CVEs published in December 2008

528 vulnerabilities, 129 critical, 0 exploited.

• teamst testlink Multiple cross-site scripting (XSS) vulnerabilities in TestLink before 1.8 RC1 allow remote... CVE-2008-5807 4.3 MediumDecember 31, 2008
• deltascripts php classifieds SQL injection vulnerability in login.php in DeltaScripts PHP Classifieds 7.5 and earlier allows... CVE-2008-5806 Public exploit 7.5 HighDecember 31, 2008
• deltascripts php classifieds SQL injection vulnerability in detail.php in DeltaScripts PHP Classifieds 7.5 and earlier allows... CVE-2008-5805 Public exploit 7.5 HighDecember 31, 2008
• e-topbiz number links 1 php script SQL injection vulnerability in admin/admin_catalog.php in e-topbiz Number Links 1 Php Script... CVE-2008-5804 Public exploit 7.5 HighDecember 31, 2008
• e-topbiz online store SQL injection vulnerability in admin/login.php in E-topbiz Online Store 1.0 allows remote... CVE-2008-5803 Public exploit 7.5 HighDecember 31, 2008
• e-topbiz online store SQL injection vulnerability in index.php in E-topbiz Online Store 1.0 allows remote attackers to... CVE-2008-5802 Public exploit 7.5 HighDecember 31, 2008
• typo3 dictionary extension Unspecified vulnerability in the Dictionary (rtgdictionary) extension 0.1.9 and earlier for TYPO3... CVE-2008-5801 10.0 HighDecember 31, 2008
• typo3 fsmi people, wir ber uns extension +1 more SQL injection vulnerability in the Wir ber uns [sic] (fsmi_people) extension 0.0.24 and earlier... CVE-2008-5800 7.5 HighDecember 31, 2008
• typo3 wir ber uns extension Cross-site scripting (XSS) vulnerability in the Wir ber uns (fsmi_people) extension 0.0.24 and... CVE-2008-5799 4.3 MediumDecember 31, 2008
• typo3 cms poll system extension SQL injection vulnerability in the CMS Poll system (cms_poll) extension before 0.1.1 for TYPO3... CVE-2008-5798 7.5 HighDecember 31, 2008
• typo3 advcalendar extension SQL injection vulnerability in the advCalendar extension 0.3.1 and earlier for TYPO3 allows... CVE-2008-5797 7.5 HighDecember 31, 2008
• typo3 eluna page comments extension SQL injection vulnerability in the eluna Page Comments (eluna_pagecomments) extension 1.1.2 and... CVE-2008-5796 7.5 HighDecember 31, 2008
• typo3 eluna page comments extension Cross-site scripting (XSS) vulnerability in the eluna Page Comments (eluna_pagecomments)... CVE-2008-5795 4.3 MediumDecember 31, 2008
• lovecms Directory traversal vulnerability in system/admin/images.php in LoveCMS 1.6.2 Final allows remote... CVE-2008-5794 Public exploit 5.0 MediumDecember 31, 2008
• recly clickheat-heatmap Multiple PHP remote file inclusion vulnerabilities in the Clickheat - Heatmap stats ... CVE-2008-5793 Public exploit EPSS 24.5% 6.8 MediumDecember 31, 2008
• indisguise indiscripts enthusiast PHP remote file inclusion vulnerability in show_joined.php in Indiscripts Enthusiast 3.1.4, and... CVE-2008-5792 Public exploit 6.8 MediumDecember 31, 2008
• prestashop Multiple unspecified vulnerabilities in PrestaShop e-Commerce Solution before 1.1 Beta 2 (aka 1.1... CVE-2008-5791 10.0 HighDecember 31, 2008
• recly competitions Multiple PHP remote file inclusion vulnerabilities in the Recly!Competitions (com_competitions)... CVE-2008-5790 Public exploit EPSS 36.4% 7.5 HighDecember 31, 2008
• recly interactive feederator Multiple PHP remote file inclusion vulnerabilities in the Recly Interactive Feederator ... CVE-2008-5789 Public exploit EPSS 45.0% 7.5 HighDecember 31, 2008
• domainsellerpro domain seller pro SQL injection vulnerability in index.php in Domain Seller Pro 1.5 allows remote attackers to... CVE-2008-5788 Public exploit 7.5 HighDecember 31, 2008
• arabportal arab portal Directory traversal vulnerability in mod.php in Arab Portal 2.1 on Windows allows remote... CVE-2008-5787 Public exploit 5.4 MediumDecember 31, 2008
• infrae silva, silva find +1 more Cross-site scripting (XSS) vulnerability in the Silva Find extension 1.1.5 and earlier in Silva 1... CVE-2008-5786 4.3 MediumDecember 31, 2008
• v3chat v3 chat profiles dating script SQL injection vulnerability in V3 Chat - Profiles/Dating Script 3.0.2 allows remote attackers to... CVE-2008-5785 Public exploit 7.5 HighDecember 31, 2008
• v3chat v3 chat profiles dating script V3 Chat - Profiles/Dating Script 3.0.2 allows remote attackers to bypass authentication and gain... CVE-2008-5784 Public exploit 9.8 CriticalDecember 31, 2008
• v3chat v3 chat live support admin/index.php in V3 Chat Live Support 3.0.4 allows remote attackers to bypass authentication... CVE-2008-5783 Public exploit 7.5 HighDecember 31, 2008
• zeeways zeematri SQL injection vulnerability in bannerclick.php in ZeeMatri 3.0 allows remote attackers to execute... CVE-2008-5782 Public exploit 7.5 HighDecember 31, 2008
• cfagcms SQL injection vulnerability in right.php in Cant Find A Gaming CMS (CFAGCMS) 1.0 Beta 1 allows... CVE-2008-5781 Public exploit 7.5 HighDecember 30, 2008
• hostforest forest blog Forest Blog 1.3.2 stores sensitive information under the web root with insufficient access... CVE-2008-5780 Public exploit 5.0 MediumDecember 30, 2008
• flds script flds SQL injection vulnerability in lpro.php in Free Links Directory Script (FLDS) 1.2a allows remote... CVE-2008-5779 Public exploit 7.5 HighDecember 30, 2008
• flds script flds SQL injection vulnerability in report.php in Free Links Directory Script (FLDS) 1.2a allows... CVE-2008-5778 Public exploit 7.5 HighDecember 30, 2008
• cadenix SQL injection vulnerability in index.php in CadeNix allows remote attackers to execute arbitrary... CVE-2008-5777 Public exploit 7.5 HighDecember 30, 2008
• apertoblog Multiple directory traversal vulnerabilities in Aperto Blog 0.1.1 allow remote attackers to... CVE-2008-5776 Public exploit 7.5 HighDecember 30, 2008
• apertoblog SQL injection vulnerability in categories.php in Aperto Blog 0.1.1 allows remote attackers to... CVE-2008-5775 Public exploit 7.5 HighDecember 30, 2008
• aspsiteware homebuilder Multiple SQL injection vulnerabilities in ASPSiteWare HomeBuilder 1.0 and 2.0 allow remote... CVE-2008-5774 Public exploit 7.5 HighDecember 30, 2008
• nukedit Nukedit 4.9.8 stores sensitive information under the web root with insufficient access control,... CVE-2008-5773 Public exploit 5.0 MediumDecember 30, 2008
• aspsiteware realtylistings Multiple SQL injection vulnerabilities in ASPSiteWare RealtyListings 1.0 and 2.0 allow remote... CVE-2008-5772 Public exploit 7.5 HighDecember 30, 2008
• phpweather Directory traversal vulnerability in test.php in PHP Weather 2.2.2 allows remote attackers to... CVE-2008-5771 Public exploit 7.5 HighDecember 30, 2008
• phpweather Cross-site scripting (XSS) vulnerability in config/make_config.php in PHP Weather 2.2.2 allows... CVE-2008-5770 Public exploit 4.3 MediumDecember 30, 2008
• kerio mailserver Multiple cross-site scripting (XSS) vulnerabilities in Kerio MailServer before 6.6.2 allow remote... CVE-2008-5769 4.3 MediumDecember 30, 2008
• sirium am events module SQL injection vulnerability in print.php in the AM Events (aka Amevents) module 0.22 for XOOPS... CVE-2008-5768 Public exploit 7.5 HighDecember 30, 2008
• gazatem gnews publisher SQL injection vulnerability in authors.asp in gNews Publisher allows remote attackers to execute... CVE-2008-5767 Public exploit 7.5 HighDecember 30, 2008
• fascript faupload SQL injection vulnerability in download.php in Farsi Script Faupload allows remote attackers to... CVE-2008-5766 Public exploit 7.5 HighDecember 30, 2008
• 2500mhz worksimple WorkSimple 1.2.1 stores sensitive information under the web root with insufficient access control... CVE-2008-5765 Public exploit 5.0 MediumDecember 30, 2008
• 2500mhz worksimple PHP remote file inclusion vulnerability in calendar.php in WorkSimple 1.2.1, when... CVE-2008-5764 Public exploit EPSS 45.4% 9.3 HighDecember 30, 2008
• mariovaldez simple text-file login script PHP remote file inclusion vulnerability in slogin_lib.inc.php in Simple Text-File Login Script ... CVE-2008-5763 Public exploit EPSS 39.2% 7.5 HighDecember 30, 2008
• mariovaldez simple text-file login script Simple Text-File Login Script (SiTeFiLo) 1.0.6 stores sensitive information under the web root... CVE-2008-5762 Public exploit 5.0 MediumDecember 30, 2008
• flatnux Multiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS (aka Flatnuke3) 2008-12-11... CVE-2008-5761 Public exploit 4.3 MediumDecember 30, 2008
• kerio mailserver Cross-site scripting (XSS) vulnerability in error413.php in Kerio MailServer before 6.6.2 allows... CVE-2008-5760 4.3 MediumDecember 30, 2008
• flatnux Cross-site scripting (XSS) vulnerability in FlatnuX CMS (aka Flatnuke3) 2008-12-11 allows remote... CVE-2008-5759 Public exploit 4.3 MediumDecember 30, 2008
• phparanoid Cross-site request forgery (CSRF) vulnerability in PHParanoid before 0.5 allows remote attackers... CVE-2008-5758 6.8 MediumDecember 30, 2008
• Show olderLoading…