CVEs published in January 2008
499 vulnerabilities, 78 critical, 0 exploited.
- uebimiau webmailDirectory traversal vulnerability in error.php in Uebimiau Webmail 2.7.10 and 2.7.2 allows remote...6.4 Medium
- loudblogEval injection vulnerability in loudblog/inc/parse_old.php in Loudblog 0.8.0 and earlier allows...6.8 Medium
- xoops xoopsgallery modulePHP remote file inclusion vulnerability in xoopsgallery/init_basic.php in the mod_gallery module...6.8 Medium
- snetworks php classifiedsPHP remote file inclusion vulnerability in config.inc.php in SNETWORKS PHP CLASSIFIEDS 5.0 allows...7.5 High
- snitz communications forums 2000Snitz Forums 2000 3.4.05 allows remote attackers to obtain sensitive information via a direct...5.0 Medium
- snitz communications forums 2000Snitz Forums 2000 3.4.06 and earlier stores sensitive information under the web root with...5.0 Medium
- snitz communications forums 2000Cross-site scripting (XSS) vulnerability in Forums/setup.asp in Snitz Forums 2000 3.4.06 and...4.3 Medium
- thomas perez tribisurMultiple SQL injection vulnerabilities in Tribisur 2.1 and earlier allow remote attackers to...7.5 High
- uber uploader uploaderThe default configuration of Uber Uploader (UU) 5.3.6 and earlier does not block uploads of (1) ...5.0 Medium
- xoopsThe b_system_comments_show function in htdocs/modules/system/blocks/system_blocks.php in XOOPS...5.0 Medium
- rapidshare databaseCross-site scripting (XSS) vulnerability in Default.asp in RapidShare Database allows remote...4.3 Medium
- apache http serverCross-site scripting (XSS) vulnerability in balancer-manager in mod_proxy_balancer in the Apache...3.5 Low
- apache http serverThe balancer_handler function in mod_proxy_balancer in the Apache HTTP Server 2.2.0 through 2.2.6...4.0 Medium
- apache http serverCross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2...4.3 Medium
- pragmasys fortress sshPragma FortressSSH 5.0 Build 4 Revision 293 and earlier handles long input to sshd.exe by...5.0 Medium
- instantsoftwares dating siteCross-site scripting (XSS) vulnerability in login_form.asp in Instant Softwares Dating Site...4.3 Medium
- instantsoftwares dating siteSQL injection vulnerability in login_form.asp in Instant Softwares Dating Site allows remote...7.5 High
- siteatschoolSQL injection vulnerability in starnet/addons/slideshow_full.php in Site@School 2.3.10 and...6.8 Medium
- makale scripti scriptiCross-site scripting (XSS) vulnerability in Makale Scripti allows remote attackers to inject...4.3 Medium
- mortbay jetty jettyMortbay Jetty Double Slash URI Information Disclosure Vulnerability5.0 Medium
- instantsoftwares dating siteSQL injection vulnerability in login_form.asp in Instant Softwares Dating Site allows remote...7.5 High
- white dune duneFormat string vulnerability in the swDebugf function in DuneApp.cpp in White_Dune 0.29 beta791...7.5 High
- white dune duneStack-based buffer overflow in the Scene::errorf function in Scene.cpp in White_Dune 0.29 beta791...7.5 High
- myphp forum forumMultiple SQL injection vulnerabilities in MyPHP Forum 3.0 and earlier allow remote attackers to...6.8 Medium
- realnetworks realplayerBuffer overflow in RealPlayer 11 build 6.0.14.748 allows remote attackers to execute arbitrary...10.0 High
- georgia softworks ssh2 serverFormat string vulnerability in the log function in Georgia SoftWorks SSH2 Server (GSW_SSHD) 7.01...7.5 High
- georgia softworks ssh2 serverMultiple buffer overflows in Georgia SoftWorks SSH2 Server (GSW_SSHD) 7.01.0003 and earlier allow...7.5 High
- asterisk appliance developer kit, business edition, asterisknow +2 more +4 moreThe SIP channel driver in Asterisk Open Source 1.4.x before 1.4.17, Business Edition before C.1.0...5.0 Medium
- modxcmsMultiple directory traversal vulnerabilities in MODx Content Management System 0.9.6.1 allow...6.4 Medium
- phpcredo phcdownloadSQL injection vulnerability in search.php in PHCDownload 1.1.0 allows remote attackers to execute...7.5 High
- phpcredo phcdownloadCross-site scripting (XSS) vulnerability in search.php in PHCDownload 1.1.0 allows remote...4.3 Medium
- peergoal myspace content zoneadmin/uploadgames.php in MySpace Content Zone (MCZ) 3.x does not require administrative...7.5 High
- eticketMultiple cross-site scripting (XSS) vulnerabilities in newticket.php in eTicket 1.5.5.2, and 1.5...4.3 Medium
- trolltech qsslsocketQSslSocket in Trolltech Qt 4.3.0 through 4.3.2 does not properly verify SSL certificates, which...4.3 Medium
- myphp forumSQL injection vulnerability in faq.php in MyPHP Forum 3.0 and earlier allows remote attackers to...6.8 Medium
- zenphotoSQL injection vulnerability in rss.php in Zenphoto 1.1 through 1.1.3 allows remote attackers to...7.5 High
- netchemia oneschoolSQL injection vulnerability in admin/login.asp in Netchemia oneSCHOOL allows remote attackers to...7.5 High
- webportal cmsSQL injection vulnerability in index.php in WebPortal CMS 0.6.0 and earlier allows remote...7.5 High
- pragmatic utopia pu arcadeSQL injection vulnerability in (1) Puarcade.php and (2) PUarcade.html.php in Pragmatic Utopia PU...7.5 High
- cutephp cutenewsDirectory traversal vulnerability in file.php in CuteNews 2.6 allows remote attackers to read...5.8 Medium
- 2z project project2z project 0.9.6.1 allows attackers to change the password without supplying the old password.6.4 Medium
- 2z project project2z project 0.9.6.1 allows remote attackers to obtain sensitive information via (1) a request to...5.0 Medium
- 2z project projectMultiple cross-site scripting (XSS) vulnerabilities in 2z project 0.9.6.1 allow remote attackers...4.3 Medium
- customcms ccmsSQL injection vulnerability in admin.php/vars.php in CustomCMS (CCMS) 3.1 Demo allows remote...7.5 High
- mihalism multi hostPHP remote file inclusion vulnerability in source/includes/load_forum.php in Mihalism Multi Forum...7.5 High
- cmsmadesimple cms made simpleSQL injection vulnerability in content_css.php in the TinyMCE module for CMS Made Simple 1.2.2...7.5 High
- matpo bilder galerie kontakt formularPHP remote file inclusion vulnerability in includes/function.php in Kontakt Formular 1.4 allows...7.5 High
- macrovision update serviceBuffer overflow in a certain ActiveX control in Macrovision InstallShield Update Service Web...9.3 High
- mihalism multi hostDirectory traversal vulnerability in download.php in Mihalism Multi Host 2.0.7 allows remote...5.0 Medium
- xcmscpie.php in XCMS 1.83 and earlier sends a redirect to the web browser but does not exit, which...7.5 High
- Show moreLoading…