Archive
January 2009
Vulnerabilities first published in this month (UTC), newest first.
234 results · Clear filters · Feed
-
Unscored —CVE-2008-5873 Public exploit
Yerba SACphp 6.3 and earlier allows remote attackers to bypass authentication and gain administrative access via a gall…
-
Unscored —CVE-2008-5868 Public exploit
Stack-based buffer overflow in IntelliTamper 2.07 and 2.08 allows user-assisted attackers to execute arbitrary code via…
-
Unscored —CVE-2008-5870 Public exploit
FastStone Image Viewer 3.6 allows user-assisted attackers to cause a denial of service (application crash) via a malfor…
-
Unscored —CVE-2008-5869 Public exploit
Cross-site scripting (XSS) vulnerability in the Proxim Wireless Tsunami MP.11 2411 with firmware 3.0.3 allows remote au…
-
Unscored —
Buffer overflow in net/sctp/sm_statefuns.c in the Stream Control Transmission Protocol (sctp) implementation in the Lin…
-
Unscored —CVE-2008-5856 Public exploit
Directory traversal vulnerability in scripts/export.php in ClaSS before 0.8.61 allows remote attackers to read arbitrar…
-
Unscored —CVE-2008-5860 Public exploit
Directory traversal vulnerability in backend/template.php in Constructr CMS 3.02.5 and earlier, when register_globals i…
-
Unscored —CVE-2008-5854 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in login.php in myPHPscripts Login Session 2.0 allow remote attacke…
-
Unscored —CVE-2008-5855 Public exploit
myPHPscripts Login Session 2.0 stores sensitive information under the web root with insufficient access control, which …
-
Unscored —CVE-2008-5852 Public exploit
Emefa Guestbook 3.0 stores sensitive information under the web root with insufficient access control, which allows remo…
-
Unscored —CVE-2008-5862 Public exploit
Directory traversal vulnerability in webcamXP 5.3.2.375 and 5.3.2.410 build 2132 allows remote attackers to read arbitr…
-
Unscored —CVE-2008-5864 Public exploit
SQL injection vulnerability in the Top Hotel (com_tophotelmodule) component 1.0 in the Hotel Booking Reservation System…
-
Unscored —CVE-2008-5851 Public exploit
SQL injection vulnerability in index.php in My PHP Baseball Stats (MyPBS) allows remote attackers to execute arbitrary …
-
Unscored —CVE-2008-5853 Public exploit
Chilek Content Management System (aka ChiCoMaS) 2.0.4 and earlier stores sensitive information under the web root with …
-
Unscored —CVE-2008-5859 Public exploit
SQL injection vulnerability in index.php in Constructr CMS 3.02.5 and earlier, when register_globals is enabled and mag…
-
Unscored —CVE-2008-5863 Public exploit
SQL injection vulnerability in locator.php in the Userlocator module 3.0 for Woltlab Burning Board (wBB) allows remote …
-
Unscored —CVE-2008-5865 Public exploit
SQL injection vulnerability in the com_hbssearch component 1.0 in the Hotel Booking Reservation System (aka HBS) 1.0.0 …
-
Unscored —CVE-2008-5861 Public exploit
Directory traversal vulnerability in source.php in FreeLyrics 1.0 allows remote attackers to read arbitrary files via d…
-
Critical 9.8
The MD5 Message-Digest Algorithm is not collision resistant, which makes it easier for context-dependent attackers to c…
-
Unscored —CVE-2008-5847 Public exploit
Constructr CMS 3.02.5 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent att…
-
Unscored —CVE-2008-5839 Public exploit
Buffer overflow in Foxmail 6.5 allows remote attackers to execute arbitrary code via a long mailto URI in the HREF attr…
-
Unscored —CVE-2008-5840 Public exploit
PHP iCalendar 2.24 and earlier allows remote attackers to bypass authentication by setting the phpicalendar and phpical…
-
Unscored —CVE-2008-5838 Public exploit
SQL injection vulnerability in search_results.php in E-Php Scripts E-Shop (aka E-Php Shopping Cart) Shopping Cart Scrip…
-
Unscored —CVE-2008-5841 Public exploit
Multiple SQL injection vulnerabilities in iGaming 1.5 and earlier allow remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2008-5824 Public exploit
Heap-based buffer overflow in msadpcm.c in libaudiofile in audiofile 0.2.6 allows context-dependent attackers to cause …
-
Unscored —CVE-2008-5821 Public exploit
Memory leak in WebKit.dll in WebKit, as used by Apple Safari 3.2 on Windows Vista SP1, allows remote attackers to cause…
-
Unscored —CVE-2008-5811 Public exploit
SQL injection vulnerability in the PaxGallery (com_paxgallery) component 0.1 for Joomla! allows remote attackers to exe…
-
Unscored —CVE-2008-5816 Public exploit
SQL injection vulnerability in repository.php in ILIAS 3.7.4 and earlier allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2008-5819 Public exploit
Directory traversal vulnerability in eDNews_archive.php in eDreamers eDNews 2, when magic_quotes_gpc is disabled, allow…
-
Unscored —CVE-2008-5818 Public exploit
Directory traversal vulnerability in index.php in eDreamers eDContainer 2.22, when magic_quotes_gpc is disabled, allows…
-
Unscored —CVE-2008-5817 Public exploit
Multiple SQL injection vulnerabilities in index.php in Web Scribble Solutions webClassifieds 2005 allow remote attacker…
-
Unscored —CVE-2008-5815 Public exploit
SQL injection vulnerability in Acomment.php in phpAlumni allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2008-5820 Public exploit
SQL injection vulnerability in eDNews_view.php in eDreamers eDNews 2 allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2006-7236 Public exploit
The default configuration of xterm on Debian GNU/Linux sid and possibly Ubuntu enables the allowWindowOps resource, whi…