|
293081
|
- |
|
eset
|
smart_security
|
easdrv.sys in ESET Smart Security 3.0.667.0 allows local users to cause a denial of service (crash) via a crafted IOCTL 0x222003 request to the \\.\easdrv device interface.
|
CWE-20
Improper Input Validation
|
CVE-2008-7107
|
2017-09-29 10:33 |
2009-08-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
293082
|
- |
|
ifusionservices
|
ifdate
|
SQL injection vulnerability in members_search.php in iFusion Services iFdate 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the name field.
|
CWE-89
SQL Injection
|
CVE-2008-7114
|
2017-09-29 10:33 |
2009-08-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
293083
|
- |
|
belkin
|
f5d7632-4 wireless_g_router
|
The web interface to the Belkin Wireless G router and ADSL2 modem F5D7632-4V6 with firmware 6.01.08 allows remote attackers to bypass authentication and gain administrator privileges via a direct req…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2008-7115
|
2017-09-29 10:33 |
2009-08-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
293084
|
- |
|
webidsupport
|
webid
|
SQL injection vulnerability in the admin panel (admin/) in WeBid auction script 0.5.4 allows remote attackers to execute arbitrary SQL commands via the username.
|
CWE-89
SQL Injection
|
CVE-2008-7116
|
2017-09-29 10:33 |
2009-08-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
293085
|
- |
|
webidsupport
|
webid
|
eledicss.php in WeBid auction script 0.5.4 allows remote attackers to modify arbitrary cascading style sheets (CSS) files via a certain request with the file parameter set to style.css. NOTE: this c…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2008-7117
|
2017-09-29 10:33 |
2009-08-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
293086
|
- |
|
webidsupport
|
webid
|
WeBid auction script 0.5.4 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain SQL query logs via a direct request for logs/cron.…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2008-7118
|
2017-09-29 10:33 |
2009-08-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
293087
|
- |
|
webidsupport
|
webid
|
SQL injection vulnerability in item.php in WeBid auction script 0.5.4 allows remote attackers to execute arbitrary SQL commands via the id parameter.
|
CWE-89
SQL Injection
|
CVE-2008-7119
|
2017-09-29 10:33 |
2009-08-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
293088
|
- |
|
evansprogramming
|
registry_pro
|
Multiple insecure method vulnerabilities in an ActiveX control in (epRegPro.ocx) in Evans Programming Registry Pro allow remote attackers to read and modify sensitive registry keys via the (1) About,…
|
NVD-CWE-noinfo
|
CVE-2008-7122
|
2017-09-29 10:33 |
2009-08-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
293089
|
- |
|
zkup
|
zkup
|
Static code injection vulnerability in admin/configuration/modifier.php in zKup CMS 2.0 through 2.3 allows remote attackers to inject arbitrary PHP code into fichiers/config.php via a null byte (%00)…
|
CWE-94
Code Injection
|
CVE-2008-7123
|
2017-09-29 10:33 |
2009-08-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
293090
|
- |
|
zkup
|
zkup
|
zKup CMS 2.0 through 2.3 does not require administrative authentication for admin/configuration/modifier.php, which allows remote attackers to gain administrator privileges via a direct request, as d…
|
CWE-287
Improper Authentication
|
CVE-2008-7124
|
2017-09-29 10:33 |
2009-08-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|