-2008-5199 Public exploit
PHP remote file inclusion vulnerability in include.php in PHPOutsourcing IdeaBox (aka IdeBox) 1.1 allows remote attacke…
-
Unscored —CVE-2008-5202 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in OTManager CMS 24a allows remote attackers to inject arbitrary …
-
Unscored —CVE-2008-5203 Public exploit
Cross-site scripting (XSS) vulnerability in external_vote.php in PowerAward 1.1.0 RC1 allows remote attackers to inject…
-
Unscored —CVE-2008-5195 Public exploit
Multiple SQL injection vulnerabilities in SebracCMS (sbcms) 0.4 allow remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2008-5194 Public exploit
SQL injection vulnerability in checkavail.php in SoftVisions Software Online Booking Manager (obm) 2.2 allows remote at…
-
Unscored —CVE-2008-5204 Public exploit
Multiple directory traversal vulnerabilities in PowerAward 1.1.0 RC1, when register_globals is enabled, allow remote at…
-
Unscored —CVE-2008-5193 Public exploit
Cross-site scripting (XSS) vulnerability in search.asp in W1L3D4 Philboard 1.14 and 1.2 allows remote attackers to inje…
-
Unscored —CVE-2008-5196 Public exploit
SQL injection vulnerability in kroax.php in the Kroax (the_kroax) 4.42 and earlier module for PHP-Fusion allows remote …
-
Unscored —CVE-2008-5183 Public exploit
cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service (daemon…
-
Unscored —CVE-2008-5185 Public exploit
The highlighting functionality in geshi.php in GeSHi before 1.0.8 allows remote attackers to cause a denial of service …
-
Medium 5.3
Microsoft Communicator, and Communicator in Microsoft Office 2010 beta, allows remote attackers to cause a denial of se…
-
Unscored —
Stack-based buffer overflow in the DtbClsLogin function in Yosemite Backup 8.7 allows remote attackers to (1) execute a…
-
Unscored —
Heap-based buffer overflow in Opera 9.62 on Windows allows remote attackers to execute arbitrary code via a long file:/…
-
Unscored —CVE-2008-5175 Public exploit
Directory traversal vulnerability in the FTP client in AceFTP Freeware 3.80.3 and AceFTP Pro 3.80.3 allows remote FTP s…
-
Unscored —CVE-2008-5169 Public exploit
SQL injection vulnerability in drinks/drink.php in Drinks Complete Website 2.1.0 allows remote attackers to execute arb…
-
Unscored —CVE-2008-5166 Public exploit
SQL injection vulnerability in riddle.php in Riddles Website 1.2.1 allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2008-5168 Public exploit
SQL injection vulnerability in tip.php in Tips Complete Website 1.2.0 allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2008-5174 Public exploit
SQL injection vulnerability in joke.php in Jokes Complete Website 2.1.3 allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2008-5170 Public exploit
SQL injection vulnerability in item.php in Cheats Complete Website 1.1.1 allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2008-5163 Public exploit
Multiple SQL injection vulnerabilities in The Rat CMS Pre-Alpha 2 allow remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2008-5164 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in The Rat CMS Pre-Alpha 2 allow remote attackers to inject arbitra…
-
Unscored —CVE-2008-5167 Public exploit
PHP remote file inclusion vulnerability in layout/default/params.php in Boonex Orca 2.0 and 2.0.2, when register_global…
-
Unscored —CVE-2008-5171 Public exploit
Multiple directory traversal vulnerabilities in admin/minibb/index.php in phpBLASTER CMS 1.0 RC1, when register_globals…
-
Low 3.7
Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.…
-
Unscored —
Integer overflow in the remote administration protocol processing in Client Software WinCom LPD Total 3.0.2.623 and ear…
-
Unscored —CVE-2008-5160 Public exploit
Unspecified vulnerability in MyServer 0.8.11 allows remote attackers to cause a denial of service (daemon crash) via mu…
-
Unscored —CVE-2008-5132 Public exploit
SQL injection vulnerability in inc/ajax/ajax_rating.php in MemHT Portal 4.0.1 allows remote attackers to execute arbitr…
-
Unscored —CVE-2008-5131 Public exploit
Multiple SQL injection vulnerabilities in Develop It Easy News And Article System 1.4 allow remote attackers to execute…
-
Unscored —CVE-2008-5126 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in BoutikOne CMS allows remote attackers to inject arbitrary web…
-
Unscored —CVE-2008-5123 Public exploit
SQL injection vulnerability in admin.php in CCleague Pro 1.2 allows remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2008-5115 Public exploit
Cross-site request forgery (CSRF) vulnerability in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 a…
-
Unscored —CVE-2008-5125 Public exploit
admin.php in CCleague Pro 1.2 allows remote attackers to bypass authentication by setting the type cookie value to admi…
-
Unscored —CVE-2008-5121 Public exploit
dne2000.sys in Citrix Deterministic Network Enhancer (DNE) 2.21.7.233 through 3.21.7.17464, as used in (1) Cisco VPN Cl…
-
Unscored —CVE-2008-5120 Public exploit
Stack-based buffer overflow in the Process Software MultiNet finger service (aka FINGERD) for HP OpenVMS 8.3 allows rem…
-
Unscored —
The LDAP server in Active Directory in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 responds differently to a…
-
Unscored —CVE-2008-5105 Public exploit
KarjaSoft Sami FTP Server 2.0.x allows remote attackers to cause a denial of service (daemon crash or hang) via certain…
-
Unscored —CVE-2008-5102 Public exploit
PythonScripts in Zope 2 2.11.2 and earlier, as used in Conga and other products, allows remote authenticated users to c…