Skip to content
OpenAdvisories

Archive

31 December 2008

Vulnerabilities first published on this day (UTC), newest first.

26 results · Feed

  • Unscored —
    CVE-2008-5794 Public exploit

    Directory traversal vulnerability in system/admin/images.php in LoveCMS 1.6.2 Final allows remote attackers to delete a…

  • Unscored —
    CVE-2008-5802 Public exploit

    SQL injection vulnerability in index.php in E-topbiz Online Store 1.0 allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2008-5806 Public exploit

    SQL injection vulnerability in login.php in DeltaScripts PHP Classifieds 7.5 and earlier allows remote attackers to exe…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the eluna Page Comments (eluna_pagecomments) extension 1.1.2 and earlier fo…

  • Unscored —
    CVE-2008-5783 Public exploit

    admin/index.php in V3 Chat Live Support 3.0.4 allows remote attackers to bypass authentication and gain administrative …

  • Unscored —

    Unspecified vulnerability in the Dictionary (rtgdictionary) extension 0.1.9 and earlier for TYPO3 allows attackers to e…

  • Unscored —

    SQL injection vulnerability in the eluna Page Comments (eluna_pagecomments) extension 1.1.2 and earlier for TYPO3 allow…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the Silva Find extension 1.1.5 and earlier in Silva 1.x before 1.6.3.2, Sil…

  • Unscored —
    CVE-2008-5789 Public exploit EPSS 45%

    Multiple PHP remote file inclusion vulnerabilities in the Recly Interactive Feederator (com_feederator) component 1.0.5…

  • Unscored —
    CVE-2008-5790 Public exploit EPSS 36%

    Multiple PHP remote file inclusion vulnerabilities in the Recly!Competitions (com_competitions) component 1.0 for Jooml…

  • Unscored —
    CVE-2008-5784 Public exploit

    V3 Chat - Profiles/Dating Script 3.0.2 allows remote attackers to bypass authentication and gain administrative access …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the Wir ber uns (fsmi_people) extension 0.0.24 and earlier for TYPO3 allows…

  • Unscored —
    CVE-2008-5803 Public exploit

    SQL injection vulnerability in admin/login.php in E-topbiz Online Store 1.0 allows remote attackers to execute arbitrar…

  • Unscored —

    SQL injection vulnerability in the Wir ber uns [sic] (fsmi_people) extension 0.0.24 and earlier for TYPO3 allows remote…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in TestLink before 1.8 RC1 allow remote attackers to inject arbitra…

  • Unscored —
    CVE-2008-5805 Public exploit

    SQL injection vulnerability in detail.php in DeltaScripts PHP Classifieds 7.5 and earlier allows remote attackers to ex…

  • Unscored —
    CVE-2008-5785 Public exploit

    SQL injection vulnerability in V3 Chat - Profiles/Dating Script 3.0.2 allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2008-5788 Public exploit

    SQL injection vulnerability in index.php in Domain Seller Pro 1.5 allows remote attackers to execute arbitrary SQL comm…

  • Unscored —

    Multiple unspecified vulnerabilities in PrestaShop e-Commerce Solution before 1.1 Beta 2 (aka 1.1.0.1) have unknown imp…

  • Unscored —

    SQL injection vulnerability in the CMS Poll system (cms_poll) extension before 0.1.1 for TYPO3 allows remote attackers …

  • Unscored —

    SQL injection vulnerability in the advCalendar extension 0.3.1 and earlier for TYPO3 allows remote attackers to execute…

  • Unscored —
    CVE-2008-5787 Public exploit

    Directory traversal vulnerability in mod.php in Arab Portal 2.1 on Windows allows remote attackers to read arbitrary fi…

  • Unscored —
    CVE-2008-5804 Public exploit

    SQL injection vulnerability in admin/admin_catalog.php in e-topbiz Number Links 1 Php Script allows remote attackers to…

  • Unscored —
    CVE-2008-5782 Public exploit

    SQL injection vulnerability in bannerclick.php in ZeeMatri 3.0 allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2008-5793 Public exploit EPSS 24%

    Multiple PHP remote file inclusion vulnerabilities in the Clickheat - Heatmap stats (com_clickheat) component 1.0.1 for…

  • Unscored —
    CVE-2008-5792 Public exploit

    PHP remote file inclusion vulnerability in show_joined.php in Indiscripts Enthusiast 3.1.4, and possibly earlier, allow…