Skip to content
OpenAdvisories

Archive

16 December 2008

Vulnerabilities first published on this day (UTC), newest first.

24 results · Feed

  • Unscored —
    CVE-2008-5604 Public exploit

    Directory traversal vulnerability in index.php in My Simple Forum 3.0 and 4.1, when magic_quotes_gpc is disabled, allow…

  • Unscored —
    CVE-2008-5597 Public exploit

    Cold BBS stores sensitive information under the web root with insufficient access control, which allows remote attacker…

  • Unscored —
    CVE-2008-5599 Public exploit

    SQL injection vulnerability in default.asp in Merlix Teamworx Server allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2008-5587 Public exploit Scanner template EPSS 13%

    Directory traversal vulnerability in libraries/lib.inc.php in phpPgAdmin 4.2.1 and earlier, when register_globals is en…

  • Unscored —
    CVE-2008-5592 Public exploit

    Nightfall Personal Diary 1.0 stores sensitive information under the web root with insufficient access control, which al…

  • Unscored —
    CVE-2008-5605 Public exploit

    Multiple SQL injection vulnerabilities in ASP Portal allow remote attackers to execute arbitrary SQL commands via the (…

  • Unscored —
    CVE-2008-5607 Public exploit

    SQL injection vulnerability in the JMovies (aka JM or com_jmovies) component 1.1 for Joomla! allows remote attackers to…

  • Unscored —
    CVE-2008-5594 Public exploit

    Multiple directory traversal vulnerabilities in index.php in Mini Blog 1.0.1 allow remote attackers to include and exec…

  • Unscored —
    CVE-2008-5595 Public exploit

    SQL injection vulnerability in detail.asp in ASP AutoDealer allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2008-5601 Public exploit

    User Engine Lite ASP stores sensitive information under the web root with insufficient access control, which allows rem…

  • Unscored —
    CVE-2008-5602 Public exploit

    Natterchat 1.12 stores sensitive information under the web root with insufficient access control, which allows remote a…

  • Unscored —
    CVE-2008-5598 Public exploit

    Directory traversal vulnerability in index.php in PHPmyGallery 1.51 gold allows remote attackers to list arbitrary dire…

  • Unscored —
    CVE-2008-5593 Public exploit

    Multiple directory traversal vulnerabilities in index.php in Mini CMS 1.0.1 allow remote attackers to include and execu…

  • Unscored —
    CVE-2008-5590 Public exploit

    SQL injection vulnerability in customer.forumtopic.php in Kalptaru Infotech Product Sale Framework 0.1 beta allows remo…

  • Unscored —
    CVE-2008-5608 Public exploit

    ASP AutoDealer stores sensitive information under the web root with insufficient access control, which allows remote at…

  • Unscored —
    CVE-2008-5606 Public exploit

    Gazatem QMail Mailing List Manager 1.2 stores sensitive information under the web root with insufficient access control…

  • Unscored —
    CVE-2008-5586 Public exploit

    SQL injection vulnerability in findoffice.php in Check Up New Generation (aka Check New) 4.52, when magic_quotes_gpc is…

  • Unscored —
    CVE-2008-5585 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in lcxBBportal 0.1 Alpha 2 allow remote attackers to execute arbitra…

  • Unscored —
    CVE-2008-5596 Public exploit

    Ikon AdManager 2.1 and earlier stores sensitive information under the web root with insufficient access control, which …

  • Unscored —
    CVE-2008-5600 Public exploit

    Merlix Teamworx Server stores sensitive information under the web root with insufficient access control, which allows r…

  • Unscored —
    CVE-2008-5589 Public exploit

    SQL injection vulnerability in processlogin.asp in Katy Whitton RankEm allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2008-5603 Public exploit

    ASPTicker 1.0 stores sensitive information under the web root with insufficient access control, which allows remote att…

  • Unscored —
    CVE-2008-5591 Public exploit

    Cross-site scripting (XSS) vulnerability in login.asp in Nightfall Personal Diary 1.0 allows remote attackers to inject…

  • Unscored —
    CVE-2008-5588 Public exploit

    SQL injection vulnerability in rankup.asp in Katy Whitton RankEm allows remote attackers to execute arbitrary SQL comma…