CVEs published in February 2008
524 vulnerabilities, 79 critical, 2 exploited.
- dokeos e-learning systemMultiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.4 allow remote attackers to...4.3 Medium
- dokeosMultiple SQL injection vulnerabilities in Dokeos 1.8.4 allow remote attackers to execute...7.5 High
- joomla com downloadsSQL injection vulnerability in index.php in the Downloads (com_downloads) component for Mambo and...7.5 High
- crafty syntax live help syntax live helpCross-site scripting (XSS) vulnerability in lostsheep.php in Crafty Syntax Live Help (CSLH)...4.3 Medium
- xoops mytopicsSQL injection vulnerability in print.php in the myTopics module for XOOPS allows remote attackers...7.5 High
- sam lantinga splitvtmisc.c in splitvt 1.6.6 and earlier does not drop group privileges before executing xprop, which...7.2 High
- emc replistorMultiple heap-based buffer overflows in EMC RepliStor 6.2 SP2, and possibly earlier versions,...7.8 High
- joomla com profileSQL injection vulnerability in index.php in the com_profile component for Joomla! allows remote...7.5 High
- wordpress dean logan wp-people pluginSQL injection vulnerability in wp-people-popup.php in Dean Logan WP-People plugin 1.6.1 for...7.5 High
- joomla com pccookbookSQL injection vulnerability in index.php in the PccookBook (com_pccookbook) component for Joomla!...7.5 High
- statcountexStatCounteX 3.0 and 3.1 allows remote attackers to obtain sensitive information and edit...6.4 Medium
- joomla com clasifierSQL injection vulnerability in index.php in the Classifier (com_clasifier) component for Joomla!...7.5 High
- joomla com ricette componentSQL injection vulnerability in index.php in the Giorgio Nordo Ricette (com_ricette) 1.0 component...7.5 High
- publicwarehouse lightblogDirectory traversal vulnerability in view_member.php in Public Warehouse LightBlog 9.6 allows...4.4 Medium
- astats astatspro, joomla com astatspro +1 moreSQL injection vulnerability in refer.php in the astatsPRO (com_astatspro) 1.0 component for...7.5 High
- sophos es1000, es4000 +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the web administration interface in Sophos...4.3 Medium
- john godley search unleashed, wordpress search unleashed plugin +1 moreCross-site scripting (XSS) vulnerability in the log feature in the John Godley Search Unleashed 0...4.3 Medium
- sun solarisUnspecified vulnerability in the vuidmice STREAMS modules in Sun Solaris 9 and 10 on x86...4.9 Medium
- simple cms cmsSQL injection vulnerability in indexen.php in Simple CMS 1.0.3 and earlier allows remote...7.5 High
- ibm lotus quickrCross-site scripting (XSS) vulnerability in Lotus Quickr for i5/OS before 8.0.0.2 Hotfix 11, when...4.3 Medium
- joomla com galeriaSQL injection vulnerability in index.php in the com_galeria component for Joomla! allows remote...7.5 High
- joomla kemas antonius com quranSQL injection vulnerability in index.php in the Kemas Antonius com_quran 1.1 and earlier...7.5 High
- joomla rapid recipeMultiple SQL injection vulnerabilities in the Rapid Recipe (com_rapidrecipe) 1.6.5 and earlier...7.5 High
- apple iphotoThe Digital Photo Access Protocol (DPAP) server for iPhoto 4.0.3 allows remote attackers to cause...7.5 High
- lyris list managerMultiple unspecified vulnerabilities in Lyris ListManager 8.x before 8.95d, 9.2 before 9.2c, and...10.0 High
- joomla, joomlapixel jooget, mambo +2 moreSQL injection vulnerability in jooget.php in the Joomlapixel Jooget! (com_jooget) 2.6.8 component...7.5 High
- atutorMultiple cross-site scripting (XSS) vulnerabilities in ATutor 1.5.5 and earlier allow remote...4.3 Medium
- phpnuke bookSQL injection vulnerability in the Books module of PHP-Nuke allows remote attackers to execute...7.5 High
- carolineCross-site scripting (XSS) vulnerability in Claroline before 1.8.9 allows remote attackers to...4.3 Medium
- carolineSQL injection vulnerability in Claroline before 1.8.9 allows remote attackers to execute...7.5 High
- carolineUnspecified vulnerability in the php2phps function in Claroline before 1.8.9 has unknown impact...10.0 High
- drupal header imageUnspecified vulnerability in the Header Image Module before 5.x-1.1 for Drupal allows remote...10.0 High
- scribeDirectory traversal vulnerability in index.php in Scribe 0.2 allows remote attackers to read...3.6 Low
- osi codes inc. phpliveSQL injection vulnerability in admin/traffic/knowledge_searchm.php in OSI Codes Inc. PHP Live! 3...7.5 High
- etomite** DISPUTED ** Cross-site scripting (XSS) vulnerability in index.php in Etomite 0.6.1.4 Final...4.3 Medium
- plutostatus locatorDirectory traversal vulnerability in index.php in PlutoStatus Locator 1.0 pre alpha allows remote...3.6 Low
- freephpgalleryMultiple directory traversal vulnerabilities in freePHPgallery 0.6 allow remote attackers to...7.5 High
- joomla com filebase componentSQL injection vulnerability in the com_filebase component for Joomla! and Mambo allows remote...7.5 High
- com sg sgSQL injection vulnerability in the com_sg component for Joomla! and Mambo allows remote attackers...7.5 High
- egitimhost com mezunSQL injection vulnerability in the com_mezun component for Joomla! allows remote attackers to...7.5 High
- trucDirectory traversal vulnerability in download.php in Tracking Requirements & Use Cases (TRUC) 0...6.4 Medium
- xpwebDirectory traversal vulnerability in Download.php in XPWeb 3.0.1, 3.3.2, and possibly other...5.0 Medium
- banpro net banpro dmsDirectory traversal vulnerability in DMS/index.php in BanPro DMS 1.0 allows remote attackers to...6.4 Medium
- auracmsMultiple SQL injection vulnerabilities in AuraCMS 1.62 allow remote attackers to execute...7.5 High
- joomla com scheduling componentSQL injection vulnerability in the com_scheduling module for Joomla! and Mambo allows remote...7.5 High
- ikiwikiCross-site scripting (XSS) vulnerability in the htmlscrubber in Ikiwiki before 1.1.46 allows...4.3 Medium
- ikiwikiCross-site scripting (XSS) vulnerability in the meta plugin in Ikiwiki before 1.1.47 allows...4.3 Medium
- horde groupware, groupware webmail edition, turba contact manager +2 morelib/Driver/sql.php in Turba 2 (turba2) Contact Manager H3 2.1.x before 2.1.7 and 2.2.x before 2.2...4.9 Medium
- paul pelzl wyrdwyrd 1.4.3b allows local users to overwrite arbitrary files via a symlink attack on the wyrd-tmp....3.6 Low
- reality medias phpizabiUnrestricted file upload vulnerability in image.php in PHPizabi 0.848b C1 HFP1 allows remote...9.3 High
- Show moreLoading…