Archive
November 2008
Vulnerabilities first published in this month (UTC), newest first.
163 results · Clear filters · Feed
-
Unscored —
Buffer overflow in KarjaSoft Sami FTP Server 2.0.x allows remote attackers to cause a denial of service (daemon crash) …
-
Unscored —CVE-2008-5090 Public exploit
Electron Inc. Advanced Electron Forum before 1.0.7 allows remote attackers to execute arbitrary PHP code via PHP code e…
-
Unscored —CVE-2008-5097 Public exploit
SQL injection vulnerability in index.php in MyFWB 1.0 allows remote attackers to execute arbitrary SQL commands via the…
-
Unscored —CVE-2008-5088 Public exploit
Multiple SQL injection vulnerabilities in PHPKB Knowledge Base Software 1.5 Professional allow remote attackers to exec…
-
Unscored —CVE-2008-5071 Public exploit
Multiple eval injection vulnerabilities in itpm_estimate.php in Yoxel 1.23beta and earlier allow remote authenticated u…
-
Unscored —CVE-2008-5069 Public exploit
SQL injection vulnerability in go.php in Panuwat PromoteWeb MySQL, when magic_quotes_gpc is disabled, allows remote att…
-
Unscored —CVE-2008-5070 Public exploit
SQL injection vulnerability in Pro Chat Rooms 3.0.3, when magic_quotes_gpc is disabled, allows remote attackers to exec…
-
Unscored —CVE-2008-5074 Public exploit
SQL injection vulnerability in index.php in the Freshlinks 1.0 RC1 module for PHP-Fusion allows remote attackers to exe…
-
Unscored —CVE-2008-5072 Public exploit
vsfilter.dll in K-Lite Mega Codec Pack 3.5.7.0 allows remote attackers to cause a denial of service (application crash)…
-
Unscored —CVE-2008-5073 Public exploit
Heap-based buffer overflow in an ActiveX control in Novell ZENworks Desktop Management 6.5 allows remote attackers to e…
-
Unscored —CVE-2008-5075 Public exploit
Multiple SQL injection vulnerabilities in E-Uploader Pro 1.0 (aka Uploader PRO), when magic_quotes_gpc is disabled, all…
-
Unscored —CVE-2008-5067 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in Kmita Catalogue 2.x allows remote attackers to inject arbitra…
-
Unscored —CVE-2008-5064 Public exploit
SQL injection vulnerability in liga.php in H&H WebSoccer 2.80 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2008-5066 Public exploit
PHP remote file inclusion vulnerability in upload/admin/frontpage_right.php in Agares Media ThemeSiteScript 1.0 allows …
-
Unscored —CVE-2008-5065 Public exploit
TlGuestBook 1.2 allows remote attackers to bypass authentication and gain administrative access by setting the tlGuestB…
-
Unscored —CVE-2008-5068 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Kmita Gallery allow remote attackers to inject arbitrary web scr…
-
Unscored —CVE-2008-5062 Public exploit
Directory traversal vulnerability in php/cal_pdf.php in Mini Web Calendar (mwcal) 1.2 allows remote attackers to read a…
-
Unscored —CVE-2008-5058 Public exploit
SQL injection vulnerability in siteadmin/loginsucess.php in Pre Simple CMS allows remote attackers to execute arbitrary…
-
Unscored —CVE-2008-5057 Public exploit
SQL injection vulnerability in film.asp in Yigit Aybuga Dizi Portali allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2008-5060 Public exploit
Multiple PHP remote file inclusion vulnerabilities in ModernBill 4.4 and earlier allow remote attackers to execute arbi…
-
Unscored —CVE-2008-5054 Public exploit
Multiple SQL injection vulnerabilities in Develop It Easy Membership System 1.3 allow remote attackers to execute arbit…
-
Unscored —CVE-2008-5063 Public exploit
PHP remote file inclusion vulnerability in Admin/ADM_Pagina.php in OTManager 2.4 allows remote attackers to execute arb…
-
Unscored —CVE-2008-5061 Public exploit
Cross-site scripting (XSS) vulnerability in php/cal_default.php in Mini Web Calendar (mwcal) 1.2 allows remote attacker…
-
Unscored —CVE-2008-5059 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in ModernBill 4.4 and earlier allows remote attackers to inject a…
-
Unscored —
PHP remote file inclusion vulnerability in admin.rssreader.php in the Simple RSS Reader (com_rssreader) 1.0 component f…
-
Unscored —CVE-2008-5051 Public exploit
SQL injection vulnerability in the JooBlog (com_jb2) component 0.1.1 for Joomla! allows remote attackers to execute arb…
-
Unscored —CVE-2008-5046 Public exploit
SQL injection vulnerability in index.php in Mole Group Pizza Script allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2008-5048 Public exploit
Buffer overflow in Atepmon.sys in ISecSoft Anti-Trojan Elite 4.2.1 and earlier, and possibly 4.2.2, allows local users …
-
Unscored —CVE-2008-5047 Public exploit
SQL injection vulnerability in admin/index.php in Mole Group Rental Script allows remote attackers to execute arbitrary…
-
Unscored —CVE-2008-5049 Public exploit
Buffer overflow in AKEProtect.sys 3.3.3.0 in ISecSoft Anti-Keylogger Elite 3.3.0 and earlier, and possibly other versio…
-
Unscored —CVE-2008-5045 Public exploit
Heap-based buffer overflow in Network-Client FTP Now 2.6, and possibly other versions, allows remote FTP servers to cau…
-
Unscored —
Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2…
-
Unscored —
Cross-domain vulnerability in Microsoft XML Core Services 3.0 and 4.0, as used in Internet Explorer, allows remote atta…
-
Unscored —
Cross-domain vulnerability in Microsoft XML Core Services 3.0 through 6.0, as used in Microsoft Expression Web, Office,…
-
Unscored —CVE-2008-5044 Public exploit
Race condition in Microsoft Windows Server 2003 and Vista allows local users to cause a denial of service (crash or han…
-
Unscored —CVE-2008-5042 Public exploit
Zeeways PhotoVideoTube 1.1 and earlier allows remote attackers to bypass authentication and perform administrative task…
-
Unscored —CVE-2008-5039 Public exploit
Cross-site scripting (XSS) vulnerability in the League module for PHP-Nuke, possibly 2.4, allows remote attackers to in…
-
Unscored —CVE-2008-5037 Public exploit
SQL injection vulnerability in view.php in ElkaGroup Image Gallery 1.0 allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2008-5040 Public exploit
Graphiks MyForum 1.3 allows remote attackers to bypass authentication and gain administrative access by setting the (1)…
-
Unscored —
Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow user-assisted attackers to exec…