Skip to content
OpenAdvisories

Archive

30 December 2008

Vulnerabilities first published on this day (UTC), newest first.

27 results · Clear filters · Feed

  • Unscored —
    CVE-2008-5777 Public exploit

    SQL injection vulnerability in index.php in CadeNix allows remote attackers to execute arbitrary SQL commands via the c…

  • Unscored —
    CVE-2008-5773 Public exploit

    Nukedit 4.9.8 stores sensitive information under the web root with insufficient access control, which allows remote att…

  • Unscored —
    CVE-2008-5768 Public exploit

    SQL injection vulnerability in print.php in the AM Events (aka Amevents) module 0.22 for XOOPS allows remote attackers …

  • Unscored —
    CVE-2008-5781 Public exploit

    SQL injection vulnerability in right.php in Cant Find A Gaming CMS (CFAGCMS) 1.0 Beta 1 allows remote attackers to exec…

  • Unscored —
    CVE-2008-5767 Public exploit

    SQL injection vulnerability in authors.asp in gNews Publisher allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2008-5776 Public exploit

    Multiple directory traversal vulnerabilities in Aperto Blog 0.1.1 allow remote attackers to include and execute arbitra…

  • Unscored —
    CVE-2008-5762 Public exploit

    Simple Text-File Login Script (SiTeFiLo) 1.0.6 stores sensitive information under the web root with insufficient access…

  • Unscored —
    CVE-2008-5771 Public exploit

    Directory traversal vulnerability in test.php in PHP Weather 2.2.2 allows remote attackers to include and execute arbit…

  • Unscored —
    CVE-2008-5761 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS (aka Flatnuke3) 2008-12-11 allow remote attackers to…

  • Unscored —
    CVE-2008-5780 Public exploit

    Forest Blog 1.3.2 stores sensitive information under the web root with insufficient access control, which allows remote…

  • Unscored —
    CVE-2008-5766 Public exploit

    SQL injection vulnerability in download.php in Farsi Script Faupload allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2008-5765 Public exploit

    WorkSimple 1.2.1 stores sensitive information under the web root with insufficient access control, which allows remote …

  • Unscored —
    CVE-2008-5779 Public exploit

    SQL injection vulnerability in lpro.php in Free Links Directory Script (FLDS) 1.2a allows remote attackers to execute a…

  • Unscored —
    CVE-2008-5775 Public exploit

    SQL injection vulnerability in categories.php in Aperto Blog 0.1.1 allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2008-5770 Public exploit

    Cross-site scripting (XSS) vulnerability in config/make_config.php in PHP Weather 2.2.2 allows remote attackers to inje…

  • Unscored —
    CVE-2008-5778 Public exploit

    SQL injection vulnerability in report.php in Free Links Directory Script (FLDS) 1.2a allows remote attackers to execute…

  • Unscored —
    CVE-2008-5772 Public exploit

    Multiple SQL injection vulnerabilities in ASPSiteWare RealtyListings 1.0 and 2.0 allow remote attackers to execute arbi…

  • Unscored —
    CVE-2008-5774 Public exploit

    Multiple SQL injection vulnerabilities in ASPSiteWare HomeBuilder 1.0 and 2.0 allow remote attackers to execute arbitra…

  • Unscored —
    CVE-2008-5764 Public exploit EPSS 45%

    PHP remote file inclusion vulnerability in calendar.php in WorkSimple 1.2.1, when register_globals is enabled, allows r…

  • Unscored —
    CVE-2008-5763 Public exploit EPSS 39%

    PHP remote file inclusion vulnerability in slogin_lib.inc.php in Simple Text-File Login Script (SiTeFiLo) 1.0.6 allows …

  • Unscored —
    CVE-2008-5759 Public exploit

    Cross-site scripting (XSS) vulnerability in FlatnuX CMS (aka Flatnuke3) 2008-12-11 allows remote attackers to inject ar…

  • Unscored —
    CVE-2008-5753 Public exploit

    Stack-based buffer overflow in BulletProof FTP Client 2.63 and 2010 allows user-assisted attackers to execute arbitrary…

  • Unscored —
    CVE-2008-5752 Public exploit

    Directory traversal vulnerability in getConfig.php in the Page Flip Image Gallery plugin 0.2.2 and earlier for WordPres…

  • Unscored —
    CVE-2008-5751 Public exploit

    SQL injection vulnerability in index.php in AlstraSoft Web Email Script Enterprise (ESE) allows remote attackers to exe…

  • Unscored —
    CVE-2008-5755 Public exploit

    Stack-based buffer overflow in IntelliTamper 2.07 and 2.08 allows remote attackers to execute arbitrary code via a MAP …

  • Unscored —
    CVE-2008-5756 Public exploit

    Buffer overflow in BreakPoint Software Hex Workshop 5.1.4 allows user-assisted attackers to cause a denial of service a…

  • Unscored —
    CVE-2008-5754 Public exploit

    Stack-based buffer overflow in BulletProof FTP Client allows user-assisted attackers to execute arbitrary code via a .b…