CVE-2008-5000 to CVE-2008-5999

476 CVEs with public proof-of-concept exploits.

• CVE-2008-50001 PoCSQL injection vulnerability in admin/includes/news.inc.php in PHPX 3.5.16, when magic_quotes_gpc is disabled, allows remote attackers to…
• CVE-2008-50023 PoCsInsecure method vulnerability in the ChilkatCrypt2.ChilkatCrypt2.1 ActiveX control (ChilkatCrypt2.dll 4.3.2.1) in Chilkat Crypt ActiveX…
• CVE-2008-50031 PoCSQL injection vulnerability in ndetail.php in Shahrood allows remote attackers to execute arbitrary SQL commands via the id parameter.
• CVE-2008-50041 PoCSQL injection vulnerability in genscode.php in myWebland Bloggie Lite 0.0.2 beta allows remote attackers to execute arbitrary SQL commands…
• CVE-2008-50101 PoCin.dhcpd in the DHCP implementation in Sun Solaris 8 through 10, and OpenSolaris before snv_103, allows remote attackers to cause a denial…
• CVE-2008-50293 PoCsThe __scm_destroy function in net/core/scm.c in the Linux kernel 2.6.27.4, 2.6.26, and earlier makes indirect recursive calls to itself…
• CVE-2008-50321 PoCStack-based buffer overflow in VideoLAN VLC media player 0.5.0 through 0.9.5 might allow user-assisted attackers to execute arbitrary code…
• CVE-2008-50363 PoCsStack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow user-assisted attackers to execute arbitrary code…
• CVE-2008-50371 PoCSQL injection vulnerability in view.php in ElkaGroup Image Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the…
• CVE-2008-50391 PoCCross-site scripting (XSS) vulnerability in the League module for PHP-Nuke, possibly 2.4, allows remote attackers to inject arbitrary web…
• CVE-2008-50401 PoCGraphiks MyForum 1.3 allows remote attackers to bypass authentication and gain administrative access by setting the (1) myforum_login and…
• CVE-2008-50421 PoCZeeways PhotoVideoTube 1.1 and earlier allows remote attackers to bypass authentication and perform administrative tasks via a direct…
• CVE-2008-50441 PoCRace condition in Microsoft Windows Server 2003 and Vista allows local users to cause a denial of service (crash or hang) via a…
• CVE-2008-50451 PoCHeap-based buffer overflow in Network-Client FTP Now 2.6, and possibly other versions, allows remote FTP servers to cause a denial of…
• CVE-2008-50461 PoCSQL injection vulnerability in index.php in Mole Group Pizza Script allows remote attackers to execute arbitrary SQL commands via the…
• CVE-2008-50471 PoCSQL injection vulnerability in admin/index.php in Mole Group Rental Script allows remote attackers to execute arbitrary SQL commands via…
• CVE-2008-50481 PoCBuffer overflow in Atepmon.sys in ISecSoft Anti-Trojan Elite 4.2.1 and earlier, and possibly 4.2.2, allows local users to cause a denial…
• CVE-2008-50491 PoCBuffer overflow in AKEProtect.sys 3.3.3.0 in ISecSoft Anti-Keylogger Elite 3.3.0 and earlier, and possibly other versions including 3.3.3,…
• CVE-2008-50512 PoCsSQL injection vulnerability in the JooBlog (com_jb2) component 0.1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands…
• CVE-2008-50532 PoCsPHP remote file inclusion vulnerability in admin.rssreader.php in the Simple RSS Reader (com_rssreader) 1.0 component for Joomla! allows…
• CVE-2008-50541 PoCMultiple SQL injection vulnerabilities in Develop It Easy Membership System 1.3 allow remote attackers to execute arbitrary SQL commands…
• CVE-2008-50571 PoCSQL injection vulnerability in film.asp in Yigit Aybuga Dizi Portali allows remote attackers to execute arbitrary SQL commands via the…
• CVE-2008-50581 PoCSQL injection vulnerability in siteadmin/loginsucess.php in Pre Simple CMS allows remote attackers to execute arbitrary SQL commands via…
• CVE-2008-50591 PoCCross-site scripting (XSS) vulnerability in index.php in ModernBill 4.4 and earlier allows remote attackers to inject arbitrary web script…
• CVE-2008-50601 PoCMultiple PHP remote file inclusion vulnerabilities in ModernBill 4.4 and earlier allow remote attackers to execute arbitrary PHP code via…
• CVE-2008-50611 PoCCross-site scripting (XSS) vulnerability in php/cal_default.php in Mini Web Calendar (mwcal) 1.2 allows remote attackers to inject…
• CVE-2008-50621 PoCDirectory traversal vulnerability in php/cal_pdf.php in Mini Web Calendar (mwcal) 1.2 allows remote attackers to read arbitrary files via…
• CVE-2008-50632 PoCsPHP remote file inclusion vulnerability in Admin/ADM_Pagina.php in OTManager 2.4 allows remote attackers to execute arbitrary PHP code via…
• CVE-2008-50641 PoCSQL injection vulnerability in liga.php in H&H WebSoccer 2.80 allows remote attackers to execute arbitrary SQL commands via the id…
• CVE-2008-50651 PoCTlGuestBook 1.2 allows remote attackers to bypass authentication and gain administrative access by setting the tlGuestBook_login cookie to…
• CVE-2008-50661 PoCPHP remote file inclusion vulnerability in upload/admin/frontpage_right.php in Agares Media ThemeSiteScript 1.0 allows remote attackers to…
• CVE-2008-50671 PoCCross-site scripting (XSS) vulnerability in search.php in Kmita Catalogue 2.x allows remote attackers to inject arbitrary web script or…
• CVE-2008-50681 PoCMultiple cross-site scripting (XSS) vulnerabilities in Kmita Gallery allow remote attackers to inject arbitrary web script or HTML via the…
• CVE-2008-50691 PoCSQL injection vulnerability in go.php in Panuwat PromoteWeb MySQL, when magic_quotes_gpc is disabled, allows remote attackers to execute…
• CVE-2008-50701 PoCSQL injection vulnerability in Pro Chat Rooms 3.0.3, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL…
• CVE-2008-50711 PoCMultiple eval injection vulnerabilities in itpm_estimate.php in Yoxel 1.23beta and earlier allow remote authenticated users to execute…
• CVE-2008-50721 PoCvsfilter.dll in K-Lite Mega Codec Pack 3.5.7.0 allows remote attackers to cause a denial of service (application crash) via a malformed…
• CVE-2008-50732 PoCsHeap-based buffer overflow in an ActiveX control in Novell ZENworks Desktop Management 6.5 allows remote attackers to execute arbitrary…
• CVE-2008-50741 PoCSQL injection vulnerability in index.php in the Freshlinks 1.0 RC1 module for PHP-Fusion allows remote attackers to execute arbitrary SQL…
• CVE-2008-50751 PoCMultiple SQL injection vulnerabilities in E-Uploader Pro 1.0 (aka Uploader PRO), when magic_quotes_gpc is disabled, allow remote attackers…
• CVE-2008-50791 PoCnet/atm/svc.c in the ATM subsystem in the Linux kernel 2.6.27.8 and earlier allows local users to cause a denial of service (kernel…
• CVE-2008-50812 PoCsThe originates_from_local_legacy_unicast_socket function (avahi-core/server.c) in avahi-daemon in Avahi before 0.6.24 allows remote…
• CVE-2008-50882 PoCsMultiple SQL injection vulnerabilities in PHPKB Knowledge Base Software 1.5 Professional allow remote attackers to execute arbitrary SQL…
• CVE-2008-50901 PoCElectron Inc. Advanced Electron Forum before 1.0.7 allows remote attackers to execute arbitrary PHP code via PHP code embedded in bbcode…
• CVE-2008-50971 PoCSQL injection vulnerability in index.php in MyFWB 1.0 allows remote attackers to execute arbitrary SQL commands via the page parameter.
• CVE-2008-51021 PoCPythonScripts in Zope 2 2.11.2 and earlier, as used in Conga and other products, allows remote authenticated users to cause a denial of…
• CVE-2008-51051 PoCKarjaSoft Sami FTP Server 2.0.x allows remote attackers to cause a denial of service (daemon crash or hang) via certain (1) APPE, (2) CWD,…
• CVE-2008-51061 PoCBuffer overflow in KarjaSoft Sami FTP Server 2.0.x allows remote attackers to cause a denial of service (daemon crash) and possibly…
• CVE-2008-51121 PoCThe LDAP server in Active Directory in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 responds differently to a failed bind…
• CVE-2008-51151 PoCCross-site request forgery (CSRF) vulnerability in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote…
• CVE-2008-51201 PoCStack-based buffer overflow in the Process Software MultiNet finger service (aka FINGERD) for HP OpenVMS 8.3 allows remote attackers to…
• CVE-2008-51211 PoCdne2000.sys in Citrix Deterministic Network Enhancer (DNE) 2.21.7.233 through 3.21.7.17464, as used in (1) Cisco VPN Client, (2) Blue Coat…
• CVE-2008-51231 PoCSQL injection vulnerability in admin.php in CCleague Pro 1.2 allows remote attackers to execute arbitrary SQL commands via the u parameter.
• CVE-2008-51251 PoCadmin.php in CCleague Pro 1.2 allows remote attackers to bypass authentication by setting the type cookie value to admin.
• CVE-2008-51261 PoCCross-site scripting (XSS) vulnerability in search.php in BoutikOne CMS allows remote attackers to inject arbitrary web script or HTML via…
• CVE-2008-51271 PoCOcean12 Contact Manager Pro 1.02 stores sensitive information under the web root with insufficient access control, which allows remote…
• CVE-2008-51311 PoCMultiple SQL injection vulnerabilities in Develop It Easy News And Article System 1.4 allow remote attackers to execute arbitrary SQL…
• CVE-2008-51321 PoCSQL injection vulnerability in inc/ajax/ajax_rating.php in MemHT Portal 4.0.1 allows remote attackers to execute arbitrary SQL commands…
• CVE-2008-51581 PoCClient Software WinCom LPD Total 3.0.2.623 and earlier allows remote attackers to bypass authentication and perform administrative actions…
• CVE-2008-51594 PoCsInteger overflow in the remote administration protocol processing in Client Software WinCom LPD Total 3.0.2.623 and earlier allows remote…
• CVE-2008-51601 PoCUnspecified vulnerability in MyServer 0.8.11 allows remote attackers to cause a denial of service (daemon crash) via multiple invalid…
• CVE-2008-51616 PoCsError handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3…
• CVE-2008-51632 PoCsMultiple SQL injection vulnerabilities in The Rat CMS Pre-Alpha 2 allow remote attackers to execute arbitrary SQL commands via the id…
• CVE-2008-51642 PoCsMultiple cross-site scripting (XSS) vulnerabilities in The Rat CMS Pre-Alpha 2 allow remote attackers to inject arbitrary web script or…
• CVE-2008-51661 PoCSQL injection vulnerability in riddle.php in Riddles Website 1.2.1 allows remote attackers to execute arbitrary SQL commands via the…
• CVE-2008-51672 PoCsPHP remote file inclusion vulnerability in layout/default/params.php in Boonex Orca 2.0 and 2.0.2, when register_globals is enabled,…
• CVE-2008-51681 PoCSQL injection vulnerability in tip.php in Tips Complete Website 1.2.0 allows remote attackers to execute arbitrary SQL commands via the…
• CVE-2008-51691 PoCSQL injection vulnerability in drinks/drink.php in Drinks Complete Website 2.1.0 allows remote attackers to execute arbitrary SQL commands…
• CVE-2008-51701 PoCSQL injection vulnerability in item.php in Cheats Complete Website 1.1.1 allows remote attackers to execute arbitrary SQL commands via the…
• CVE-2008-51711 PoCMultiple directory traversal vulnerabilities in admin/minibb/index.php in phpBLASTER CMS 1.0 RC1, when register_globals is enabled, allow…
• CVE-2008-51741 PoCSQL injection vulnerability in joke.php in Jokes Complete Website 2.1.3 allows remote attackers to execute arbitrary SQL commands via the…
• CVE-2008-51751 PoCDirectory traversal vulnerability in the FTP client in AceFTP Freeware 3.80.3 and AceFTP Pro 3.80.3 allows remote FTP servers to create or…
• CVE-2008-51761 PoCMultiple buffer overflows in Client Software WinCom LPD Total 3.0.2.623 and earlier allow remote attackers to execute arbitrary code via…
• CVE-2008-51772 PoCsStack-based buffer overflow in the DtbClsLogin function in Yosemite Backup 8.7 allows remote attackers to (1) execute arbitrary code on a…
• CVE-2008-51781 PoCHeap-based buffer overflow in Opera 9.62 on Windows allows remote attackers to execute arbitrary code via a long file:// URI. NOTE: this…
• CVE-2008-51803 PoCsMicrosoft Communicator, and Communicator in Microsoft Office 2010 beta, allows remote attackers to cause a denial of service (memory…
• CVE-2008-51831 PoCcupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service (daemon crash) by adding a…
• CVE-2008-51851 PoCThe highlighting functionality in geshi.php in GeSHi before 1.0.8 allows remote attackers to cause a denial of service (infinite loop) via…
• CVE-2008-51901 PoCSQL injection vulnerability in index.php in eSHOP100 allows remote attackers to execute arbitrary SQL commands via the SUB parameter.
• CVE-2008-51914 PoCsMultiple SQL injection vulnerabilities in SePortal 2.4 allow remote attackers to execute arbitrary SQL commands via the (1) poll_id…
• CVE-2008-51921 PoCSQL injection vulnerability in forum.asp in W1L3D4 Philboard 1.14 and 1.2 allows remote attackers to execute arbitrary SQL commands via…
• CVE-2008-51931 PoCCross-site scripting (XSS) vulnerability in search.asp in W1L3D4 Philboard 1.14 and 1.2 allows remote attackers to inject arbitrary web…
• CVE-2008-51941 PoCSQL injection vulnerability in checkavail.php in SoftVisions Software Online Booking Manager (obm) 2.2 allows remote attackers to execute…
• CVE-2008-51951 PoCMultiple SQL injection vulnerabilities in SebracCMS (sbcms) 0.4 allow remote attackers to execute arbitrary SQL commands via (1) the recid…
• CVE-2008-51961 PoCSQL injection vulnerability in kroax.php in the Kroax (the_kroax) 4.42 and earlier module for PHP-Fusion allows remote attackers to…
• CVE-2008-51972 PoCsSQL injection vulnerability in classifieds.php in PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the lid…
• CVE-2008-51981 PoCSQL injection vulnerability in memberlist.php in Acmlmboard 1.A2 allows remote attackers to execute arbitrary SQL commands via the pow…
• CVE-2008-51991 PoCPHP remote file inclusion vulnerability in include.php in PHPOutsourcing IdeaBox (aka IdeBox) 1.1 allows remote attackers to execute…
• CVE-2008-52001 PoCSQL injection vulnerability in the Xe webtv (com_xewebtv) component for Joomla! allows remote attackers to execute arbitrary SQL commands…
• CVE-2008-52011 PoCDirectory traversal vulnerability in index.php in OTManager CMS 24a allows remote attackers to include and execute arbitrary local files…
• CVE-2008-52021 PoCCross-site scripting (XSS) vulnerability in index.php in OTManager CMS 24a allows remote attackers to inject arbitrary web script or HTML…
• CVE-2008-52031 PoCCross-site scripting (XSS) vulnerability in external_vote.php in PowerAward 1.1.0 RC1 allows remote attackers to inject arbitrary web…
• CVE-2008-52041 PoCMultiple directory traversal vulnerabilities in PowerAward 1.1.0 RC1, when register_globals is enabled, allow remote attackers to include…
• CVE-2008-52081 PoCSQL injection vulnerability in sub_votepic.php in the Datsogallery (com_datsogallery) module 1.6 for Joomla! allows remote attackers to…
• CVE-2008-52091 PoCDirectory traversal vulnerability in modules/download/get_file.php in Admidio 1.4.8 allows remote attackers to read arbitrary files via a…
• CVE-2008-52101 PoCMultiple PHP remote file inclusion vulnerabilities in PhpBlock A8.5 allow remote attackers to execute arbitrary PHP code via a URL in the…
• CVE-2008-52111 PoCCross-site scripting (XSS) vulnerability in search.php in Sphider 1.3.4, when the search suggestion feature is enabled, allows remote…
• CVE-2008-52121 PoCSQL injection vulnerability in classifide_ad.php in AJ Auction 6.2.1 and earlier allows remote attackers to execute arbitrary SQL commands…
• CVE-2008-52132 PoCsSQL injection vulnerability in featured_article.php in AJ Article 1.0 allows remote attackers to execute arbitrary SQL commands via the…
• CVE-2008-52141 PoCCross-site scripting (XSS) vulnerability in service/calendrier.php in ClanLite 2.2006.05.20 allows remote attackers to inject arbitrary…
• CVE-2008-52151 PoCSQL injection vulnerability in service/profil.php in ClanLite 2.2006.05.20 allows remote attackers to execute arbitrary SQL commands via…
• CVE-2008-52161 PoCSQL injection vulnerability in category_list.php in AJ Square ZeusCart 2.0 and earlier allows remote attackers to execute arbitrary SQL…
• CVE-2008-52171 PoCDirectory traversal vulnerability in index.php in txtCMS 0.3, when register_globals is enabled and magic_quotes_gpc is disabled, allows…
• CVE-2008-52181 PoCScriptsEz FREEze Greetings 1.0 stores pwd.txt under the web root with insufficient access control, which allows remote attackers to obtain…
• CVE-2008-52191 PoCThe password change feature (admin/cp.php) in VideoScript 4.0.1.50 and earlier does not check for administrative authentication and does…
• CVE-2008-52201 PoCUnrestricted file upload vulnerability in admin/upload_form.php in wPortfolio 0.3 and earlier allows remote attackers to execute arbitrary…
• CVE-2008-52211 PoCThe account_save action in admin/userinfo.php in wPortfolio 0.3 and earlier does not require authentication and does not require knowledge…
• CVE-2008-52221 PoCSQL injection vulnerability in login.asp in Dvbbs 8.2.0 allows remote attackers to execute arbitrary SQL commands via the username…
• CVE-2008-52231 PoCSQL injection vulnerability in index.php in Airvae Commerce 3.0 allows remote attackers to execute arbitrary SQL commands via the pid…
• CVE-2008-52253 PoCsMultiple cross-site scripting (XSS) vulnerabilities in Xerox DocuShare 6 and earlier allow remote attackers to inject arbitrary web script…
• CVE-2008-52261 PoCSQL injection vulnerability in the MambAds (com_mambads) component 1.0 RC1 Beta and 1.0 RC1 for Mambo allows remote attackers to execute…
• CVE-2008-52291 PoCStack-based buffer overflow in Microsoft Device IO Control in iphlpapi.dll in Microsoft Windows Vista Gold and SP1 allows local users in…
• CVE-2008-52322 PoCsBuffer overflow in the CallHTMLHelp method in the Microsoft Windows Media Services ActiveX control in nskey.dll 4.1.00.3917 in Windows…
• CVE-2008-52641 PoCCross-site scripting (XSS) vulnerability in searcher.exe in Tornado Knowledge Retrieval System 4.2 and earlier allows remote attackers to…
• CVE-2008-52651 PoCDirectory traversal vulnerability in index.php in TNT Forum 0.9.4, when magic_quotes_gpc is disabled, allows remote attackers to include…
• CVE-2008-52661 PoCCross-site scripting (XSS) vulnerability in configuration/httpListenerEdit.jsf in the GlassFish 2 UR2 b04 webadmin interface in Sun Java…
• CVE-2008-52671 PoCSQL injection vulnerability in answer.php in Experts 1.0.0, when magic_quotes_gpc is disabled, allows remote attackers to execute…
• CVE-2008-52681 PoCSQL injection vulnerability in content/forums/reply.asp in ASPPortal allows remote attackers to execute arbitrary SQL commands via the…
• CVE-2008-52691 PoCSQL injection vulnerability in index.php in pSys 0.7.0 alpha allows remote attackers to execute arbitrary SQL commands via the shownews…
• CVE-2008-52701 PoCSQL injection vulnerability in view.topics.php in Yuhhu Superstar 2008 allows remote attackers to execute arbitrary SQL commands via the…
• CVE-2008-52711 PoCCross-site scripting (XSS) vulnerability in index.php in Fred Stuurman SyndeoCMS 2.6.0 allows remote attackers to inject arbitrary web…
• CVE-2008-52721 PoCMultiple directory traversal vulnerabilities in Fred Stuurman SyndeoCMS 2.6.0 allow remote authenticated users to read arbitrary files via…
• CVE-2008-52731 PoCSQL injection vulnerability in viewnews.asp in Todd Woolums ASP News Management 2.2 allows remote attackers to execute arbitrary SQL…
• CVE-2008-52741 PoCTodd Woolums ASP News Management 2.2 allows remote attackers to obtain news items via a direct request to (1) rss.asp, (2)…
• CVE-2008-52781 PoCCross-site scripting (XSS) vulnerability in the self_link function in in the RSS Feed Generator (wp-includes/feed.php) for WordPress…
• CVE-2008-52791 PoCThe Local ZIM Server (zcs.exe) in Zilab Chat and Instant Messaging (ZIM) Server 2.1 and earlier allow remote attackers to execute…
• CVE-2008-52802 PoCsThe Local ZIM Server in Zilab Chat and Instant Messaging (ZIM) Server 2.0 and 2.1 allows remote attackers to cause a denial of service…
• CVE-2008-52812 PoCsHeap-based buffer overflow in Titan FTP Server 6.05 build 550 allows remote attackers to execute arbitrary code via a long DELE command.
• CVE-2008-52822 PoCsMultiple stack-based buffer overflows in W3C Amaya Web Browser 10.0.1 allow remote attackers to execute arbitrary code via (1) a link with…
• CVE-2008-52831 PoCGoogle Hack Honeypot (GHH) File Upload Manager 1.3 allows remote attackers to delete uploaded files via unknown vectors related to the…
• CVE-2008-52841 PoCThe web server in IEA Software RadiusNT and RadiusX 5.1.38 and other versions before 5.1.44, Emerald 5.0.49 and other versions before…
• CVE-2008-52871 PoCSQL injection vulnerability in catagorie.php in Werner Hilversum FAQ Manager 1.2 allows remote attackers to execute arbitrary SQL commands…
• CVE-2008-52881 PoCPHP remote file inclusion vulnerability in include/header.php in Werner Hilversum FAQ Manager 1.2, when register_globals is enabled,…
• CVE-2008-52892 PoCsSQL injection vulnerability in full_txt.php in Werner Hilversum Clean CMS 1.5 allows remote attackers to execute arbitrary SQL commands…
• CVE-2008-52901 PoCCross-site scripting (XSS) vulnerability in full_txt.php in Werner Hilversum Clean CMS 1.5 allows remote attackers to inject arbitrary web…
• CVE-2008-52911 PoCDirectory traversal vulnerability in code/track.php in FuzzyLime 3.03 allows remote attackers to include and execute arbitrary local files…
• CVE-2008-52921 PoCSQL injection vulnerability in view_snaps.php in VideoGirls BiZ allows remote attackers to execute arbitrary SQL commands via the type…
• CVE-2008-52931 PoCSQL injection vulnerability in index.php in WebStudio eHotel allows remote attackers to execute arbitrary SQL commands via the pageid…
• CVE-2008-52941 PoCSQL injection vulnerability in index.php in WebStudio eCatalogue allows remote attackers to execute arbitrary SQL commands via the pageid…
• CVE-2008-52951 PoCSQL injection vulnerability in index.php in Jamit Job Board 3.4.10 allows remote attackers to execute arbitrary SQL commands via the…
• CVE-2008-52971 PoCBuffer overflow in No-IP DUC 2.1.7 and earlier allows remote HTTP servers to execute arbitrary code via a crafted response to a DNS update…
• CVE-2008-53041 PoCCross-site scripting (XSS) vulnerability in TWiki before 4.2.4 allows remote attackers to inject arbitrary web script or HTML via the…
• CVE-2008-53051 PoCEval injection vulnerability in TWiki before 4.2.4 allows remote attackers to execute arbitrary Perl code via the %SEARCH{}% variable.
• CVE-2008-53061 PoCSQL injection vulnerability in admin/index.php in PG Real Estate Solution allows remote attackers to execute arbitrary SQL commands via…
• CVE-2008-53072 PoCsSQL injection vulnerability in admin/index.php in PG Roommate Finder Solution allows remote attackers to execute arbitrary SQL commands…
• CVE-2008-53081 PoCThe Simple Forum 3.1d module for LoveCMS 1.6.2 Final does not properly restrict access to administrator functions, which allows remote…
• CVE-2008-53091 PoCSQL injection vulnerability in NetArt Media Real Estate Portal 1.2 allows remote attackers to execute arbitrary SQL commands via the ad_id…
• CVE-2008-53101 PoCSQL injection vulnerability in image.php in NetArt Media Car Portal 2.0 allows remote attackers to execute arbitrary SQL commands via the…
• CVE-2008-53111 PoCSQL injection vulnerability in image.php in NetArt Media Blog System 1.5 allows remote attackers to execute arbitrary SQL commands via the…
• CVE-2008-53141 PoCStack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote attackers to cause a denial of service…
• CVE-2008-53201 PoCSQL injection vulnerability in usersettings.php in e107 0.7.13 and earlier allows remote authenticated users to execute arbitrary SQL…
• CVE-2008-53211 PoCSQL injection vulnerability in index.php in GesGaleri, a module for XOOPS, allows remote attackers to execute arbitrary SQL commands via…
• CVE-2008-53221 PoCWysi Wiki Wyg 1.0 allows remote attackers to obtain system information via an invalid categup parameter to index.php, which calls the…
• CVE-2008-53231 PoCCross-site scripting (XSS) vulnerability in index.php in Wysi Wiki Wyg 1.0 allows remote attackers to inject arbitrary web script or HTML…
• CVE-2008-53301 PoCMultiple cross-site scripting (XSS) vulnerabilities in the web interface in ClearCase RWP server in IBM Rational ClearCase 7.0.0 before…
• CVE-2008-53321 PoCMultiple PHP remote file inclusion vulnerabilities in Pie 0.5.3 allow remote attackers to execute arbitrary PHP code via a URL in the (1)…
• CVE-2008-53331 PoCSQL injection vulnerability in members.php in NitroTech 0.0.3a allows remote attackers to execute arbitrary SQL commands via the id…
• CVE-2008-53341 PoCPHP remote file inclusion vulnerability in includes/common.php in NitroTech 0.0.3a allows remote attackers to execute arbitrary PHP code…
• CVE-2008-53351 PoCSQL injection vulnerability in messages.php in PHP-Fusion 6.01.15 and 7.00.1, when magic_quotes_gpc is disabled, allows remote attackers…
• CVE-2008-53362 PoCsSQL injection vulnerability in index.php in WebStudio CMS allows remote attackers to execute arbitrary SQL commands via the pageid…
• CVE-2008-53371 PoCSQL injection vulnerability in lyrics.php in Bandwebsite (aka Bandsite portal system) 1.5 allows remote attackers to execute arbitrary SQL…
• CVE-2008-53381 PoCCross-site scripting (XSS) vulnerability in info.php in Bandwebsite (aka Bandsite portal system) 1.5 allows remote attackers to inject…
• CVE-2008-53535 PoCsThe Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE…
• CVE-2008-53651 PoCSQL injection vulnerability in VoteHistory.asp in ActiveWebSoftwares ActiveVotes 2.2 allows remote attackers to execute arbitrary SQL…
• CVE-2008-53771 PoCpstopdf in CUPS 1.3.8 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pstopdf.log temporary file, a…
• CVE-2008-53831 PoCStack-based buffer overflow in National Instruments Electronics Workbench allows user-assisted attackers to cause a denial of service…
• CVE-2008-53941 PoC/bin/login in shadow 4.0.18.1 in Debian GNU/Linux, and probably other Linux distributions, allows local users in the utmp group to…
• CVE-2008-54055 PoCsStack-based buffer overflow in the RDP protocol password decoder in Cain & Abel 4.9.23 and 4.9.24, and possibly earlier, allows remote…
• CVE-2008-54061 PoCStack-based buffer overflow in Apple QuickTime Player 7.5.5 and iTunes 8.0.2.20 allows remote attackers to cause a denial of service…
• CVE-2008-54091 PoCUnspecified vulnerability in the pdf.xmd module in (1) BitDefender Free Edition 10 and Antivirus Standard 10, (2) BullGuard Internet…
• CVE-2008-54165 PoCsHeap-based buffer overflow in Microsoft SQL Server 2000 SP4, 8.00.2050, 8.00.2039, and earlier; SQL Server 2000 Desktop Engine (MSDE 2000)…
• CVE-2008-54181 PoCDirectory traversal vulnerability in login.php in the PunPortal module before 2.0 for PunBB allows remote attackers to include and execute…
• CVE-2008-54311 PoCTeamtek Universal FTP Server 1.0.44 allows remote attackers to cause a denial of service via (1) a certain CWD command, (2) a long LIST…
• CVE-2008-54442 PoCsUnspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect…
• CVE-2008-54481 PoCUnspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect…
• CVE-2008-54573 PoCsUnspecified vulnerability in the Oracle BEA WebLogic Server Plugins for Apache, Sun and IIS web servers component in BEA Product Suite…
• CVE-2008-54861 PoCSQL injection vulnerability in admin.php in TurnkeyForms Text Link Sales allows remote attackers to execute arbitrary SQL commands via the…
• CVE-2008-54871 PoCCross-site scripting (XSS) vulnerability in admin.php in TurnkeyForms Text Link Sales allows remote attackers to inject arbitrary web…
• CVE-2008-54881 PoCSQL injection vulnerability in admin.php in E-topbiz Domain Shop 2 allows remote attackers to execute arbitrary SQL commands via the…
• CVE-2008-54892 PoCsSQL injection vulnerability in channel_detail.php in ClipShare Pro 4, and 2006 through 2007, allows remote attackers to execute arbitrary…
• CVE-2008-54901 PoCSQL injection vulnerability in index.php in PHPStore Yahoo Answers allows remote attackers to execute arbitrary SQL commands via the id…
• CVE-2008-54911 PoCSQL injection vulnerability in edit.php in SlimCMS 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the…
• CVE-2008-54924 PoCsHeap-based buffer overflow in the PDFVIEW.PdfviewCtrl.1 ActiveX control in pdfview.ocx 2.0.0.1 in VeryDOC PDF Viewer OCX Control allows…
• CVE-2008-54931 PoCSQL injection vulnerability in track.php in PHPStore Wholesales (aka Wholesale) allows remote attackers to execute arbitrary SQL commands…
• CVE-2008-54941 PoCSQL injection vulnerability in the Contact Information Module (com_contactinfo) component 1.0 for Joomla! allows remote attackers to…
• CVE-2008-54961 PoCSQL injection vulnerability in showcategory.php in PozScripts Business Directory Script allows remote attackers to execute arbitrary SQL…
• CVE-2008-54971 PoCBandSite CMS 1.1.4 allows remote attackers to bypass authentication and gain administrative access by setting the login_auth cookie to true.
• CVE-2008-54981 PoCArray index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of…
• CVE-2008-54992 PoCsUnspecified vulnerability in Adobe Flash Player for Linux 10.0.12.36, and 9.0.151.0 and earlier, allows remote attackers to execute…
• CVE-2008-55171 PoCThe web interface in git (gitweb) 1.5.x before 1.5.6 allows remote attackers to execute arbitrary commands via shell metacharacters…
• CVE-2008-55181 PoCMultiple directory traversal vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 on…
• CVE-2008-55511 PoCThe XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 allows remote attackers to bypass the XSS protection mechanism and conduct XSS…
• CVE-2008-55591 PoCSQL injection vulnerability in sendcard.cfm in PostEcards allows remote attackers to execute arbitrary SQL commands via the cid parameter.
• CVE-2008-55601 PoCPostEcards stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the…
• CVE-2008-55611 PoCSQL injection vulnerability in Netref 4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to (1)…
• CVE-2008-55621 PoCASPPortal stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the…
• CVE-2008-55651 PoCCross-site request forgery (CSRF) vulnerability in admin/settings.php in DL PayCart 1.34 and earlier allows remote attackers to change the…
• CVE-2008-55661 PoCCross-site scripting (XSS) vulnerability in index.php in Triangle Solutions PHP Multiple Newsletters 2.7 allows remote attackers to inject…
• CVE-2008-55671 PoCCross-site request forgery (CSRF) vulnerability in admin/ad_settings.php in Bonza Cart 1.10 and earlier allows remote attackers to change…
• CVE-2008-55681 PoCCross-site request forgery (CSRF) vulnerability in admin/settings.php in IPN Pro 3 1.44 and earlier allows remote attackers to change the…
• CVE-2008-55694 PoCsMultiple cross-site scripting (XSS) vulnerabilities in PHPepperShop 1.4 allow remote attackers to inject arbitrary web script or HTML via…
• CVE-2008-55701 PoCDirectory traversal vulnerability in index.php in PHP Multiple Newsletters 2.7, when magic_quotes_gpc is disabled, allows remote attackers…
• CVE-2008-55712 PoCsSQL injection vulnerability in admin/login.asp in Professional Download Assistant 0.1 allows remote attackers to execute arbitrary SQL…
• CVE-2008-55721 PoCProfessional Download Assistant 0.1 stores sensitive information under the web root with insufficient access control, which allows remote…
• CVE-2008-55731 PoCSQL injection vulnerability in the login feature in Poll Pro 2.0 allows remote attackers to execute arbitrary SQL commands via the (1)…
• CVE-2008-55741 PoCSQL injection vulnerability in member.php in Webmaster Marketplace allows remote attackers to execute arbitrary SQL commands via the u…
• CVE-2008-55761 PoCadmin/forums.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allows remote attackers to bypass authentication and gain administrative access via…
• CVE-2008-55771 PoCPHP remote file inclusion vulnerability in index.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allows remote attackers to execute arbitrary…
• CVE-2008-55781 PoCMultiple SQL injection vulnerabilities in index.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allow remote attackers to execute arbitrary SQL…
• CVE-2008-55791 PoCAbsolute path traversal vulnerability in mini-pub.php/front-end/cat.php in mini-pub 0.3 allows remote attackers to read arbitrary files…
• CVE-2008-55801 PoCmini-pub.php/front-end/cat.php in mini-pub 0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the…
• CVE-2008-55811 PoCPHP remote file inclusion vulnerability in mini-pub.php/front-end/img.php in mini-pub 0.3 allows remote attackers to execute arbitrary PHP…
• CVE-2008-55821 PoCSQL injection vulnerability in utilities/login.asp in Nukedit 4.9.x, and possibly earlier, allows remote attackers to execute arbitrary…
• CVE-2008-55841 PoCMultiple cross-site scripting (XSS) vulnerabilities in ProjectPier 0.8 and earlier allow remote attackers to inject arbitrary web script…
• CVE-2008-55851 PoCMultiple PHP remote file inclusion vulnerabilities in lcxBBportal 0.1 Alpha 2 allow remote attackers to execute arbitrary PHP code via a…
• CVE-2008-55861 PoCSQL injection vulnerability in findoffice.php in Check Up New Generation (aka Check New) 4.52, when magic_quotes_gpc is disabled, allows…
• CVE-2008-55872 PoCsDirectory traversal vulnerability in libraries/lib.inc.php in phpPgAdmin 4.2.1 and earlier, when register_globals is enabled, allows…
• CVE-2008-55881 PoCSQL injection vulnerability in rankup.asp in Katy Whitton RankEm allows remote attackers to execute arbitrary SQL commands via the siteID…
• CVE-2008-55891 PoCSQL injection vulnerability in processlogin.asp in Katy Whitton RankEm allows remote attackers to execute arbitrary SQL commands via the…
• CVE-2008-55901 PoCSQL injection vulnerability in customer.forumtopic.php in Kalptaru Infotech Product Sale Framework 0.1 beta allows remote attackers to…
• CVE-2008-55911 PoCCross-site scripting (XSS) vulnerability in login.asp in Nightfall Personal Diary 1.0 allows remote attackers to inject arbitrary web…
• CVE-2008-55921 PoCNightfall Personal Diary 1.0 stores sensitive information under the web root with insufficient access control, which allows remote…
• CVE-2008-55931 PoCMultiple directory traversal vulnerabilities in index.php in Mini CMS 1.0.1 allow remote attackers to include and execute arbitrary local…
• CVE-2008-55941 PoCMultiple directory traversal vulnerabilities in index.php in Mini Blog 1.0.1 allow remote attackers to include and execute arbitrary local…
• CVE-2008-55951 PoCSQL injection vulnerability in detail.asp in ASP AutoDealer allows remote attackers to execute arbitrary SQL commands via the ID parameter.
• CVE-2008-55961 PoCIkon AdManager 2.1 and earlier stores sensitive information under the web root with insufficient access control, which allows remote…
• CVE-2008-55971 PoCCold BBS stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the…
• CVE-2008-55981 PoCDirectory traversal vulnerability in index.php in PHPmyGallery 1.51 gold allows remote attackers to list arbitrary directories via a ..…
• CVE-2008-55991 PoCSQL injection vulnerability in default.asp in Merlix Teamworx Server allows remote attackers to execute arbitrary SQL commands via the…
• CVE-2008-56001 PoCMerlix Teamworx Server stores sensitive information under the web root with insufficient access control, which allows remote attackers to…
• CVE-2008-56011 PoCUser Engine Lite ASP stores sensitive information under the web root with insufficient access control, which allows remote attackers to…
• CVE-2008-56021 PoCNatterchat 1.12 stores sensitive information under the web root with insufficient access control, which allows remote attackers to…
• CVE-2008-56031 PoCASPTicker 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download…
• CVE-2008-56041 PoCDirectory traversal vulnerability in index.php in My Simple Forum 3.0 and 4.1, when magic_quotes_gpc is disabled, allows remote attackers…
• CVE-2008-56051 PoCMultiple SQL injection vulnerabilities in ASP Portal allow remote attackers to execute arbitrary SQL commands via the (1) ItemID parameter…
• CVE-2008-56061 PoCGazatem QMail Mailing List Manager 1.2 stores sensitive information under the web root with insufficient access control, which allows…
• CVE-2008-56071 PoCSQL injection vulnerability in the JMovies (aka JM or com_jmovies) component 1.1 for Joomla! allows remote attackers to execute arbitrary…
• CVE-2008-56082 PoCsASP AutoDealer stores sensitive information under the web root with insufficient access control, which allows remote attackers to download…
• CVE-2008-56193 PoCshtml2text.php in Chuggnutt HTML to Text Converter, as used in PHPMailer before 5.2.10, RoundCube Webmail (roundcubemail) 0.2-1.alpha and…
• CVE-2008-56211 PoCCross-site request forgery (CSRF) vulnerability in phpMyAdmin 2.11.x before 2.11.9.4 and 3.x before 3.1.1.0 allows remote attackers to…
• CVE-2008-56251 PoCPHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in…
• CVE-2008-56263 PoCsXM Easy Personal FTP Server 5.6.0 allows remote authenticated users to cause a denial of service via a crafted argument to the NLST…
• CVE-2008-56271 PoCSQL injection vulnerability in account.asp in Active Trade 2 allows remote attackers to execute arbitrary SQL commands via the (1)…
• CVE-2008-56281 PoCSQL injection vulnerability in index.php in CMS little 0.0.1 allows remote attackers to execute arbitrary SQL commands via the term…
• CVE-2008-56292 PoCsSQL injection vulnerability in index.php in Turnkey Arcade Script allows remote attackers to execute arbitrary SQL commands via the id…
• CVE-2008-56301 PoCSQL injection vulnerability in merchants/index.php in Post Affiliate Pro 3 and 3.1.4 allows remote attackers to execute arbitrary SQL…
• CVE-2008-56311 PoCSQL injection vulnerability in start.asp in Active eWebquiz 8.0 allows remote attackers to execute arbitrary SQL commands via the (1)…
• CVE-2008-56322 PoCsSQL injection vulnerability in Account.asp in Active Time Billing 3.2 allows remote attackers to execute arbitrary SQL commands via the…
• CVE-2008-56331 PoCSQL injection vulnerability in register.asp in ActiveVotes 2.2 allows remote attackers to execute arbitrary SQL commands via the (1)…
• CVE-2008-56341 PoCSQL injection vulnerability in account.asp in Active Force Matrix 2.0 allows remote attackers to execute arbitrary SQL commands via the…
• CVE-2008-56351 PoCSQL injection vulnerability in account.asp in Active Membership 2.0 allows remote attackers to execute arbitrary SQL commands via the (1)…
• CVE-2008-56361 PoCSQL injection vulnerability in cate.php in Lito Lite CMS, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary…
• CVE-2008-56371 PoCSQL injection vulnerability in blog.asp in ParsBlogger (Pb) allows remote attackers to execute arbitrary SQL commands via the wr parameter.
• CVE-2008-56382 PoCsMultiple SQL injection vulnerabilities in Active Price Comparison 4 allow remote attackers to execute arbitrary SQL commands via the (1)…
• CVE-2008-56391 PoCDirectory traversal vulnerability in index.php in TxtBlog 1.0 Alpha allows remote attackers to read arbitrary files via a .. (dot dot) in…
• CVE-2008-56401 PoCSQL injection vulnerability in bidhistory.asp in Active Bids 3.5 allows remote attackers to execute arbitrary SQL commands via the ItemID…
• CVE-2008-56411 PoCSQL injection vulnerability in account.asp in Active Photo Gallery 6.2 allows remote attackers to execute arbitrary SQL commands via the…
• CVE-2008-56421 PoCDirectory traversal vulnerability in admin/login.php in CMS Made Simple 1.4.1 allows remote attackers to read arbitrary files via a ..…
• CVE-2008-56431 PoCSQL injection vulnerability in the Books (com_books) component for Joomla! allows remote attackers to execute arbitrary SQL commands via…
• CVE-2008-56481 PoCSQL injection vulnerability in admin/login.php in DeltaScripts PHP Shop 1.0 allows remote attackers to execute arbitrary SQL commands via…
• CVE-2008-56491 PoCSQL injection vulnerability in admin/admin.php in AlstraSoft Article Manager Pro 1.6 allows remote attackers to execute arbitrary SQL…
• CVE-2008-56502 PoCsSQL injection vulnerability in the login directory in AlstraSoft Web Host Directory allows remote attackers to execute arbitrary SQL…
• CVE-2008-56511 PoCSQL injection vulnerability in plugins/bookmarker/bookmarker_backend.php in MyioSoft EasyBookMarker 4.0 allows remote attackers to execute…
• CVE-2008-56521 PoCSQL injection vulnerability in the loginADP function in ajaxp.php in MyioSoft EasyBookMarker 4.0 allows remote attackers to execute…
• CVE-2008-56531 PoCSQL injection vulnerability in the loginADP function in ajaxp.php in MyioSoft AjaxPortal 3.0 allows remote attackers to execute arbitrary…
• CVE-2008-56541 PoCSQL injection vulnerability in the loginADP function in ajaxp.php in MyioSoft EasyCalendar 4.0 allows remote attackers to execute…
• CVE-2008-56552 PoCsMultiple SQL injection vulnerabilities in MyioSoft EasyBookMarker 4.0 allow remote attackers to execute arbitrary SQL commands via the (1)…
• CVE-2008-56592 PoCsThe gnu.java.security.util.PRNG class in GNU Classpath 0.97.2 and earlier uses a predictable seed based on the system time, which makes it…
• CVE-2008-56601 PoCFormat string vulnerability in the vinagre_utils_show_error function (src/vinagre-utils.c) in Vinagre 0.5.x before 0.5.2 and 2.x before…
• CVE-2008-56632 PoCsMultiple unrestricted file upload vulnerabilities in Kusaba 1.0.4 and earlier allow remote authenticated users to execute arbitrary code…
• CVE-2008-56643 PoCsStack-based buffer overflow in Realtek Media Player (aka Realtek Sound Manager, RtlRack, or rtlrack.exe) 1.15.0.0 allows remote attackers…
• CVE-2008-56651 PoCSQL injection vulnerability in index.php in the xhresim module in XOOPS allows remote attackers to execute arbitrary SQL commands via the…
• CVE-2008-56663 PoCsWinFTP FTP Server 2.3.0, when passive (aka PASV) mode is used, allows remote authenticated users to cause a denial of service via a…
• CVE-2008-56671 PoCThe scanning engine in VirusBlokAda VBA32 Personal Antivirus 3.12.8.x allows remote attackers to cause a denial of service (memory…
• CVE-2008-56742 PoCsMultiple array index errors in the HTTP server in Darkwet Network webcamXP 3.72.440.0 and earlier and beta 4.05.280 and earlier allow…
• CVE-2008-56771 PoCUnrestricted file upload vulnerability in Kwalbum 2.0.4, 2.0.2, and earlier, when PICS_PATH is located in the web root, allows remote…
• CVE-2008-56781 PoCFretwell-Downing Informatics (FDI) OLIB7 WebView 2.5.1.1 allows remote authenticated users to obtain sensitive information from files via…
• CVE-2008-56801 PoCMultiple buffer overflows in Opera before 9.63 might allow (1) remote attackers to execute arbitrary code via a crafted text area, or…
• CVE-2008-56892 PoCstun in IP Tunnel in Solaris 10 and OpenSolaris snv_01 through snv_76 allows local users to cause a denial of service (panic) and possibly…
• CVE-2008-56911 PoCHeap-based buffer overflow in the Phoenician Casino FlashAX ActiveX control 1.0.0.7 allows remote attackers to execute arbitrary code via…
• CVE-2008-56921 PoCIpswitch WS_FTP Server Manager before 6.1.1, and possibly other Ipswitch products, allows remote attackers to bypass authentication and…
• CVE-2008-56953 PoCswp-admin/options.php in WordPress MU before 1.3.2, and WordPress 2.3.2 and earlier, does not properly validate requests to update an…
• CVE-2008-56971 PoCThe skype_tool.copy_num method in the Skype extension BETA 2.2.0.95 for Firefox allows remote attackers to write arbitrary data to the…
• CVE-2008-56981 PoCHTMLTokenizer::scriptHandler in Konqueror in KDE 3.5.9 and 3.5.10 allows remote attackers to cause a denial of service (application crash)…
• CVE-2008-57051 PoCThe cTrigger::DoIt function in src/ctrigger.cpp in the trigger mechanism in the daemon in Verlihub 0.9.8d-RC2 and earlier, when user…
• CVE-2008-57061 PoCThe cTrigger::DoIt function in src/ctrigger.cpp in the trigger mechanism in the daemon in Verlihub 0.9.8d-RC2 and earlier allows local…
• CVE-2008-57071 PoCSQL injection vulnerability in urunler.asp in Iltaweb Alisveris Sistemi allows remote attackers to execute arbitrary SQL commands via the…
• CVE-2008-57081 PoCredirect.php in SlimCMS 1.0.0 does not require authentication, which allows remote attackers to create administrative users by using the…
• CVE-2008-57114 PoCsHeap-based buffer overflow in the Facebook PhotoUploader ActiveX control 5.0.14.0 and earlier allows remote attackers to execute arbitrary…
• CVE-2008-57122 PoCsThe HTML parser in KDE Konqueror 3.5.9 allows remote attackers to cause a denial of service (application crash) via (1) a long COLOR…
• CVE-2008-57131 PoCThe __qdisc_run function in net/sched/sch_generic.c in the Linux kernel before 2.6.25 on SMP machines allows local users to cause a denial…
• CVE-2008-57151 PoCMozilla Firefox 3.0.5 on Windows Vista allows remote attackers to cause a denial of service (application crash) via JavaScript code with a…
• CVE-2008-57221 PoCBuffer overflow in SAWStudio 3.9i allows user-assisted remote attackers to cause a denial of service (application crash) and possibly…
• CVE-2008-57241 PoCThe Personal Firewall driver (aka epfw.sys) 3.0.672.0 and earlier in ESET Smart Security 3.0.672 and earlier allows local users to gain…
• CVE-2008-57251 PoCThe NT kernel-mode driver (aka pstrip.sys) 5.0.1.1 and earlier in EnTech Taiwan PowerStrip 3.84 and earlier allows local users to gain…
• CVE-2008-57261 PoCSQL injection vulnerability in thread.php in stormBoards 1.0.1 allows remote attackers to execute arbitrary SQL commands via the id…
• CVE-2008-57271 PoCSQL injection vulnerability in modules/auth/password_recovery.php in AIST NetCat 3.12 and earlier, when magic_quotes_gpc is disabled,…
• CVE-2008-57281 PoCMultiple directory traversal vulnerabilities in AIST NetCat 3.12 and earlier, when magic_quotes_gpc is disabled and register_globals is…
• CVE-2008-57291 PoCMultiple cross-site scripting (XSS) vulnerabilities in AIST NetCat 3.12 and earlier allow remote attackers to inject arbitrary web script…
• CVE-2008-57301 PoCMultiple CRLF injection vulnerabilities in AIST NetCat 3.12 and earlier allow remote attackers to have an unknown impact via unspecified…
• CVE-2008-57311 PoCThe PGPwded device driver (aka PGPwded.sys) in PGP Corporation PGP Desktop 9.0.6 build 6060 and 9.9.0 build 397 allows local users to…
• CVE-2008-57321 PoCUnrestricted file upload vulnerability in lib/image_upload.php in KafooeyBlog 1.55b allows remote attackers to execute arbitrary code by…
• CVE-2008-57331 PoCSQL injection vulnerability in blog.php in the Team Impact TI Blog System mod for PHP-Fusion allows remote attackers to execute arbitrary…
• CVE-2008-57353 PoCsStack-based buffer overflow in skin.c in CoolPlayer 2.17 through 2.19 allows remote attackers to execute arbitrary code via a large…
• CVE-2008-57363 PoCsMultiple unspecified vulnerabilities in FreeBSD 6 before 6.4-STABLE, 6.3 before 6.3-RELEASE-p7, 6.4 before 6.4-RELEASE-p1, 7.0 before…
• CVE-2008-57371 PoCSQL injection vulnerability in index.php in Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to execute arbitrary SQL commands…
• CVE-2008-57381 PoCNodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to bypass authentication and gain administrative access by setting the…
• CVE-2008-57391 PoCSQL injection vulnerability in evb/check_url.php in Pligg CMS 9.9.5 Beta allows remote attackers to execute arbitrary SQL commands via the…
• CVE-2008-57421 PoCMultiple open redirect vulnerabilities in AIST NetCat 3.12 and earlier allow remote attackers to redirect users to arbitrary web sites and…
• CVE-2008-57452 PoCsInteger overflow in quartz.dll in the DirectShow framework in Microsoft Windows Media Player (WMP) 9, 10, and 11, including…
• CVE-2008-57481 PoCDirectory traversal vulnerability in plugins/spaw2/dialogs/dialog.php in BloofoxCMS 0.3.4 allows remote attackers to read arbitrary files…
• CVE-2008-57494 PoCsArgument injection vulnerability in Google Chrome 1.0.154.36 on Windows XP SP3 allows remote attackers to execute arbitrary commands via…
• CVE-2008-57502 PoCsArgument injection vulnerability in Microsoft Internet Explorer 8 beta 2 on Windows XP SP3 allows remote attackers to execute arbitrary…
• CVE-2008-57512 PoCsSQL injection vulnerability in index.php in AlstraSoft Web Email Script Enterprise (ESE) allows remote attackers to execute arbitrary SQL…
• CVE-2008-57521 PoCDirectory traversal vulnerability in getConfig.php in the Page Flip Image Gallery plugin 0.2.2 and earlier for WordPress, when…
• CVE-2008-57532 PoCsStack-based buffer overflow in BulletProof FTP Client 2.63 and 2010 allows user-assisted attackers to execute arbitrary code via a…
• CVE-2008-57543 PoCsStack-based buffer overflow in BulletProof FTP Client allows user-assisted attackers to execute arbitrary code via a .bps file (aka…
• CVE-2008-57552 PoCsStack-based buffer overflow in IntelliTamper 2.07 and 2.08 allows remote attackers to execute arbitrary code via a MAP file containing a…
• CVE-2008-57561 PoCBuffer overflow in BreakPoint Software Hex Workshop 5.1.4 allows user-assisted attackers to cause a denial of service and possibly execute…
• CVE-2008-57591 PoCCross-site scripting (XSS) vulnerability in FlatnuX CMS (aka Flatnuke3) 2008-12-11 allows remote attackers to inject arbitrary web script…
• CVE-2008-57611 PoCMultiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS (aka Flatnuke3) 2008-12-11 allow remote attackers to inject arbitrary…
• CVE-2008-57621 PoCSimple Text-File Login Script (SiTeFiLo) 1.0.6 stores sensitive information under the web root with insufficient access control, which…
• CVE-2008-57631 PoCPHP remote file inclusion vulnerability in slogin_lib.inc.php in Simple Text-File Login Script (SiTeFiLo) 1.0.6 allows remote attackers to…
• CVE-2008-57641 PoCPHP remote file inclusion vulnerability in calendar.php in WorkSimple 1.2.1, when register_globals is enabled, allows remote attackers to…
• CVE-2008-57651 PoCWorkSimple 1.2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to…
• CVE-2008-57661 PoCSQL injection vulnerability in download.php in Farsi Script Faupload allows remote attackers to execute arbitrary SQL commands via the id…
• CVE-2008-57671 PoCSQL injection vulnerability in authors.asp in gNews Publisher allows remote attackers to execute arbitrary SQL commands via the authorID…
• CVE-2008-57681 PoCSQL injection vulnerability in print.php in the AM Events (aka Amevents) module 0.22 for XOOPS allows remote attackers to execute…
• CVE-2008-57701 PoCCross-site scripting (XSS) vulnerability in config/make_config.php in PHP Weather 2.2.2 allows remote attackers to inject arbitrary web…
• CVE-2008-57711 PoCDirectory traversal vulnerability in test.php in PHP Weather 2.2.2 allows remote attackers to include and execute arbitrary local files…
• CVE-2008-57721 PoCMultiple SQL injection vulnerabilities in ASPSiteWare RealtyListings 1.0 and 2.0 allow remote attackers to execute arbitrary SQL commands…
• CVE-2008-57731 PoCNukedit 4.9.8 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download…
• CVE-2008-57741 PoCMultiple SQL injection vulnerabilities in ASPSiteWare HomeBuilder 1.0 and 2.0 allow remote attackers to execute arbitrary SQL commands via…
• CVE-2008-57751 PoCSQL injection vulnerability in categories.php in Aperto Blog 0.1.1 allows remote attackers to execute arbitrary SQL commands via the id…
• CVE-2008-57761 PoCMultiple directory traversal vulnerabilities in Aperto Blog 0.1.1 allow remote attackers to include and execute arbitrary local files via…
• CVE-2008-57771 PoCSQL injection vulnerability in index.php in CadeNix allows remote attackers to execute arbitrary SQL commands via the cid parameter.
• CVE-2008-57782 PoCsSQL injection vulnerability in report.php in Free Links Directory Script (FLDS) 1.2a allows remote attackers to execute arbitrary SQL…
• CVE-2008-57792 PoCsSQL injection vulnerability in lpro.php in Free Links Directory Script (FLDS) 1.2a allows remote attackers to execute arbitrary SQL…
• CVE-2008-57801 PoCForest Blog 1.3.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to…
• CVE-2008-57812 PoCsSQL injection vulnerability in right.php in Cant Find A Gaming CMS (CFAGCMS) 1.0 Beta 1 allows remote attackers to execute arbitrary SQL…
• CVE-2008-57821 PoCSQL injection vulnerability in bannerclick.php in ZeeMatri 3.0 allows remote attackers to execute arbitrary SQL commands via the adid…
• CVE-2008-57832 PoCsadmin/index.php in V3 Chat Live Support 3.0.4 allows remote attackers to bypass authentication and gain administrative access by setting…
• CVE-2008-57842 PoCsV3 Chat - Profiles/Dating Script 3.0.2 allows remote attackers to bypass authentication and gain administrative access by setting the…
• CVE-2008-57851 PoCSQL injection vulnerability in V3 Chat - Profiles/Dating Script 3.0.2 allows remote attackers to execute arbitrary SQL commands via the…
• CVE-2008-57871 PoCDirectory traversal vulnerability in mod.php in Arab Portal 2.1 on Windows allows remote attackers to read arbitrary files via a .. (dot…
• CVE-2008-57881 PoCSQL injection vulnerability in index.php in Domain Seller Pro 1.5 allows remote attackers to execute arbitrary SQL commands via the id…
• CVE-2008-57891 PoCMultiple PHP remote file inclusion vulnerabilities in the Recly Interactive Feederator (com_feederator) component 1.0.5 for Joomla! allow…
• CVE-2008-57901 PoCMultiple PHP remote file inclusion vulnerabilities in the Recly!Competitions (com_competitions) component 1.0 for Joomla! allow remote…
• CVE-2008-57921 PoCPHP remote file inclusion vulnerability in show_joined.php in Indiscripts Enthusiast 3.1.4, and possibly earlier, allows remote attackers…
• CVE-2008-57931 PoCMultiple PHP remote file inclusion vulnerabilities in the Clickheat - Heatmap stats (com_clickheat) component 1.0.1 for Joomla! allow…
• CVE-2008-57941 PoCDirectory traversal vulnerability in system/admin/images.php in LoveCMS 1.6.2 Final allows remote attackers to delete arbitrary files via…
• CVE-2008-58021 PoCSQL injection vulnerability in index.php in E-topbiz Online Store 1.0 allows remote attackers to execute arbitrary SQL commands via the…
• CVE-2008-58031 PoCSQL injection vulnerability in admin/login.php in E-topbiz Online Store 1.0 allows remote attackers to execute arbitrary SQL commands via…
• CVE-2008-58041 PoCSQL injection vulnerability in admin/admin_catalog.php in e-topbiz Number Links 1 Php Script allows remote attackers to execute arbitrary…
• CVE-2008-58051 PoCSQL injection vulnerability in detail.php in DeltaScripts PHP Classifieds 7.5 and earlier allows remote attackers to execute arbitrary SQL…
• CVE-2008-58061 PoCSQL injection vulnerability in login.php in DeltaScripts PHP Classifieds 7.5 and earlier allows remote attackers to execute arbitrary SQL…
• CVE-2008-58111 PoCSQL injection vulnerability in the PaxGallery (com_paxgallery) component 0.1 for Joomla! allows remote attackers to execute arbitrary SQL…
• CVE-2008-58151 PoCSQL injection vulnerability in Acomment.php in phpAlumni allows remote attackers to execute arbitrary SQL commands via the id parameter.
• CVE-2008-58161 PoCSQL injection vulnerability in repository.php in ILIAS 3.7.4 and earlier allows remote attackers to execute arbitrary SQL commands via the…
• CVE-2008-58171 PoCMultiple SQL injection vulnerabilities in index.php in Web Scribble Solutions webClassifieds 2005 allow remote attackers to execute…
• CVE-2008-58181 PoCDirectory traversal vulnerability in index.php in eDreamers eDContainer 2.22, when magic_quotes_gpc is disabled, allows remote attackers…
• CVE-2008-58191 PoCDirectory traversal vulnerability in eDNews_archive.php in eDreamers eDNews 2, when magic_quotes_gpc is disabled, allows remote attackers…
• CVE-2008-58201 PoCSQL injection vulnerability in eDNews_view.php in eDreamers eDNews 2 allows remote attackers to execute arbitrary SQL commands via the…
• CVE-2008-58213 PoCsMemory leak in WebKit.dll in WebKit, as used by Apple Safari 3.2 on Windows Vista SP1, allows remote attackers to cause a denial of…
• CVE-2008-58241 PoCHeap-based buffer overflow in msadpcm.c in libaudiofile in audiofile 0.2.6 allows context-dependent attackers to cause a denial of service…
• CVE-2008-58381 PoCSQL injection vulnerability in search_results.php in E-Php Scripts E-Shop (aka E-Php Shopping Cart) Shopping Cart Script allows remote…
• CVE-2008-58392 PoCsBuffer overflow in Foxmail 6.5 allows remote attackers to execute arbitrary code via a long mailto URI in the HREF attribute of an A…
• CVE-2008-58401 PoCPHP iCalendar 2.24 and earlier allows remote attackers to bypass authentication by setting the phpicalendar and phpicalendar_login cookies…
• CVE-2008-58412 PoCsMultiple SQL injection vulnerabilities in iGaming 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via the browse…
• CVE-2008-58471 PoCConstructr CMS 3.02.5 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain…
• CVE-2008-58511 PoCSQL injection vulnerability in index.php in My PHP Baseball Stats (MyPBS) allows remote attackers to execute arbitrary SQL commands via…
• CVE-2008-58521 PoCEmefa Guestbook 3.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to…
• CVE-2008-58531 PoCChilek Content Management System (aka ChiCoMaS) 2.0.4 and earlier stores sensitive information under the web root with insufficient access…
• CVE-2008-58541 PoCMultiple cross-site scripting (XSS) vulnerabilities in login.php in myPHPscripts Login Session 2.0 allow remote attackers to inject…
• CVE-2008-58551 PoCmyPHPscripts Login Session 2.0 stores sensitive information under the web root with insufficient access control, which allows remote…
• CVE-2008-58561 PoCDirectory traversal vulnerability in scripts/export.php in ClaSS before 0.8.61 allows remote attackers to read arbitrary files via…
• CVE-2008-58591 PoCSQL injection vulnerability in index.php in Constructr CMS 3.02.5 and earlier, when register_globals is enabled and magic_quotes_gpc is…
• CVE-2008-58601 PoCDirectory traversal vulnerability in backend/template.php in Constructr CMS 3.02.5 and earlier, when register_globals is enabled and…
• CVE-2008-58611 PoCDirectory traversal vulnerability in source.php in FreeLyrics 1.0 allows remote attackers to read arbitrary files via directory traversal…
• CVE-2008-58622 PoCsDirectory traversal vulnerability in webcamXP 5.3.2.375 and 5.3.2.410 build 2132 allows remote attackers to read arbitrary files via a…
• CVE-2008-58631 PoCSQL injection vulnerability in locator.php in the Userlocator module 3.0 for Woltlab Burning Board (wBB) allows remote attackers to…
• CVE-2008-58644 PoCsSQL injection vulnerability in the Top Hotel (com_tophotelmodule) component 1.0 in the Hotel Booking Reservation System (aka HBS) 1.0.0…
• CVE-2008-58654 PoCsSQL injection vulnerability in the com_hbssearch component 1.0 in the Hotel Booking Reservation System (aka HBS) 1.0.0 for Joomla! allows…
• CVE-2008-58681 PoCStack-based buffer overflow in IntelliTamper 2.07 and 2.08 allows user-assisted attackers to execute arbitrary code via a long ProxyLogin…
• CVE-2008-58691 PoCCross-site scripting (XSS) vulnerability in the Proxim Wireless Tsunami MP.11 2411 with firmware 3.0.3 allows remote authenticated users…
• CVE-2008-58702 PoCsFastStone Image Viewer 3.6 allows user-assisted attackers to cause a denial of service (application crash) via a malformed BMP image with…
• CVE-2008-58731 PoCYerba SACphp 6.3 and earlier allows remote attackers to bypass authentication and gain administrative access via a galleta[sesion] cookie…
• CVE-2008-58743 PoCsMultiple SQL injection vulnerabilities in the Hotel Booking Reservation System (aka HBS) for Joomla! allow remote attackers to execute…
• CVE-2008-58753 PoCsSQL injection vulnerability in the com_lowcosthotels component in the Hotel Booking Reservation System (aka HBS) for Joomla! allows remote…
• CVE-2008-58771 PoCMultiple SQL injection vulnerabilities in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, when magic_quotes_gpc is disabled, allow…
• CVE-2008-58781 PoCMultiple directory traversal vulnerabilities in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, when magic_quotes_gpc is disabled…
• CVE-2008-58791 PoCCross-site scripting (XSS) vulnerability in index.php in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, allows remote attackers…
• CVE-2008-58801 PoCadmin/auth.php in Gobbl CMS 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the auth cookie…
• CVE-2008-58811 PoCMultiple directory traversal vulnerabilities in playSMS 0.9.3 allow remote attackers to include and execute arbitrary local files via…
• CVE-2008-58831 PoCAbsolute path traversal vulnerability in front-end/dir.php in mini-pub 0.3 and earlier allows remote attackers to list arbitrary…
• CVE-2008-58842 PoCsAyeView 2.20 allows user-assisted attackers to cause a denial of service (application crash) via a GIF file with a malformed header.
• CVE-2008-58851 PoCThe Net Guys ASPired2Quote stores sensitive information under the web root with insufficient access control, which allows remote attackers…
• CVE-2008-58861 PoCTAKempis Discussion Web 4.0 stores sensitive information under the web root with insufficient access control, which allows remote…
• CVE-2008-58881 PoCMultiple SQL injection vulnerabilities in Click&Rank allow remote attackers to execute arbitrary SQL commands via the id parameter to (1)…
• CVE-2008-58891 PoCCross-site scripting (XSS) vulnerability in user.asp in Click&Rank allows remote attackers to inject arbitrary web script or HTML via the…
• CVE-2008-58901 PoCSQL injection vulnerability in feeds.php in Injader before 2.1.2 allows remote attackers to execute arbitrary SQL commands via the id…
• CVE-2008-58911 PoCCross-site scripting (XSS) vulnerability in the profile editing functionality in Injader before 2.1.2 allows remote attackers to inject…
• CVE-2008-58921 PoCMultiple SQL injection vulnerabilities in ClickAndEmail allow remote attackers to execute arbitrary SQL commands via (1) the ID parameter…
• CVE-2008-58931 PoCCross-site scripting (XSS) vulnerability in admin_dblayers.asp in ClickAndEmail allows remote attackers to inject arbitrary web script or…
• CVE-2008-58941 PoCDirectory traversal vulnerability in index.php in Mediatheka 4.2 allows remote attackers to include and execute arbitrary local files via…
• CVE-2008-58951 PoCSQL injection vulnerability in connection.php in Mediatheka 4.2 and earlier allows remote attackers to execute arbitrary SQL commands via…
• CVE-2008-58961 PoCCodeAvalanche RateMySite stores sensitive information under the web root with insufficient access control, which allows remote attackers…
• CVE-2008-58971 PoCCodeAvalanche FreeWallpaper stores sensitive information under the web root with insufficient access control, which allows remote…
• CVE-2008-58981 PoCCodeAvalanche Directory stores sensitive information under the web root with insufficient access control, which allows remote attackers to…
• CVE-2008-58991 PoCCodeAvalanche FreeForAll stores sensitive information under the web root with insufficient access control, which allows remote attackers…
• CVE-2008-59001 PoCCodeAvalanche Articles stores sensitive information under the web root with insufficient access control, which allows remote attackers to…
• CVE-2008-59011 PoCiyzi Forum 1.0 beta 3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to…
• CVE-2008-59041 PoCThe rdp_rdp_process_color_pointer_pdu function in rdp/rdp_rdp.c in xrdp 0.4.1 and earlier allows remote RDP servers to have an unknown…
• CVE-2008-59181 PoCCross-site scripting (XSS) vulnerability in the getParameterisedSelfUrl function in index.php in WebSVN 2.0 and earlier allows remote…
• CVE-2008-59191 PoCDirectory traversal vulnerability in rss.php in WebSVN 2.0 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to…
• CVE-2008-59201 PoCThe create_anchors function in utils.inc in WebSVN 1.x allows remote attackers to execute arbitrary PHP code via a crafted username that…
• CVE-2008-59211 PoCSQL injection vulnerability in albums.php in Umer Inc Songs Portal allows remote attackers to execute arbitrary SQL commands via the id…
• CVE-2008-59221 PoCMultiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Cant Find A Gaming CMS (CFAGCMS) 1 allow remote…
• CVE-2008-59231 PoCSQL injection vulnerability in default.asp in ASP-DEv XM Events Diary allows remote attackers to execute arbitrary SQL commands the cat…
• CVE-2008-59261 PoCMultiple SQL injection vulnerabilities in login.asp in ASP-DEv Internal E-Mail System allow remote attackers to execute arbitrary SQL…
• CVE-2008-59271 PoCMultiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPNews 0.0.6 allow remote attackers to execute arbitrary SQL…
• CVE-2008-59281 PoCSQL injection vulnerability in redir.php in Free Links Directory Script (FLDS) 1.2a allows remote attackers to execute arbitrary SQL…
• CVE-2008-59291 PoCVP-ASP Shopping Cart 6.50 stores sensitive information under the web root with insufficient access control, which allows remote attackers…
• CVE-2008-59301 PoCSQL injection vulnerability in admin/blog_comments.asp in The Net Guys ASPired2Blog allows remote attackers to execute arbitrary SQL…
• CVE-2008-59311 PoCThe Net Guys ASPired2Blog stores sensitive information under the web root with insufficient access control, which allows remote attackers…
• CVE-2008-59321 PoCCodeAvalanche FreeForum stores sensitive information under the web root with insufficient access control, which allows remote attackers to…
• CVE-2008-59331 PoCMultiple cross-site scripting (XSS) vulnerabilities in index.php in CMS ISWEB 3.0 allow remote attackers to inject arbitrary web script or…
• CVE-2008-59341 PoCSQL injection vulnerability in index.php in CMS ISWEB 3.0 allows remote attackers to execute arbitrary SQL commands via the id_sezione…
• CVE-2008-59361 PoCfront-end/edit.php in mini-pub 0.3 and earlier allows remote attackers to read files and obtain PHP source code via a filename in the…
• CVE-2008-59371 PoCAyeView 2.20 allows user-assisted attackers to cause a denial of service (memory consumption or application crash) via a bitmap (aka .bmp)…
• CVE-2008-59381 PoCPHP remote file inclusion vulnerability in assets/snippets/reflect/snippet.reflect.php in MODx CMS 0.9.6.2 and earlier, when…
• CVE-2008-59391 PoCCross-site scripting (XSS) vulnerability in index.php in MODx CMS 0.9.6.2 and earlier allows remote attackers to inject arbitrary web…
• CVE-2008-59432 PoCsMultiple directory traversal vulnerabilities in NavBoard 16 (2.6.0) allow remote attackers to include and execute arbitrary local files…
• CVE-2008-59441 PoCCross-site scripting (XSS) vulnerability in modules.php in NavBoard 16 (2.6.0) allows remote attackers to inject arbitrary web script or…
• CVE-2008-59451 PoCNukeviet 2.0 Beta allows remote attackers to bypass authentication and gain administrative access by setting the admf cookie to 1. NOTE:…
• CVE-2008-59461 PoCSQL injection vulnerability in readmore.php in PHP-Fusion 4.01 allows remote attackers to execute arbitrary SQL commands via the news_id…
• CVE-2008-59471 PoCPHP remote file inclusion vulnerability in include/class_yapbbcooker.php in YapBB 1.2.Beta 2 allows remote attackers to execute arbitrary…
• CVE-2008-59481 PoCDirectory traversal vulnerability in index.php in BNCwi 1.04 and earlier allows remote attackers to include and execute arbitrary local…
• CVE-2008-59492 PoCsMultiple PHP remote file inclusion vulnerabilities in ccTiddly 1.7.4 and 1.7.6 allow remote attackers to execute arbitrary PHP code via a…
• CVE-2008-59501 PoCSQL injection vulnerability in media/media_level.asp in ASP Template Creature allows remote attackers to execute arbitrary SQL commands…
• CVE-2008-59511 PoCASP Template Creature stores sensitive information under the web root with insufficient access control, which allows remote attackers to…
• CVE-2008-59521 PoCSQL injection vulnerability in KTP Computer Customer Database (KTPCCD) CMS, when magic_quotes_gpc is disabled, allows remote authenticated…
• CVE-2008-59531 PoCDirectory traversal vulnerability in KTP Computer Customer Database (KTPCCD) CMS, when magic_quotes_gpc is disabled, allows remote…
• CVE-2008-59541 PoCSQL injection vulnerability in KTP Computer Customer Database (KTPCCD) CMS, when magic_quotes_gpc is disabled, allows remote attackers to…
• CVE-2008-59552 PoCsSQL injection vulnerability in show.php in Wbstreet (aka PHPSTREET Webboard) 1.0 allows remote attackers to execute arbitrary SQL commands…
• CVE-2008-59561 PoCWbstreet (aka PHPSTREET Webboard) 1.0 stores sensitive information under the web root with insufficient access control, which allows…
• CVE-2008-59571 PoCSQL injection vulnerability in the Mydyngallery (com_mydyngallery) component 1.4.2 for Joomla! allows remote attackers to execute…
• CVE-2008-59581 PoCMultiple SQL injection vulnerabilities in Active Test 2.1 allow remote attackers to execute arbitrary SQL commands via the QuizID…
• CVE-2008-59591 PoCMultiple SQL injection vulnerabilities in start.asp in Active Test 2.1 allow remote attackers to execute arbitrary SQL commands via the…
• CVE-2008-59621 PoCDirectory traversal vulnerability in library/setup/rpc.php in Gravity Getting Things Done (GTD) 0.4.5 and earlier allows remote attackers…
• CVE-2008-59631 PoCEval injection vulnerability in library/setup/rpc.php in Gravity Getting Things Done (GTD) 0.4.5 and earlier allows remote attackers to…
• CVE-2008-59651 PoCDirectory traversal vulnerability in index.php in LokiCMS 0.3.4 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to…
• CVE-2008-59661 PoCglobsy_edit.php in Globsy 1.0 and earlier allows remote attackers to create or overwrite arbitrary files via a filename in the file…
• CVE-2008-59671 PoCadmin/index.php in PHP iCalendar 2.3.4, 2.24, and earlier does not require administrative authentication for an addupdate action, which…
• CVE-2008-59681 PoCDirectory traversal vulnerability in print.php in PHP iCalendar 2.24 and earlier allows remote attackers to include and execute arbitrary…
• CVE-2008-59691 PoCSQL injection vulnerability in popupproduct.php in Sunbyte e-Flower allows remote attackers to execute arbitrary SQL commands via the id…
• CVE-2008-59701 PoCSQL injection vulnerability in profile_social.php in i-Net Solution Orkut Clone allows remote authenticated users to execute arbitrary SQL…
• CVE-2008-59711 PoCCross-site scripting (XSS) vulnerability in profile_social.php in i-Net Solution Orkut Clone allows remote authenticated users to inject…
• CVE-2008-59721 PoCSQL injection vulnerability in default.asp in Active Business Directory 2 allows remote attackers to execute arbitrary SQL commands via…
• CVE-2008-59731 PoCSQL injection vulnerability in login.aspx in Active Web Mail 4.0 allows remote attackers to execute arbitrary SQL commands via the…
• CVE-2008-59742 PoCsMultiple SQL injection vulnerabilities in login.aspx in Active Price Comparison 4.0 allow remote attackers to execute arbitrary SQL…
• CVE-2008-59751 PoCSQL injection vulnerability in links.asp in Active Price Comparison 4.0 allows remote attackers to execute arbitrary SQL commands via the…
• CVE-2008-59761 PoCMultiple cross-site scripting (XSS) vulnerabilities in siteadmin/forgot.php in PHP JOBWEBSITE PRO allow remote attackers to inject…
• CVE-2008-59771 PoCSQL injection vulnerability in siteadmin/forgot.php in PHP JOBWEBSITE PRO allows remote attackers to execute arbitrary SQL commands via…
• CVE-2008-59782 PoCsMultiple SQL injection vulnerabilities in Ocean12 Mailing List Manager Gold allow remote attackers to execute arbitrary SQL commands via…
• CVE-2008-59791 PoCCross-site scripting (XSS) vulnerability in default.asp in Ocean12 Mailing List Manager Gold allows remote attackers to inject arbitrary…
• CVE-2008-59801 PoCOcean12 Mailing List Manager Gold stores sensitive data under the web root with insufficient access control, which allows remote attackers…
• CVE-2008-59811 PoCPacPoll 4.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a…
• CVE-2008-59881 PoCSQL injection vulnerability in scripts/recruit_details.php in Jadu CMS for Government allows remote attackers to execute arbitrary SQL…
• CVE-2008-59891 PoCDirectory traversal vulnerability in defs.php in PHPcounter 1.3.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers…
• CVE-2008-59901 PoCDirectory traversal vulnerability in connect/init.inc in emergecolab 1.0 allows remote attackers to include and execute arbitrary local…
• CVE-2008-59911 PoCDirectory traversal vulnerability in docs.php in MailWatch for MailScanner 1.0.4 and earlier allows remote attackers to include and…
• CVE-2008-59921 PoCMultiple SQL injection vulnerabilities in Jetik Emlak Sistem A (ESA) 2.0 allow remote attackers to execute arbitrary SQL commands via the…
• CVE-2008-59931 PoCDirectory traversal vulnerability in image.php in Barcode Generator 1D (barcodegen) 2.0.0 and earlier allows remote attackers to include…
• CVE-2008-59971 PoCAbsolute path traversal vulnerability in admin/fileKontrola/browser.asp in Omnicom Content Platform (OCP) 2.0 allows remote attackers to…
• CVE-2008-59981 PoCMultiple SQL injection vulnerabilities in the ajax_checklist_save function in the Ajax Checklist module 5.x before 5.x-1.1 for Drupal…