December 2008

528 results · Feed

• Unscored —
  CVE-2008-5794 Public exploit

  Directory traversal vulnerability in system/admin/images.php in LoveCMS 1.6.2 Final allows remote attackers to delete a…

  Dec 31, 2008
• Unscored —
  CVE-2008-5802 Public exploit

  SQL injection vulnerability in index.php in E-topbiz Online Store 1.0 allows remote attackers to execute arbitrary SQL …

  Dec 31, 2008
• Unscored —
  CVE-2008-5806 Public exploit

  SQL injection vulnerability in login.php in DeltaScripts PHP Classifieds 7.5 and earlier allows remote attackers to exe…

  Dec 31, 2008
• Unscored —
  CVE-2008-5795

  Cross-site scripting (XSS) vulnerability in the eluna Page Comments (eluna_pagecomments) extension 1.1.2 and earlier fo…

  Dec 31, 2008
• Unscored —
  CVE-2008-5783 Public exploit

  admin/index.php in V3 Chat Live Support 3.0.4 allows remote attackers to bypass authentication and gain administrative …

  Dec 31, 2008
• Unscored —
  CVE-2008-5801

  Unspecified vulnerability in the Dictionary (rtgdictionary) extension 0.1.9 and earlier for TYPO3 allows attackers to e…

  Dec 31, 2008
• Unscored —
  CVE-2008-5796

  SQL injection vulnerability in the eluna Page Comments (eluna_pagecomments) extension 1.1.2 and earlier for TYPO3 allow…

  Dec 31, 2008
• Unscored —
  CVE-2008-5786

  Cross-site scripting (XSS) vulnerability in the Silva Find extension 1.1.5 and earlier in Silva 1.x before 1.6.3.2, Sil…

  Dec 31, 2008
• Unscored —
  CVE-2008-5789 Public exploit EPSS 45%

  Multiple PHP remote file inclusion vulnerabilities in the Recly Interactive Feederator (com_feederator) component 1.0.5…

  Dec 31, 2008
• Unscored —
  CVE-2008-5790 Public exploit EPSS 36%

  Multiple PHP remote file inclusion vulnerabilities in the Recly!Competitions (com_competitions) component 1.0 for Jooml…

  Dec 31, 2008
• Unscored —
  CVE-2008-5784 Public exploit

  V3 Chat - Profiles/Dating Script 3.0.2 allows remote attackers to bypass authentication and gain administrative access …

  Dec 31, 2008
• Unscored —
  CVE-2008-5799

  Cross-site scripting (XSS) vulnerability in the Wir ber uns (fsmi_people) extension 0.0.24 and earlier for TYPO3 allows…

  Dec 31, 2008
• Unscored —
  CVE-2008-5803 Public exploit

  SQL injection vulnerability in admin/login.php in E-topbiz Online Store 1.0 allows remote attackers to execute arbitrar…

  Dec 31, 2008
• Unscored —
  CVE-2008-5800

  SQL injection vulnerability in the Wir ber uns [sic] (fsmi_people) extension 0.0.24 and earlier for TYPO3 allows remote…

  Dec 31, 2008
• Unscored —
  CVE-2008-5807

  Multiple cross-site scripting (XSS) vulnerabilities in TestLink before 1.8 RC1 allow remote attackers to inject arbitra…

  Dec 31, 2008
• Unscored —
  CVE-2008-5805 Public exploit

  SQL injection vulnerability in detail.php in DeltaScripts PHP Classifieds 7.5 and earlier allows remote attackers to ex…

  Dec 31, 2008
• Unscored —
  CVE-2008-5785 Public exploit

  SQL injection vulnerability in V3 Chat - Profiles/Dating Script 3.0.2 allows remote attackers to execute arbitrary SQL …

  Dec 31, 2008
• Unscored —
  CVE-2008-5788 Public exploit

  SQL injection vulnerability in index.php in Domain Seller Pro 1.5 allows remote attackers to execute arbitrary SQL comm…

  Dec 31, 2008
• Unscored —
  CVE-2008-5791

  Multiple unspecified vulnerabilities in PrestaShop e-Commerce Solution before 1.1 Beta 2 (aka 1.1.0.1) have unknown imp…

  Dec 31, 2008
• Unscored —
  CVE-2008-5798

  SQL injection vulnerability in the CMS Poll system (cms_poll) extension before 0.1.1 for TYPO3 allows remote attackers …

  Dec 31, 2008
• Unscored —
  CVE-2008-5797

  SQL injection vulnerability in the advCalendar extension 0.3.1 and earlier for TYPO3 allows remote attackers to execute…

  Dec 31, 2008
• Unscored —
  CVE-2008-5787 Public exploit

  Directory traversal vulnerability in mod.php in Arab Portal 2.1 on Windows allows remote attackers to read arbitrary fi…

  Dec 31, 2008
• Unscored —
  CVE-2008-5804 Public exploit

  SQL injection vulnerability in admin/admin_catalog.php in e-topbiz Number Links 1 Php Script allows remote attackers to…

  Dec 31, 2008
• Unscored —
  CVE-2008-5782 Public exploit

  SQL injection vulnerability in bannerclick.php in ZeeMatri 3.0 allows remote attackers to execute arbitrary SQL command…

  Dec 31, 2008
• Unscored —
  CVE-2008-5793 Public exploit EPSS 24%

  Multiple PHP remote file inclusion vulnerabilities in the Clickheat - Heatmap stats (com_clickheat) component 1.0.1 for…

  Dec 31, 2008
• Unscored —
  CVE-2008-5792 Public exploit

  PHP remote file inclusion vulnerability in show_joined.php in Indiscripts Enthusiast 3.1.4, and possibly earlier, allow…

  Dec 31, 2008
• Unscored —
  CVE-2008-5777 Public exploit

  SQL injection vulnerability in index.php in CadeNix allows remote attackers to execute arbitrary SQL commands via the c…

  Dec 30, 2008
• Unscored —
  CVE-2008-5769

  Multiple cross-site scripting (XSS) vulnerabilities in Kerio MailServer before 6.6.2 allow remote attackers to inject a…

  Dec 30, 2008
• Unscored —
  CVE-2008-5773 Public exploit

  Nukedit 4.9.8 stores sensitive information under the web root with insufficient access control, which allows remote att…

  Dec 30, 2008
• Unscored —
  CVE-2008-5768 Public exploit

  SQL injection vulnerability in print.php in the AM Events (aka Amevents) module 0.22 for XOOPS allows remote attackers …

  Dec 30, 2008
• Unscored —
  CVE-2008-5781 Public exploit

  SQL injection vulnerability in right.php in Cant Find A Gaming CMS (CFAGCMS) 1.0 Beta 1 allows remote attackers to exec…

  Dec 30, 2008
• Unscored —
  CVE-2008-5767 Public exploit

  SQL injection vulnerability in authors.asp in gNews Publisher allows remote attackers to execute arbitrary SQL commands…

  Dec 30, 2008
• Unscored —
  CVE-2008-5776 Public exploit

  Multiple directory traversal vulnerabilities in Aperto Blog 0.1.1 allow remote attackers to include and execute arbitra…

  Dec 30, 2008
• Unscored —
  CVE-2008-5762 Public exploit

  Simple Text-File Login Script (SiTeFiLo) 1.0.6 stores sensitive information under the web root with insufficient access…

  Dec 30, 2008
• Unscored —
  CVE-2008-5771 Public exploit

  Directory traversal vulnerability in test.php in PHP Weather 2.2.2 allows remote attackers to include and execute arbit…

  Dec 30, 2008
• Unscored —
  CVE-2008-5761 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS (aka Flatnuke3) 2008-12-11 allow remote attackers to…

  Dec 30, 2008
• Unscored —
  CVE-2008-5780 Public exploit

  Forest Blog 1.3.2 stores sensitive information under the web root with insufficient access control, which allows remote…

  Dec 30, 2008
• Unscored —
  CVE-2008-5766 Public exploit

  SQL injection vulnerability in download.php in Farsi Script Faupload allows remote attackers to execute arbitrary SQL c…

  Dec 30, 2008
• Unscored —
  CVE-2008-5765 Public exploit

  WorkSimple 1.2.1 stores sensitive information under the web root with insufficient access control, which allows remote …

  Dec 30, 2008
• Unscored —
  CVE-2008-5779 Public exploit

  SQL injection vulnerability in lpro.php in Free Links Directory Script (FLDS) 1.2a allows remote attackers to execute a…

  Dec 30, 2008