|
284581
|
- |
|
cherrypy
|
cherrypy
|
Directory traversal vulnerability in the _get_file_path function in (1) lib/sessions.py in CherryPy 3.0.x up to 3.0.2, (2) filter/sessionfilter.py in CherryPy 2.1, and (3) filter/sessionfilter.py in …
|
CWE-22
Path Traversal
|
CVE-2008-0252
|
2018-10-16 06:58 |
2008-01-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
284582
|
- |
|
binn
|
sbuilder
|
SQL injection vulnerability in full_text.php in Binn SBuilder allows remote attackers to execute arbitrary SQL commands via the nid parameter.
|
CWE-89
SQL Injection
|
CVE-2008-0253
|
2018-10-16 06:58 |
2008-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
284583
|
- |
|
eticket
|
eticket
|
Cross-site request forgery (CSRF) vulnerability in admin.php in eTicket 1.5.5.2 allows remote attackers to change the administrative password and possibly perform other administrative tasks. NOTE: e…
|
CWE-352
Origin Validation Error
|
CVE-2008-0266
|
2018-10-16 06:58 |
2008-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
284584
|
- |
|
eticket
|
eticket
|
Multiple SQL injection vulnerabilities in eTicket 1.5.5.2 allow remote authenticated users to execute arbitrary SQL commands via the (1) status, (2) sort, and (3) way parameters to search.php; and al…
|
CWE-89
SQL Injection
|
CVE-2008-0267
|
2018-10-16 06:58 |
2008-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
284585
|
- |
|
eticket
|
eticket
|
Cross-site scripting (XSS) vulnerability in view.php in eTicket 1.5.5.2 allows remote attackers to inject arbitrary web script or HTML via the s parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2008-0268
|
2018-10-16 06:58 |
2008-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
284586
|
- |
|
mtcms
|
mtcms
|
SQL injection vulnerability in index.php in MTCMS 2.0 and possibly earlier versions allows remote attackers to execute arbitrary SQL commands via the (1) a or (2) cid parameter.
|
CWE-89
SQL Injection
|
CVE-2008-0280
|
2018-10-16 06:58 |
2008-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
284587
|
- |
|
simple_machines
|
simple_machines_smf
|
Cross-site scripting (XSS) vulnerability in Simple Machines Forum (SMF) 1.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) Itemid or (2) topic arguments.
|
CWE-79
Cross-site Scripting
|
CVE-2008-0284
|
2018-10-16 06:58 |
2008-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
284588
|
- |
|
article_dashboard
|
article_dashboard
|
SQL injection vulnerability in admin/login.php in Article Dashboard allows remote attackers to execute arbitrary SQL commands via the (1) user or (2) password fields.
|
CWE-89
SQL Injection
|
CVE-2008-0286
|
2018-10-16 06:58 |
2008-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
284589
|
- |
|
imagealbum
|
imagealbum
|
Multiple SQL injection vulnerabilities in ImageAlbum 2.0.0b2 allow remote attackers to execute arbitrary SQL commands via the id, which is not properly handled in (1) classes/IADomain.php, (2) classe…
|
CWE-89
SQL Injection
|
CVE-2008-0288
|
2018-10-16 06:58 |
2008-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
284590
|
- |
|
mansion_productions
|
member_area_system
|
PHP remote file inclusion vulnerability in view_func.php in Member Area System (MAS) 1.7 and possibly others allows remote attackers to execute arbitrary PHP code via a URL in the i parameter. NOTE:…
|
CWE-94
Code Injection
|
CVE-2008-0289
|
2018-10-16 06:58 |
2008-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|