Skip to content
OpenAdvisories

Archive

December 2008

Vulnerabilities first published in this month (UTC), newest first.

229 results · Clear filters · Feed

  • Unscored —
    CVE-2008-5332 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Pie 0.5.3 allow remote attackers to execute arbitrary PHP code vi…

  • Unscored —
    CVE-2008-5334 Public exploit

    PHP remote file inclusion vulnerability in includes/common.php in NitroTech 0.0.3a allows remote attackers to execute a…

  • Unscored —
    CVE-2008-5333 Public exploit

    SQL injection vulnerability in members.php in NitroTech 0.0.3a allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2008-5337 Public exploit

    SQL injection vulnerability in lyrics.php in Bandwebsite (aka Bandsite portal system) 1.5 allows remote attackers to ex…

  • Unscored —
    CVE-2008-5336 Public exploit

    SQL injection vulnerability in index.php in WebStudio CMS allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2008-5335 Public exploit

    SQL injection vulnerability in messages.php in PHP-Fusion 6.01.15 and 7.00.1, when magic_quotes_gpc is disabled, allows…

  • Unscored —
    CVE-2008-5330 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the web interface in ClearCase RWP server in IBM Rational ClearC…

  • Unscored —
    CVE-2008-5320 Public exploit

    SQL injection vulnerability in usersettings.php in e107 0.7.13 and earlier allows remote authenticated users to execute…

  • Unscored —
    CVE-2008-5322 Public exploit

    Wysi Wiki Wyg 1.0 allows remote attackers to obtain system information via an invalid categup parameter to index.php, w…

  • Unscored —
    CVE-2008-5321 Public exploit

    SQL injection vulnerability in index.php in GesGaleri, a module for XOOPS, allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2008-5323 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Wysi Wiki Wyg 1.0 allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2008-3058 Public exploit

    Multiple SQL injection vulnerabilities in Octeth Oempro 3.5.5.1, and possibly other versions before 4, allow remote att…

  • Unscored —
    CVE-2008-5314 Public exploit

    Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote attackers to cause a denia…

  • Unscored —
    CVE-2008-5309 Public exploit

    SQL injection vulnerability in NetArt Media Real Estate Portal 1.2 allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2008-5306 Public exploit

    SQL injection vulnerability in admin/index.php in PG Real Estate Solution allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2008-5310 Public exploit

    SQL injection vulnerability in image.php in NetArt Media Car Portal 2.0 allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2008-5311 Public exploit

    SQL injection vulnerability in image.php in NetArt Media Blog System 1.5 allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2008-5308 Public exploit

    The Simple Forum 3.1d module for LoveCMS 1.6.2 Final does not properly restrict access to administrator functions, whic…

  • Unscored —
    CVE-2008-5307 Public exploit

    SQL injection vulnerability in admin/index.php in PG Roommate Finder Solution allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2008-5295 Public exploit

    SQL injection vulnerability in index.php in Jamit Job Board 3.4.10 allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2008-5294 Public exploit

    SQL injection vulnerability in index.php in WebStudio eCatalogue allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2008-5288 Public exploit

    PHP remote file inclusion vulnerability in include/header.php in Werner Hilversum FAQ Manager 1.2, when register_global…

  • Unscored —
    CVE-2008-5293 Public exploit

    SQL injection vulnerability in index.php in WebStudio eHotel allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2008-5287 Public exploit

    SQL injection vulnerability in catagorie.php in Werner Hilversum FAQ Manager 1.2 allows remote attackers to execute arb…

  • Unscored —
    CVE-2008-5291 Public exploit

    Directory traversal vulnerability in code/track.php in FuzzyLime 3.03 allows remote attackers to include and execute ar…

  • Unscored —
    CVE-2008-5290 Public exploit

    Cross-site scripting (XSS) vulnerability in full_txt.php in Werner Hilversum Clean CMS 1.5 allows remote attackers to i…

  • Unscored —
    CVE-2008-5289 Public exploit

    SQL injection vulnerability in full_txt.php in Werner Hilversum Clean CMS 1.5 allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2008-5297 Public exploit EPSS 18%

    Buffer overflow in No-IP DUC 2.1.7 and earlier allows remote HTTP servers to execute arbitrary code via a crafted respo…

  • Unscored —
    CVE-2008-5292 Public exploit

    SQL injection vulnerability in view_snaps.php in VideoGirls BiZ allows remote attackers to execute arbitrary SQL comman…