Archive
December 2008
Vulnerabilities first published in this month (UTC), newest first.
528 results · Feed
-
Unscored —CVE-2008-5605 Public exploit
Multiple SQL injection vulnerabilities in ASP Portal allow remote attackers to execute arbitrary SQL commands via the (…
-
Unscored —CVE-2008-5607 Public exploit
SQL injection vulnerability in the JMovies (aka JM or com_jmovies) component 1.1 for Joomla! allows remote attackers to…
-
Unscored —CVE-2008-5594 Public exploit
Multiple directory traversal vulnerabilities in index.php in Mini Blog 1.0.1 allow remote attackers to include and exec…
-
Unscored —CVE-2008-5595 Public exploit
SQL injection vulnerability in detail.asp in ASP AutoDealer allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2008-5601 Public exploit
User Engine Lite ASP stores sensitive information under the web root with insufficient access control, which allows rem…
-
Unscored —CVE-2008-5602 Public exploit
Natterchat 1.12 stores sensitive information under the web root with insufficient access control, which allows remote a…
-
Unscored —CVE-2008-5598 Public exploit
Directory traversal vulnerability in index.php in PHPmyGallery 1.51 gold allows remote attackers to list arbitrary dire…
-
Unscored —CVE-2008-5593 Public exploit
Multiple directory traversal vulnerabilities in index.php in Mini CMS 1.0.1 allow remote attackers to include and execu…
-
Unscored —CVE-2008-5590 Public exploit
SQL injection vulnerability in customer.forumtopic.php in Kalptaru Infotech Product Sale Framework 0.1 beta allows remo…
-
Unscored —CVE-2008-5608 Public exploit
ASP AutoDealer stores sensitive information under the web root with insufficient access control, which allows remote at…
-
Unscored —CVE-2008-5606 Public exploit
Gazatem QMail Mailing List Manager 1.2 stores sensitive information under the web root with insufficient access control…
-
Unscored —CVE-2008-5586 Public exploit
SQL injection vulnerability in findoffice.php in Check Up New Generation (aka Check New) 4.52, when magic_quotes_gpc is…
-
Unscored —CVE-2008-5585 Public exploit
Multiple PHP remote file inclusion vulnerabilities in lcxBBportal 0.1 Alpha 2 allow remote attackers to execute arbitra…
-
Unscored —CVE-2008-5596 Public exploit
Ikon AdManager 2.1 and earlier stores sensitive information under the web root with insufficient access control, which …
-
Unscored —CVE-2008-5600 Public exploit
Merlix Teamworx Server stores sensitive information under the web root with insufficient access control, which allows r…
-
Unscored —CVE-2008-5589 Public exploit
SQL injection vulnerability in processlogin.asp in Katy Whitton RankEm allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2008-5603 Public exploit
ASPTicker 1.0 stores sensitive information under the web root with insufficient access control, which allows remote att…
-
Unscored —CVE-2008-5591 Public exploit
Cross-site scripting (XSS) vulnerability in login.asp in Nightfall Personal Diary 1.0 allows remote attackers to inject…
-
Unscored —CVE-2008-5588 Public exploit
SQL injection vulnerability in rankup.asp in Katy Whitton RankEm allows remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2008-5566 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Triangle Solutions PHP Multiple Newsletters 2.7 allows remote …
-
Unscored —CVE-2008-5576 Public exploit
admin/forums.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allows remote attackers to bypass authentication and gain admini…
-
Unscored —
Aruba Mobility Controller 2.4.8.x-FIPS, 2.5.x, 3.1.x, 3.2.x, 3.3.1.x, and 3.3.2.x allows remote attackers to cause a de…
-
Unscored —CVE-2008-5577 Public exploit
PHP remote file inclusion vulnerability in index.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allows remote attackers to e…
-
Unscored —CVE-2008-5574 Public exploit
SQL injection vulnerability in member.php in Webmaster Marketplace allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2008-5578 Public exploit
Multiple SQL injection vulnerabilities in index.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allow remote attackers to exe…
-
Unscored —CVE-2008-5570 Public exploit
Directory traversal vulnerability in index.php in PHP Multiple Newsletters 2.7, when magic_quotes_gpc is disabled, allo…
-
Unscored —CVE-2008-5569 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in PHPepperShop 1.4 allow remote attackers to inject arbitrary web …
-
Unscored —
Session fixation vulnerability in Pro Clan Manager 0.4.2 and earlier allows remote attackers to hijack web sessions by …
-
Unscored —CVE-2008-5559 Public exploit
SQL injection vulnerability in sendcard.cfm in PostEcards allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2008-5567 Public exploit
Cross-site request forgery (CSRF) vulnerability in admin/ad_settings.php in Bonza Cart 1.10 and earlier allows remote a…
-
Unscored —CVE-2008-5565 Public exploit
Cross-site request forgery (CSRF) vulnerability in admin/settings.php in DL PayCart 1.34 and earlier allows remote atta…
-
Unscored —
Unspecified vulnerability in the media server in Orb Networks Orb before 2.01.0025 allows remote attackers to cause a d…
-
Unscored —CVE-2008-5562 Public exploit
ASPPortal stores sensitive information under the web root with insufficient access control, which allows remote attacke…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in index.php in ProjectPier 0.8 and earlier allows remote attackers to …
-
Unscored —CVE-2008-5571 Public exploit
SQL injection vulnerability in admin/login.asp in Professional Download Assistant 0.1 allows remote attackers to execut…
-
Unscored —CVE-2008-5568 Public exploit
Cross-site request forgery (CSRF) vulnerability in admin/settings.php in IPN Pro 3 1.44 and earlier allows remote attac…
-
Unscored —CVE-2008-5580 Public exploit
mini-pub.php/front-end/cat.php in mini-pub 0.3 allows remote attackers to execute arbitrary commands via shell metachar…
-
Unscored —CVE-2008-5581 Public exploit
PHP remote file inclusion vulnerability in mini-pub.php/front-end/img.php in mini-pub 0.3 allows remote attackers to ex…
-
Unscored —CVE-2008-5582 Public exploit
SQL injection vulnerability in utilities/login.asp in Nukedit 4.9.x, and possibly earlier, allows remote attackers to e…
-
Unscored —CVE-2008-5560 Public exploit
PostEcards stores sensitive information under the web root with insufficient access control, which allows remote attack…