Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2008
September

CVEs published in September 2008

445 vulnerabilities, 87 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

invision power services power boardSQL injection vulnerability in xmlout.php in Invision Power Board (IP.Board or IPB) 2.2.x and 2.3...CVE-2008-41717.5 HighSeptember 22, 2008
oscommercecreate_account.php in osCommerce 2.2 RC 2a allows remote attackers to obtain sensitive...CVE-2008-41705.0 MediumSeptember 22, 2008
iscripts easyindexSQL injection vulnerability in detaillist.php in iScripts EasyIndex, possibly 1.0, allows remote...CVE-2008-4169Public exploit7.5 HighSeptember 22, 2008
pro2col stingray ftsCross-site scripting (XSS) vulnerability in verify_login.jsp in Pro2col Stingray FTS allows...CVE-2008-41684.3 MediumSeptember 22, 2008
ezphotogalleryuseradmin.php in Easy Photo Gallery (aka Ezphotogallery) 2.1 does not require administrative...CVE-2008-4167Public exploit6.4 MediumSeptember 22, 2008
avantbrowser avant browserInteger overflow in the JavaScript engine in Avant Browser 11.7 Build 9 and earlier allows remote...CVE-2008-4166Public exploit4.3 MediumSeptember 22, 2008
kolab groupware serveradmin/user/create_user.php in Kolab Groupware Server 1.0.0 places a user password in an HTTP GET...CVE-2008-41654.0 MediumSeptember 22, 2008
memht portalcron.php in MemHT Portal 3.9.0 and earlier allows remote attackers to obtain sensitive...CVE-2008-4164Public exploit2.6 LowSeptember 22, 2008
isc bindUnspecified vulnerability in ISC BIND 9.3.5-P2-W1, 9.4.2-P2-W1, and 9.5.0-P2-W1 on Windows allows...CVE-2008-41637.8 HighSeptember 22, 2008
noomsOpen redirect vulnerability in admin/auth.php in NooMS 1.1 allows remote attackers to redirect...CVE-2008-41624.3 MediumSeptember 22, 2008
assetmanSQL injection vulnerability in search_inv.php in Assetman 2.5b allows remote attackers to execute...CVE-2008-4161Public exploit6.8 MediumSeptember 22, 2008
sun opensolaris, solaris +1 moreUnspecified vulnerability in the UFS module in Sun Solaris 8 through 10 and OpenSolaris allows...CVE-2008-41604.7 MediumSeptember 22, 2008
suse linuxemacs/lisp/progmodes/python.el in Emacs 22.1 and 22.2 imports Python script from the current...CVE-2008-39497.2 HighSeptember 22, 2008
zanfi solutions jaw portal, cms lite +1 moreSQL injection vulnerability in index.php in Jaw Portal and Zanfi CMS lite and allows remote...CVE-2008-4159Public exploit7.5 HighSeptember 22, 2008
zanfi solutions cms liteMultiple directory traversal vulnerabilities in index.php in Zanfi CMS lite 1.2 allow remote...CVE-2008-4158Public exploit6.8 MediumSeptember 22, 2008
vastal phpvidSQL injection vulnerability in groups.php in Vastal I-Tech phpVID 1.1 allows remote attackers to...CVE-2008-4157Public exploit7.5 HighSeptember 22, 2008
customcms gaming portalSQL injection vulnerability in print.php in CustomCms (CCMS) Gaming Portal 4.0, when...CVE-2008-4156Public exploit6.8 MediumSeptember 19, 2008
easybrik easysiteMultiple directory traversal vulnerabilities in EasySite 2.3 allow remote attackers to read...CVE-2008-4155Public exploit7.8 HighSeptember 19, 2008
living-e webedition cmsSQL injection vulnerability in living-e webEdition CMS allows remote attackers to execute...CVE-2008-4154Public exploit7.5 HighSeptember 19, 2008
drupal talkThe Talk module 5.x before 5.x-1.3 and 6.x before 6.x-1.5, a module for Drupal, does not perform...CVE-2008-41535.0 MediumSeptember 19, 2008
drupal talkCross-site scripting (XSS) vulnerability in the Talk module 5.x before 5.x-1.3 and 6.x before 6.x...CVE-2008-41523.5 LowSeptember 19, 2008
cyaskDirectory traversal vulnerability in collect.php in CYASK 3.x allows remote attackers to read...CVE-2008-4151Public exploit5.0 MediumSeptember 19, 2008
dieselscripts diesel joke siteSQL injection vulnerability in picture_category.php in Diesel Joke Site allows remote attackers...CVE-2008-4150Public exploit7.5 HighSeptember 19, 2008
drupal link to usCross-site scripting (XSS) vulnerability in the Greg Holsclaw Link to Us module 5.x before 5.x-1...CVE-2008-41494.3 MediumSeptember 19, 2008
drupal mailhandlerSQL injection vulnerability in the Mailhandler module 5.x before 5.x-1.4 and 6.x before 6.x-1.4,...CVE-2008-41487.5 HighSeptember 19, 2008
drupal mailsaveCross-site scripting (XSS) vulnerability in the Mailsave module 5.x before 5.x-3.3 and 6.x before...CVE-2008-41474.3 MediumSeptember 19, 2008
addalinkAddalink 1.0 beta 4 and earlier allows remote attackers to (1) approve web-site additions via a...CVE-2008-4146Public exploit5.0 MediumSeptember 19, 2008
addalinkSQL injection vulnerability in user_read_links.php in Addalink 1.0 beta 4 and earlier, when...CVE-2008-4145Public exploit6.8 MediumSeptember 19, 2008
discountedscripts e-gold script shopSQL injection vulnerability in index.php in ACG-ScriptShop E-Gold Script Shop allows remote...CVE-2008-4144Public exploit7.5 HighSeptember 19, 2008
razorecommerce shopping cartSQL injection vulnerability in category_search.php in RazorCommerce Shopping Cart allows remote...CVE-2008-41437.5 HighSeptember 19, 2008
ephpscripts e-php cmsSQL injection vulnerability in article.php in E-Php CMS allows remote attackers to execute...CVE-2008-4142Public exploit7.5 HighSeptember 19, 2008
x10media .x10 automatic mp3 scriptMultiple PHP remote file inclusion vulnerabilities in x10Media x10 Automatic MP3 Script 1.5.5...CVE-2008-4141Public exploit7.5 HighSeptember 19, 2008
opensolution quick.cartCross-site scripting (XSS) vulnerability in admin.php in Quick.Cart 3.1 allows remote attackers...CVE-2008-4140Public exploit4.3 MediumSeptember 19, 2008
opensolution quick.cms.liteCross-site scripting (XSS) vulnerability in admin.php in OpenSolution Quick.Cms.Lite 2.1 allows...CVE-2008-4139Public exploit2.6 LowSeptember 19, 2008
technotePHP remote file inclusion vulnerability in skin_shop/standard/3_plugin_twindow/twindow_notice.php...CVE-2008-4138Public exploitEPSS 10.3%10.0 HighSeptember 19, 2008
php crawler crawlerPHP remote file inclusion vulnerability in footer.php in PHP-Crawler 0.8 allows remote attackers...CVE-2008-4137Public exploit7.5 HighSeptember 19, 2008
michael roth software pftpMichael Roth Software Personal FTP Server (PFT) 6.0f allows remote attackers to cause a denial of...CVE-2008-4136Public exploit5.0 MediumSeptember 19, 2008
s60 symbian osSymbian OS S60 3rd edition on the Nokia E90 Communicator 07.40.1.2 Ra-6 and Nseries N82 allows...CVE-2008-4135Public exploit7.8 HighSeptember 19, 2008
phprealtyPHP remote file inclusion vulnerability in manager/static/view.php in phpRealty 0.03 and earlier,...CVE-2008-4134Public exploit7.5 HighSeptember 19, 2008
d-link dir-100The web proxy service on the D-Link DIR-100 with firmware 1.12 and earlier does not properly...CVE-2008-4133Public exploit4.3 MediumSeptember 19, 2008
componentone vsflexgridStack-based buffer overflow in the VSFlexGrid.VSFlexGridL ActiveX control in ComponentOne...CVE-2008-41329.3 HighSeptember 19, 2008
sun solarisMultiple unspecified vulnerabilities in Sun Solaris 8 through 10 allow local users to gain...CVE-2008-4131Public exploit7.2 HighSeptember 19, 2008
galleryCross-site scripting (XSS) vulnerability in Gallery 2.x before 2.2.6 allows remote attackers to...CVE-2008-41304.3 MediumSeptember 18, 2008
galleryGallery before 1.5.9, and 2.x before 2.2.6, does not properly handle ZIP archives containing...CVE-2008-41294.0 MediumSeptember 18, 2008
cisco iosMultiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component...CVE-2008-4128In KEVPublic exploitEPSS 33.9%9.3 HighSeptember 18, 2008
galleryGallery before 1.5.9, and 2.x before 2.2.6, does not set the secure flag for the session cookie...CVE-2008-36625.0 MediumSeptember 18, 2008
macrovision flexnet connectThe InstallShield Update Service Agent ActiveX control in isusweb.dll allows remote attackers to...CVE-2008-24709.3 HighSeptember 18, 2008
microsoft internet explorerMshtml.dll in Microsoft Internet Explorer 7 Gold 7.0.5730 and 8 Beta 8.0.6001 on Windows XP SP2...CVE-2008-4127EPSS 16.4%4.3 MediumSeptember 18, 2008
phpbbThe search function in phpBB 2.x provides a search_id value that leaks the state of PHP's PRNG,...CVE-2008-41255.0 MediumSeptember 18, 2008
python software foundation pythonTools/faqwiz/move-faqwiz.sh (aka the generic FAQ wizard moving tool) in Python 2.4.5 might allow...CVE-2008-41087.2 HighSeptember 18, 2008
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open