Skip to content

CVEs published in November 2008

433 vulnerabilities, 92 critical, 1 exploited.

compact cms cmsCross-site request forgery (CSRF) vulnerability in CompactCMS 1.1 and earlier allows remote...CVE-2008-49094.3 MediumNovember 4, 2008
crossfiremaps/Info/combine.pl in CrossFire crossfire-maps 1.11.0 allows local users to overwrite arbitrary...CVE-2008-4908Fix available3.3 LowNovember 4, 2008
dovecotThe message parsing feature in Dovecot 1.1.4 and 1.1.5, when using the FETCH ENVELOPE command in...CVE-2008-4907Public exploitFix available4.3 MediumNovember 4, 2008
w1n78 lyricsSQL injection vulnerability in lyrics_song.php in the Lyrics (lyrics_menu) plugin 0.42 for e107...CVE-2008-4906Public exploit7.5 HighNovember 4, 2008
typosphere typoTypo 5.1.3 and earlier uses a hard-coded salt for calculating password hashes, which makes it...CVE-2008-49057.5 HighNovember 4, 2008
typosphere typoSQL injection vulnerability in the "Manage pages" feature (admin/pages) in Typo 5.1.3 and earlier...CVE-2008-49046.0 MediumNovember 4, 2008
typosphere typoCross-site scripting (XSS) vulnerability in the leave comment (feedback) feature in Typo 5.1.3...CVE-2008-49034.3 MediumNovember 4, 2008
scripts frenzy article publisher proSQL injection vulnerability in contact_author.php in Article Publisher Pro 1.5 allows remote...CVE-2008-4902Public exploit7.5 HighNovember 4, 2008
scripts frenzy article publisher proSQL injection vulnerability in admin/admin.php in Article Publisher Pro 1.5 allows remote...CVE-2008-4901Public exploit7.5 HighNovember 4, 2008
yourfreeworld classifieds blaster scriptSQL injection vulnerability in tr.php in YourFreeWorld Classifieds Blaster Script allows remote...CVE-2008-4900Public exploit7.5 HighNovember 4, 2008
planetluc ratemeCross-site request forgery (CSRF) vulnerability in Planetluc RateMe 1.3.3 allows remote attackers...CVE-2008-48996.8 MediumNovember 4, 2008
planetluc ratemeCross-site scripting (XSS) vulnerability in planetluc RateMe 1.3.3 allows remote attackers to...CVE-2008-48984.3 MediumNovember 4, 2008
logzSQL injection vulnerability in fichiers/add_url.php in Logz podcast CMS 1.3.1, when...CVE-2008-4897Public exploit6.8 MediumNovember 4, 2008
logzCross-site scripting (XSS) vulnerability in fichiers/add_url.php in Logz CMS 1.3.1 allows remote...CVE-2008-4896Public exploit4.3 MediumNovember 4, 2008
yourfreeworld downline builder scriptSQL injection vulnerability in tr.php in YourFreeWorld Downline Builder allows remote attackers...CVE-2008-4895Public exploit7.5 HighNovember 4, 2008
tribiq cmsDirectory traversal vulnerability in templates/mytribiqsite/tribal-GPL-1066/includes/header.inc...CVE-2008-4894Public exploit5.1 MediumNovember 4, 2008
tribiq cmsCross-site scripting (XSS) vulnerability in templates/mytribiqsite/tribal-GPL-1066/includes...CVE-2008-4893Public exploit2.6 LowNovember 4, 2008
planetluc mygalleryCross-site scripting (XSS) vulnerability in gallery.inc.php in Planetluc MyGallery 1.7.2 and...CVE-2008-48924.3 MediumNovember 4, 2008
planetluc signmeCross-site scripting (XSS) vulnerability in signme.inc.php in Planetluc SignMe 1.5 before 1.55...CVE-2008-48914.3 MediumNovember 4, 2008
1st news 4 professionalSQL injection vulnerability in products.php in 1st News 4 Professional (PR 1) allows remote...CVE-2008-4890Public exploit7.5 HighNovember 3, 2008
dev\!l\'s clanportalSQL injection vulnerability in index.php in deV!L'z Clanportal (DZCP) 1.4.9.6 and earlier allows...CVE-2008-4889Public exploit7.5 HighNovember 3, 2008
netriskCross-site scripting (XSS) vulnerability in error.php in NetRisk 2.0 and earlier allows remote...CVE-2008-4888Public exploit4.3 MediumNovember 3, 2008
netriskSQL injection vulnerability in index.php in NetRisk 2.0 and earlier allows remote attackers to...CVE-2008-4887Public exploit7.5 HighNovember 3, 2008
yourfreeworld shopping cart scriptSQL injection vulnerability in index.php in YourFreeWorld Shopping Cart Script allows remote...CVE-2008-4886Public exploit7.5 HighNovember 3, 2008
yourfreeworld scrolling text ads scriptSQL injection vulnerability in tr1.php in YourFreeWorld Scrolling Text Ads Script allows remote...CVE-2008-4885Public exploit7.5 HighNovember 3, 2008
yourfreeworld classifieds hosting scriptSQL injection vulnerability in tr.php in YourFreeWorld Classifieds Hosting Script allows remote...CVE-2008-4884Public exploit7.5 HighNovember 3, 2008
yourfreeworld blog blaster scriptSQL injection vulnerability in tr.php in YourFreeWorld Blog Blaster Script allows remote...CVE-2008-4883Public exploit7.5 HighNovember 3, 2008
yourfreeworld autoresponder hosting scriptSQL injection vulnerability in tr.php in YourFreeWorld Autoresponder Hosting Script allows remote...CVE-2008-4882Public exploit7.5 HighNovember 3, 2008
yourfreeworld reminder service scriptSQL injection vulnerability in tr.php in YourFreeWorld Reminder Service Script allows remote...CVE-2008-4881Public exploit7.5 HighNovember 3, 2008
maran php shopSQL injection vulnerability in prodshow.php in Maran PHP Shop allows remote attackers to execute...CVE-2008-4880Public exploit7.5 HighNovember 3, 2008
maran php shopSQL injection vulnerability in prod.php in Maran PHP Shop allows remote attackers to execute...CVE-2008-4879Public exploit7.5 HighNovember 3, 2008
cce-interact interactCross-site request forgery (CSRF) vulnerability in Interact 2.4.1 allows remote attackers to...CVE-2008-38686.8 MediumNovember 3, 2008
cce-interact interactSQL injection vulnerability in spaces/emailuser.php in Interact 2.4.1 allows remote attackers to...CVE-2008-38676.8 MediumNovember 3, 2008