Skip to content
OpenAdvisories

Archive

December 2008

Vulnerabilities first published in this month (UTC), newest first.

← November 2008 2008 / December January 2009 →
  1. 120
  2. 26
  3. 317
  4. 4 
  5. 541
  6. 6 
  7. 7 
  8. 820
  9. 930
  10. 1041
  11. 1118
  12. 1249
  13. 131
  14. 14 
  15. 1526
  16. 1624
  17. 1772
  18. 1817
  19. 1926
  20. 20 
  21. 21 
  22. 2211
  23. 238
  24. 2410
  25. 25 
  26. 2627
  27. 27 
  28. 28 
  29. 297
  30. 3031
  31. 3126
All Critical High Medium Low Exploited only Public exploit

229 results · Clear filters · Feed

  • Unscored —
    CVE-2008-5621 Public exploit

    Cross-site request forgery (CSRF) vulnerability in phpMyAdmin 2.11.x before 2.11.9.4 and 3.x before 3.1.1.0 allows remo…

    phpmyadmin Debian
  • Unscored —
    CVE-2008-5081 Public exploit EPSS 59%

    The originates_from_local_legacy_unicast_socket function (avahi-core/server.c) in avahi-daemon in Avahi before 0.6.24 a…

    avahi Debian
  • High —
    CVE-2008-5619 Public exploit EPSS 59%

    PHPMailer susceptible to arbitrary code execution

    html2text.php in Chuggnutt HTML to Text Converter, as used in PHPMailer before 5.2.10, RoundCube Webmail (roundcubemail) 0.2-1.alpha and 0.2-3.beta, Mahara, and AtMail Open 1.03, allows remote attackers to execute arbitrary code via crafted input that is proc…

    roundcube phpmailer/phpmailer Debian Packagist
  • Unscored —
    CVE-2008-5604 Public exploit

    Directory traversal vulnerability in index.php in My Simple Forum 3.0 and 4.1, when magic_quotes_gpc is disabled, allow…

  • Unscored —
    CVE-2008-5597 Public exploit

    Cold BBS stores sensitive information under the web root with insufficient access control, which allows remote attacker…

  • Unscored —
    CVE-2008-5599 Public exploit

    SQL injection vulnerability in default.asp in Merlix Teamworx Server allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2008-5587 Public exploit Scanner template EPSS 13%

    Directory traversal vulnerability in libraries/lib.inc.php in phpPgAdmin 4.2.1 and earlier, when register_globals is en…

    phppgadmin Debian
  • Unscored —
    CVE-2008-5592 Public exploit

    Nightfall Personal Diary 1.0 stores sensitive information under the web root with insufficient access control, which al…

  • Unscored —
    CVE-2008-5605 Public exploit

    Multiple SQL injection vulnerabilities in ASP Portal allow remote attackers to execute arbitrary SQL commands via the (…

  • Unscored —
    CVE-2008-5607 Public exploit

    SQL injection vulnerability in the JMovies (aka JM or com_jmovies) component 1.1 for Joomla! allows remote attackers to…

  • Unscored —
    CVE-2008-5594 Public exploit

    Multiple directory traversal vulnerabilities in index.php in Mini Blog 1.0.1 allow remote attackers to include and exec…

  • Unscored —
    CVE-2008-5595 Public exploit

    SQL injection vulnerability in detail.asp in ASP AutoDealer allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2008-5601 Public exploit

    User Engine Lite ASP stores sensitive information under the web root with insufficient access control, which allows rem…

  • Unscored —
    CVE-2008-5602 Public exploit

    Natterchat 1.12 stores sensitive information under the web root with insufficient access control, which allows remote a…

  • Unscored —
    CVE-2008-5598 Public exploit

    Directory traversal vulnerability in index.php in PHPmyGallery 1.51 gold allows remote attackers to list arbitrary dire…

  • Unscored —
    CVE-2008-5593 Public exploit

    Multiple directory traversal vulnerabilities in index.php in Mini CMS 1.0.1 allow remote attackers to include and execu…

  • Unscored —
    CVE-2008-5590 Public exploit

    SQL injection vulnerability in customer.forumtopic.php in Kalptaru Infotech Product Sale Framework 0.1 beta allows remo…

  • Unscored —
    CVE-2008-5608 Public exploit

    ASP AutoDealer stores sensitive information under the web root with insufficient access control, which allows remote at…

  • Unscored —
    CVE-2008-5606 Public exploit

    Gazatem QMail Mailing List Manager 1.2 stores sensitive information under the web root with insufficient access control…

  • Unscored —
    CVE-2008-5586 Public exploit

    SQL injection vulnerability in findoffice.php in Check Up New Generation (aka Check New) 4.52, when magic_quotes_gpc is…

  • Unscored —
    CVE-2008-5585 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in lcxBBportal 0.1 Alpha 2 allow remote attackers to execute arbitra…

  • Unscored —
    CVE-2008-5596 Public exploit

    Ikon AdManager 2.1 and earlier stores sensitive information under the web root with insufficient access control, which …

  • Unscored —
    CVE-2008-5600 Public exploit

    Merlix Teamworx Server stores sensitive information under the web root with insufficient access control, which allows r…

  • Unscored —
    CVE-2008-5589 Public exploit

    SQL injection vulnerability in processlogin.asp in Katy Whitton RankEm allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2008-5603 Public exploit

    ASPTicker 1.0 stores sensitive information under the web root with insufficient access control, which allows remote att…

  • Unscored —
    CVE-2008-5591 Public exploit

    Cross-site scripting (XSS) vulnerability in login.asp in Nightfall Personal Diary 1.0 allows remote attackers to inject…

  • Unscored —
    CVE-2008-5588 Public exploit

    SQL injection vulnerability in rankup.asp in Katy Whitton RankEm allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2008-5566 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Triangle Solutions PHP Multiple Newsletters 2.7 allows remote …

  • Unscored —
    CVE-2008-5576 Public exploit

    admin/forums.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allows remote attackers to bypass authentication and gain admini…

  • Unscored —
    CVE-2008-5577 Public exploit

    PHP remote file inclusion vulnerability in index.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allows remote attackers to e…

  • Unscored —
    CVE-2008-5574 Public exploit

    SQL injection vulnerability in member.php in Webmaster Marketplace allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2008-5578 Public exploit

    Multiple SQL injection vulnerabilities in index.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allow remote attackers to exe…

  • Unscored —
    CVE-2008-5570 Public exploit

    Directory traversal vulnerability in index.php in PHP Multiple Newsletters 2.7, when magic_quotes_gpc is disabled, allo…

  • Unscored —
    CVE-2008-5569 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in PHPepperShop 1.4 allow remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2008-5559 Public exploit

    SQL injection vulnerability in sendcard.cfm in PostEcards allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2008-5567 Public exploit

    Cross-site request forgery (CSRF) vulnerability in admin/ad_settings.php in Bonza Cart 1.10 and earlier allows remote a…

  • Unscored —
    CVE-2008-5565 Public exploit

    Cross-site request forgery (CSRF) vulnerability in admin/settings.php in DL PayCart 1.34 and earlier allows remote atta…

  • Unscored —
    CVE-2008-5562 Public exploit

    ASPPortal stores sensitive information under the web root with insufficient access control, which allows remote attacke…

  • Unscored —
    CVE-2008-5571 Public exploit

    SQL injection vulnerability in admin/login.asp in Professional Download Assistant 0.1 allows remote attackers to execut…

  • Unscored —
    CVE-2008-5568 Public exploit

    Cross-site request forgery (CSRF) vulnerability in admin/settings.php in IPN Pro 3 1.44 and earlier allows remote attac…