Archive
December 2008
Vulnerabilities first published in this month (UTC), newest first.
229 results · Clear filters · Feed
-
Unscored —CVE-2008-5332 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Pie 0.5.3 allow remote attackers to execute arbitrary PHP code vi…
-
Unscored —CVE-2008-5334 Public exploit
PHP remote file inclusion vulnerability in includes/common.php in NitroTech 0.0.3a allows remote attackers to execute a…
-
Unscored —CVE-2008-5333 Public exploit
SQL injection vulnerability in members.php in NitroTech 0.0.3a allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2008-5337 Public exploit
SQL injection vulnerability in lyrics.php in Bandwebsite (aka Bandsite portal system) 1.5 allows remote attackers to ex…
-
Unscored —CVE-2008-5336 Public exploit
SQL injection vulnerability in index.php in WebStudio CMS allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2008-5335 Public exploit
SQL injection vulnerability in messages.php in PHP-Fusion 6.01.15 and 7.00.1, when magic_quotes_gpc is disabled, allows…
-
Unscored —CVE-2008-5330 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the web interface in ClearCase RWP server in IBM Rational ClearC…
-
Unscored —CVE-2008-5320 Public exploit
SQL injection vulnerability in usersettings.php in e107 0.7.13 and earlier allows remote authenticated users to execute…
-
Unscored —CVE-2008-5322 Public exploit
Wysi Wiki Wyg 1.0 allows remote attackers to obtain system information via an invalid categup parameter to index.php, w…
-
Unscored —CVE-2008-5321 Public exploit
SQL injection vulnerability in index.php in GesGaleri, a module for XOOPS, allows remote attackers to execute arbitrary…
-
Unscored —CVE-2008-5323 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Wysi Wiki Wyg 1.0 allows remote attackers to inject arbitrary …
-
Unscored —CVE-2008-3058 Public exploit
Multiple SQL injection vulnerabilities in Octeth Oempro 3.5.5.1, and possibly other versions before 4, allow remote att…
-
Unscored —CVE-2008-5314 Public exploit
Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote attackers to cause a denia…
-
Unscored —CVE-2008-5309 Public exploit
SQL injection vulnerability in NetArt Media Real Estate Portal 1.2 allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2008-5306 Public exploit
SQL injection vulnerability in admin/index.php in PG Real Estate Solution allows remote attackers to execute arbitrary …
-
Unscored —CVE-2008-5310 Public exploit
SQL injection vulnerability in image.php in NetArt Media Car Portal 2.0 allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2008-5311 Public exploit
SQL injection vulnerability in image.php in NetArt Media Blog System 1.5 allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2008-5308 Public exploit
The Simple Forum 3.1d module for LoveCMS 1.6.2 Final does not properly restrict access to administrator functions, whic…
-
Unscored —CVE-2008-5307 Public exploit
SQL injection vulnerability in admin/index.php in PG Roommate Finder Solution allows remote attackers to execute arbitr…
-
Unscored —CVE-2008-5295 Public exploit
SQL injection vulnerability in index.php in Jamit Job Board 3.4.10 allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2008-5294 Public exploit
SQL injection vulnerability in index.php in WebStudio eCatalogue allows remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2008-5288 Public exploit
PHP remote file inclusion vulnerability in include/header.php in Werner Hilversum FAQ Manager 1.2, when register_global…
-
Unscored —CVE-2008-5293 Public exploit
SQL injection vulnerability in index.php in WebStudio eHotel allows remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2008-5287 Public exploit
SQL injection vulnerability in catagorie.php in Werner Hilversum FAQ Manager 1.2 allows remote attackers to execute arb…
-
Unscored —CVE-2008-5291 Public exploit
Directory traversal vulnerability in code/track.php in FuzzyLime 3.03 allows remote attackers to include and execute ar…
-
Unscored —CVE-2008-5290 Public exploit
Cross-site scripting (XSS) vulnerability in full_txt.php in Werner Hilversum Clean CMS 1.5 allows remote attackers to i…
-
Unscored —CVE-2008-5289 Public exploit
SQL injection vulnerability in full_txt.php in Werner Hilversum Clean CMS 1.5 allows remote attackers to execute arbitr…
-
Unscored —
Buffer overflow in No-IP DUC 2.1.7 and earlier allows remote HTTP servers to execute arbitrary code via a crafted respo…
-
Unscored —CVE-2008-5292 Public exploit
SQL injection vulnerability in view_snaps.php in VideoGirls BiZ allows remote attackers to execute arbitrary SQL comman…