Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2008
October

CVEs published in October 2008

540 vulnerabilities, 114 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

easy-script myktoolsDirectory traversal vulnerability in update.php in MyKtools 2.4 allows remote attackers to...CVE-2008-4781Public exploit7.5 HighOctober 29, 2008
easy-script myforumDirectory traversal vulnerability in admin/centre.php in MyForum 1.3, when register_globals is...CVE-2008-4780Public exploit6.8 MediumOctober 29, 2008
tguzipStack-based buffer overflow in TUGzip 3.5.0.0 allows remote attackers to denial of service (crash...CVE-2008-4779Public exploitEPSS 64.7%10.0 HighOctober 29, 2008
dream4 koobi cmsSQL injection vulnerability in the gallery module in Koobi CMS 4.3.0 allows remote attackers to...CVE-2008-4778Public exploit7.5 HighOctober 29, 2008
joomla com lmsSQL injection vulnerability in the Showroom Joomlearn LMS (com_lms) component for Joomla! and...CVE-2008-4777Public exploit7.5 HighOctober 29, 2008
openoffice openoffice.orgMultiple integer overflows in OpenOffice.org (OOo) 2.x before 2.4.2 allow remote attackers to...CVE-2008-22389.3 HighOctober 29, 2008
openoffice openoffice.orgHeap-based buffer overflow in OpenOffice.org (OOo) 2.x before 2.4.2 allows remote attackers to...CVE-2008-22379.3 HighOctober 29, 2008
wojtek kaniewsk libgadulibgadu before 1.8.2 allows remote servers to cause a denial of service (crash) via a contact...CVE-2008-4776Fix available4.3 MediumOctober 28, 2008
phpmyadminCross-site scripting (XSS) vulnerability in pmd_pdf.php in phpMyAdmin 3.0.0, and possibly other...CVE-2008-4775Public exploitFix available2.6 LowOctober 28, 2008
questwork questcmsCross-site scripting (XSS) vulnerability in main/main.php in QuestCMS allows remote attackers to...CVE-2008-4774Public exploit4.3 MediumOctober 28, 2008
questwork questcmsDirectory traversal vulnerability in main/main.php in QuestCMS allows remote attackers to read...CVE-2008-4773Public exploit5.0 MediumOctober 28, 2008
questwork questcmsSQL injection vulnerability in main/main.php in QuestCMS allows remote attackers to execute...CVE-2008-4772Public exploit7.5 HighOctober 28, 2008
4xem vatctrl class, d-link mpeg4 shm audio control, vivotek rtsp mpeg4 sp control +2 moreStack-based buffer overflow in VATDecoder.VatCtrl.1 ActiveX control in (1) 4xem VatCtrl Class ...CVE-2008-4771Public exploit9.3 HighOctober 28, 2008
wordpressDirectory traversal vulnerability in the get_category_template function in wp-includes/theme.php...CVE-2008-4769Public exploitFix available9.3 HighOctober 28, 2008
tlm cms cmsSQL injection vulnerability in TLM CMS 3.1 allows remote attackers to execute arbitrary SQL...CVE-2008-4768Public exploit7.5 HighOctober 28, 2008
php-nuke downloadsplus moduleUnrestricted file upload vulnerability in the DownloadsPlus module in PHP-Nuke allows remote...CVE-2008-4767Public exploit9.0 HighOctober 28, 2008
o2php oxygen bulletin boardSQL injection vulnerability in member.php in Oxygen Bulletin Board 1.1.3 allows remote attackers...CVE-2008-47667.5 HighOctober 28, 2008
oscommerce poll boothSQL injection vulnerability in pollBooth.php in osCommerce Poll Booth Add-On 2.0 allows remote...CVE-2008-4765Public exploit7.5 HighOctober 28, 2008
extplorer com extplorerDirectory traversal vulnerability in the eXtplorer module (com_extplorer) 2.0.0 RC2 and earlier...CVE-2008-4764Public exploitEPSS 16.5%5.0 MediumOctober 28, 2008
wikidsystems wclient-phpMultiple cross-site scripting (XSS) vulnerabilities in sample.php in WiKID wClient-PHP 3.0-2 and...CVE-2008-47634.3 MediumOctober 28, 2008
freesshdStack-based buffer overflow in freeSSHd 1.2.1 allows remote authenticated users to cause a denial...CVE-2008-4762Public exploitEPSS 14.5%9.0 HighOctober 28, 2008
kayako esupportCross-site scripting (XSS) vulnerability in includes/htmlArea/plugins/HtmlTidy/html-tidy-logic...CVE-2008-4761Public exploit4.3 MediumOctober 28, 2008
graphiks myforumSQL injection vulnerability in lecture.php in Graphiks MyForum 1.3, when register_globals is...CVE-2008-4760Public exploit6.8 MediumOctober 28, 2008
buzzscripts buzzywallDirectory traversal vulnerability in download.php in BuzzyWall 1.3.1 allows remote attackers to...CVE-2008-4759Public exploit5.0 MediumOctober 28, 2008
php-dailyDirectory traversal vulnerability in download_file.php in PHP-Daily allows remote attackers to...CVE-2008-4758Public exploit5.0 MediumOctober 28, 2008
php-dailyMultiple SQL injection vulnerabilities in PHP-Daily allow remote attackers to execute arbitrary...CVE-2008-4757Public exploit7.5 HighOctober 28, 2008
php-dailyCross-site scripting (XSS) vulnerability in add_prest_date.php in PHP-Daily allows remote...CVE-2008-4756Public exploit4.3 MediumOctober 28, 2008
pozscripts classified auctions scriptSQL injection vulnerability in gotourl.php in PozScripts Classified Auctions Script allows remote...CVE-2008-4755Public exploit7.5 HighOctober 28, 2008
scripts-for-sites ez forumSQL injection vulnerability in forum.php in Scripts for Sites (SFS) Ez Forum allows remote...CVE-2008-4754Public exploit5.8 MediumOctober 27, 2008
aj square inc rss readerSQL injection vulnerability in EditUrl.php in AJ Square RSS Reader allows remote attackers to...CVE-2008-4753Public exploit7.5 HighOctober 27, 2008
tech logic tlnewsTlNews 2.2 allows remote attackers to bypass authentication and gain administrative access by...CVE-2008-4752Public exploit7.5 HighOctober 27, 2008
epistream ipei guestbookCross-site scripting (XSS) vulnerability in index.php in iPei Guestbook 2.0 allows remote...CVE-2008-4751Public exploit4.3 MediumOctober 27, 2008
dbsoftlab vimp xStack-based buffer overflow in the VImpX.VImpAX ActiveX control (VImpX.ocx) 4.8.8.0 in DB...CVE-2008-4750Public exploit9.3 HighOctober 27, 2008
db soft lab vimp xMultiple insecure method vulnerabilities in the VImpX.VImpAX ActiveX control (VImpX.ocx) 4.8.8.0...CVE-2008-4749Public exploit9.3 HighOctober 27, 2008
kvircFormat string vulnerability in the URI handler in KVirc 3.4.0, when set as the default...CVE-2008-4748Public exploitFix available7.6 HighOctober 27, 2008
sun java access managerUnspecified vulnerability in the search feature in Sun Java System LDAP JDK before 4.20 allows...CVE-2008-47472.1 LowOctober 27, 2008
uniwin ecart professionalMultiple SQL injection vulnerabilities in Uniwin eCart Professional 2.0.17 allow remote attackers...CVE-2008-47467.5 HighOctober 27, 2008
uniwin ecart professionalCross-site scripting (XSS) vulnerability in emailFriend.asp in Uniwin eCart Professional 2.0.17...CVE-2008-47454.3 MediumOctober 27, 2008
dxproscripts dxshopcartSQL injection vulnerability in product_detail.php in DXShopCart 4.30mc allows remote attackers to...CVE-2008-4744Public exploit7.5 HighOctober 27, 2008
quidascript faq management scriptSQL injection vulnerability in index.php in QuidaScript FAQ Management Script allows remote...CVE-2008-4743Public exploit7.5 HighOctober 27, 2008
timetrexMultiple cross-site scripting (XSS) vulnerabilities in interface/Login.php in TimeTrex 2.2.11...CVE-2008-4742Public exploit4.3 MediumOctober 27, 2008
far-phpDirectory traversal vulnerability in index.php in FAR-PHP 1.00, when magic_quotes_gpc is disabled...CVE-2008-4741Public exploit5.0 MediumOctober 27, 2008
tinycmsDirectory traversal vulnerability in templater.php in the ZZ_Templater module in TinyCMS 1.1.2,...CVE-2008-4740Public exploit5.1 MediumOctober 27, 2008
lynxUntrusted search path vulnerability in Lynx before 2.8.6rel.4 allows local users to execute...CVE-2006-7234Public exploit4.6 MediumOctober 27, 2008
plugspaceDirectory traversal vulnerability in index.php in PlugSpace 0.1, when magic_quotes_gpc is...CVE-2008-4739Public exploit6.8 MediumOctober 24, 2008
tufat mycardSQL injection vulnerability in gallery.php in MyCard 1.0.2 allows remote attackers to execute...CVE-2008-4738Public exploit7.5 HighOctober 24, 2008
noc2 whodomliteCross-site scripting (XSS) vulnerability in wholite.cgi in WhoDomLite 1.1.3 allows remote...CVE-2008-4737Public exploit4.3 MediumOctober 24, 2008
aves rpg boardSQL injection vulnerability in index.php in RPG.Board 0.8 Beta2 and earlier allows remote...CVE-2008-4736Public exploit7.5 HighOctober 24, 2008
coastal coastPHP remote file inclusion vulnerability in header.php in Concord Asset, Software, and Ticket...CVE-2008-4735Public exploit8.5 HighOctober 24, 2008
pressography wp comment remix pluginCross-site request forgery (CSRF) vulnerability in the wpcr_do_options_page function in WP...CVE-2008-47347.5 HighOctober 24, 2008
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open