Skip to content
OpenAdvisories

Archive

December 2008

Vulnerabilities first published in this month (UTC), newest first.

229 results · Clear filters · Feed

  • Unscored —
    CVE-2008-5794 Public exploit

    Directory traversal vulnerability in system/admin/images.php in LoveCMS 1.6.2 Final allows remote attackers to delete a…

  • Unscored —
    CVE-2008-5802 Public exploit

    SQL injection vulnerability in index.php in E-topbiz Online Store 1.0 allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2008-5806 Public exploit

    SQL injection vulnerability in login.php in DeltaScripts PHP Classifieds 7.5 and earlier allows remote attackers to exe…

  • Unscored —
    CVE-2008-5783 Public exploit

    admin/index.php in V3 Chat Live Support 3.0.4 allows remote attackers to bypass authentication and gain administrative …

  • Unscored —
    CVE-2008-5789 Public exploit EPSS 45%

    Multiple PHP remote file inclusion vulnerabilities in the Recly Interactive Feederator (com_feederator) component 1.0.5…

  • Unscored —
    CVE-2008-5790 Public exploit EPSS 36%

    Multiple PHP remote file inclusion vulnerabilities in the Recly!Competitions (com_competitions) component 1.0 for Jooml…

  • Unscored —
    CVE-2008-5784 Public exploit

    V3 Chat - Profiles/Dating Script 3.0.2 allows remote attackers to bypass authentication and gain administrative access …

  • Unscored —
    CVE-2008-5803 Public exploit

    SQL injection vulnerability in admin/login.php in E-topbiz Online Store 1.0 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2008-5805 Public exploit

    SQL injection vulnerability in detail.php in DeltaScripts PHP Classifieds 7.5 and earlier allows remote attackers to ex…

  • Unscored —
    CVE-2008-5785 Public exploit

    SQL injection vulnerability in V3 Chat - Profiles/Dating Script 3.0.2 allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2008-5788 Public exploit

    SQL injection vulnerability in index.php in Domain Seller Pro 1.5 allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2008-5787 Public exploit

    Directory traversal vulnerability in mod.php in Arab Portal 2.1 on Windows allows remote attackers to read arbitrary fi…

  • Unscored —
    CVE-2008-5804 Public exploit

    SQL injection vulnerability in admin/admin_catalog.php in e-topbiz Number Links 1 Php Script allows remote attackers to…

  • Unscored —
    CVE-2008-5782 Public exploit

    SQL injection vulnerability in bannerclick.php in ZeeMatri 3.0 allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2008-5793 Public exploit EPSS 24%

    Multiple PHP remote file inclusion vulnerabilities in the Clickheat - Heatmap stats (com_clickheat) component 1.0.1 for…

  • Unscored —
    CVE-2008-5792 Public exploit

    PHP remote file inclusion vulnerability in show_joined.php in Indiscripts Enthusiast 3.1.4, and possibly earlier, allow…

  • Unscored —
    CVE-2008-5777 Public exploit

    SQL injection vulnerability in index.php in CadeNix allows remote attackers to execute arbitrary SQL commands via the c…

  • Unscored —
    CVE-2008-5773 Public exploit

    Nukedit 4.9.8 stores sensitive information under the web root with insufficient access control, which allows remote att…

  • Unscored —
    CVE-2008-5768 Public exploit

    SQL injection vulnerability in print.php in the AM Events (aka Amevents) module 0.22 for XOOPS allows remote attackers …

  • Unscored —
    CVE-2008-5781 Public exploit

    SQL injection vulnerability in right.php in Cant Find A Gaming CMS (CFAGCMS) 1.0 Beta 1 allows remote attackers to exec…

  • Unscored —
    CVE-2008-5767 Public exploit

    SQL injection vulnerability in authors.asp in gNews Publisher allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2008-5776 Public exploit

    Multiple directory traversal vulnerabilities in Aperto Blog 0.1.1 allow remote attackers to include and execute arbitra…

  • Unscored —
    CVE-2008-5762 Public exploit

    Simple Text-File Login Script (SiTeFiLo) 1.0.6 stores sensitive information under the web root with insufficient access…

  • Unscored —
    CVE-2008-5771 Public exploit

    Directory traversal vulnerability in test.php in PHP Weather 2.2.2 allows remote attackers to include and execute arbit…

  • Unscored —
    CVE-2008-5761 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS (aka Flatnuke3) 2008-12-11 allow remote attackers to…

  • Unscored —
    CVE-2008-5780 Public exploit

    Forest Blog 1.3.2 stores sensitive information under the web root with insufficient access control, which allows remote…

  • Unscored —
    CVE-2008-5766 Public exploit

    SQL injection vulnerability in download.php in Farsi Script Faupload allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2008-5765 Public exploit

    WorkSimple 1.2.1 stores sensitive information under the web root with insufficient access control, which allows remote …

  • Unscored —
    CVE-2008-5779 Public exploit

    SQL injection vulnerability in lpro.php in Free Links Directory Script (FLDS) 1.2a allows remote attackers to execute a…

  • Unscored —
    CVE-2008-5775 Public exploit

    SQL injection vulnerability in categories.php in Aperto Blog 0.1.1 allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2008-5770 Public exploit

    Cross-site scripting (XSS) vulnerability in config/make_config.php in PHP Weather 2.2.2 allows remote attackers to inje…

  • Unscored —
    CVE-2008-5778 Public exploit

    SQL injection vulnerability in report.php in Free Links Directory Script (FLDS) 1.2a allows remote attackers to execute…

  • Unscored —
    CVE-2008-5772 Public exploit

    Multiple SQL injection vulnerabilities in ASPSiteWare RealtyListings 1.0 and 2.0 allow remote attackers to execute arbi…

  • Unscored —
    CVE-2008-5774 Public exploit

    Multiple SQL injection vulnerabilities in ASPSiteWare HomeBuilder 1.0 and 2.0 allow remote attackers to execute arbitra…

  • Unscored —
    CVE-2008-5764 Public exploit EPSS 45%

    PHP remote file inclusion vulnerability in calendar.php in WorkSimple 1.2.1, when register_globals is enabled, allows r…

  • Unscored —
    CVE-2008-5763 Public exploit EPSS 39%

    PHP remote file inclusion vulnerability in slogin_lib.inc.php in Simple Text-File Login Script (SiTeFiLo) 1.0.6 allows …

  • Unscored —
    CVE-2008-5759 Public exploit

    Cross-site scripting (XSS) vulnerability in FlatnuX CMS (aka Flatnuke3) 2008-12-11 allows remote attackers to inject ar…

  • Unscored —
    CVE-2008-5753 Public exploit

    Stack-based buffer overflow in BulletProof FTP Client 2.63 and 2010 allows user-assisted attackers to execute arbitrary…

  • Unscored —
    CVE-2008-5752 Public exploit

    Directory traversal vulnerability in getConfig.php in the Page Flip Image Gallery plugin 0.2.2 and earlier for WordPres…

  • Unscored —
    CVE-2008-5751 Public exploit

    SQL injection vulnerability in index.php in AlstraSoft Web Email Script Enterprise (ESE) allows remote attackers to exe…