|
284491
|
- |
|
mplayer xine
|
mplayer xine-lib
|
Array index vulnerability in libmpdemux/demux_audio.c in MPlayer 1.0rc2 and SVN before r25917, and possibly earlier versions, as used in Xine-lib 1.1.10, might allow remote attackers to execute arbit…
|
CWE-189
Numeric Errors
|
CVE-2008-0486
|
2018-10-16 07:00 |
2008-02-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
284492
|
- |
|
the_net_guys
|
aspired2protect
|
Multiple SQL injection vulnerabilities in login.asp in ASPired2Protect allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters. NOTE: some of these …
|
CWE-89
SQL Injection
|
CVE-2008-0487
|
2018-10-16 07:00 |
2008-01-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
284493
|
- |
|
vb_marketing
|
vb_marketing
|
Directory traversal vulnerability in tseekdir.cgi in VB Marketing allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the location parameter.
|
CWE-22
Path Traversal
|
CVE-2008-0488
|
2018-10-16 07:00 |
2008-01-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
284494
|
- |
|
clansphere
|
clansphere
|
Directory traversal vulnerability in install.php in Clansphere 2007.4.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter.
|
CWE-22
Path Traversal
|
CVE-2008-0489
|
2018-10-16 07:00 |
2008-01-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
284495
|
- |
|
ampjuke
|
ampjuke
|
Cross-site scripting (XSS) vulnerability in index.php in AmpJuke 0.7.0 allows remote attackers to inject arbitrary web script or HTML via the limit parameter in a search action.
|
CWE-79
Cross-site Scripting
|
CVE-2008-0496
|
2018-10-16 07:00 |
2008-01-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
284496
|
- |
|
nucleus_cms
|
nucleus_cms
|
Cross-site scripting (XSS) vulnerability in action.php in Nucleus CMS 3.31 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO, which is not quoted when processing PHP_SE…
|
CWE-79
Cross-site Scripting
|
CVE-2008-0497
|
2018-10-16 07:00 |
2008-01-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
284497
|
- |
|
coppermine
|
coppermine_photo_gallery
|
Multiple cross-site scripting (XSS) vulnerabilities in docs/showdoc.php in Coppermine Photo Gallery (CPG) before 1.4.15 allow remote attackers to inject arbitrary web script or HTML via the (1) h and…
|
CWE-79
Cross-site Scripting
|
CVE-2008-0505
|
2018-10-16 07:00 |
2008-02-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
284498
|
- |
|
coppermine
|
coppermine_photo_gallery
|
include/imageObjectIM.class.php in Coppermine Photo Gallery (CPG) before 1.4.15, when the ImageMagick picture processing method is configured, allows remote attackers to execute arbitrary commands vi…
|
CWE-20
Improper Input Validation
|
CVE-2008-0506
|
2018-10-16 07:00 |
2008-02-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
284499
|
- |
|
wordpress
|
permalinks_migration_plugin
|
Cross-site request forgery (CSRF) vulnerability in deans_permalinks_migration.php in the Dean's Permalinks Migration 1.0 plugin for WordPress allows remote attackers to modify the oldstructure (aka d…
|
CWE-352
Origin Validation Error
|
CVE-2008-0508
|
2018-10-16 07:00 |
2008-02-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
284500
|
- |
|
phpcms
|
phpcms
|
Directory traversal vulnerability in parser/include/class.cache_phpcms.php in phpCMS 1.2.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter to parser/parser.ph…
|
CWE-22
Path Traversal
|
CVE-2008-0513
|
2018-10-16 07:00 |
2008-02-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|